Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json)
Hash identifier: o/9Eb9R7WjfTeCiS2XMQeQBgmMDk5chEnOK/aM7ruXI=
Subject key identifier: 42:49:F3:44:64:92:66:AB:78:08:F2:49:EE:DE:DE:EA:91:CE:C3:9A
Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6
Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6
Certificate serial: 726EBC776D2780ADA61F33514845AF010FCFCC65
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
Manifest number: 02EF
Signing time: Tue 28 Apr 2026 23:42:23 +0000
Manifest this update: Tue 28 Apr 2026 23:37:23 +0000
Manifest next update: Sat 02 May 2026 09:07:23 +0000
Files and hashes: 1: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: SXdFHU4k6tKQrmF4EpBcdrt1sMs20jDSXn8MIK5rMwA=)
2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6e:bc:77:6d:27:80:ad:a6:1f:33:51:48:45:af:01:0f:cf:cc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6
Validity
Not Before: Apr 28 23:37:23 2026 GMT
Not After : May 2 09:07:23 2026 GMT
Subject: CN=4249F344649266AB7808F249EEDEDEEA91CEC39A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:b0:cd:7c:76:6c:e6:ba:31:61:68:8a:0a:
81:f8:1b:06:82:b4:b3:db:54:26:7f:56:f6:c8:b4:
7f:33:e7:27:fd:32:9d:15:74:e2:20:90:f9:05:8c:
05:81:44:38:1d:bc:a5:4c:02:05:ba:4f:3d:58:eb:
49:b1:f7:40:50:fd:a3:e6:ff:2c:08:02:f8:af:ad:
9f:3b:d3:d4:ad:b5:54:66:36:63:d0:d0:57:fa:71:
3b:d1:7c:20:14:82:47:21:89:e1:55:ba:d8:08:6a:
37:32:46:37:a6:6a:8a:5c:29:6c:9f:c3:ad:e0:43:
6f:77:fe:a2:63:6f:24:84:0b:a7:b2:88:45:15:e8:
83:2a:e5:6f:18:96:8f:0a:5a:14:1c:b5:dc:71:45:
08:5b:cd:4e:59:4b:92:25:79:c7:fc:f1:52:10:2a:
4c:7b:25:5b:d2:40:4f:06:03:0d:53:5f:37:3c:c1:
bc:3a:65:76:ca:87:9d:fd:c1:02:34:b8:dd:94:1b:
b8:a6:21:1a:92:41:d0:f9:50:e8:04:24:01:46:6e:
b5:72:a1:fc:87:14:25:55:f1:9a:fb:0b:72:ba:da:
5a:d4:d4:28:de:40:79:f9:f0:a6:51:66:58:6a:ae:
12:f7:16:3d:88:e7:34:9e:9a:88:e1:84:68:9c:7b:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:F3:44:64:92:66:AB:78:08:F2:49:EE:DE:DE:EA:91:CE:C3:9A
X509v3 Authority Key Identifier:
keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:86:8b:55:fc:60:c0:6f:ff:96:84:2a:91:2a:3f:28:21:
ad:21:d1:2f:b9:35:98:ab:5a:36:31:79:d1:62:76:00:87:ac:
82:f4:8d:e6:5d:74:17:48:67:80:86:7f:c0:24:f0:95:25:66:
9d:6a:1c:b5:88:c1:65:ae:c4:c9:9e:05:48:26:e3:a3:76:77:
a2:a6:22:02:12:59:72:ec:00:09:de:49:5e:6b:27:64:c9:d2:
35:54:63:19:b7:89:a4:af:6f:5e:da:2c:6b:d3:94:c5:db:27:
c9:3f:11:9f:aa:75:19:af:a9:32:7e:c0:e7:5e:39:ed:7e:ac:
3c:1a:4a:d4:a5:ea:5a:3a:22:05:65:69:07:28:58:de:ec:92:
e2:32:f3:6e:23:67:5f:e1:c5:aa:74:a2:7e:53:2d:85:e7:8a:
48:73:f7:57:ad:79:fc:de:ab:ac:97:3c:8d:9a:30:f0:bf:b3:
b6:01:80:e0:f0:51:16:4b:2a:3f:72:3f:e1:ef:6e:e4:03:b7:
59:c9:98:58:99:86:d0:92:af:58:fb:8a:a3:96:b8:f9:33:74:
61:76:33:4b:df:0b:0a:8c:29:68:80:62:b7:f3:5c:0a:00:62:
d6:c1:1d:2c:c4:07:d9:94:37:2e:5d:cf:74:ec:23:9c:2f:f3:
59:a0:13:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcm68d20ngK2mHzNRSEWvAQ/PzGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4
MkMzQzJGNjAeFw0yNjA0MjgyMzM3MjNaFw0yNjA1MDIwOTA3MjNaMDMxMTAvBgNV
BAMTKDQyNDlGMzQ0NjQ5MjY2QUI3ODA4RjI0OUVFREVERUVBOTFDRUMzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJLDNfHZs5roxYWiKCoH4GwaC
tLPbVCZ/VvbItH8z5yf9Mp0VdOIgkPkFjAWBRDgdvKVMAgW6Tz1Y60mx90BQ/aPm
/ywIAvivrZ8709SttVRmNmPQ0Ff6cTvRfCAUgkchieFVutgIajcyRjemaopcKWyf
w63gQ293/qJjbySEC6eyiEUV6IMq5W8Ylo8KWhQctdxxRQhbzU5ZS5Ilecf88VIQ
Kkx7JVvSQE8GAw1TXzc8wbw6ZXbKh539wQI0uN2UG7imIRqSQdD5UOgEJAFGbrVy
ofyHFCVV8Zr7C3K62lrU1CjeQHn58KZRZlhqrhL3Fj2I5zSemojhhGice1H/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQknzRGSSZqt4CPJJ7t7e6pHOw5owHwYDVR0j
BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD
RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz
QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1
NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG
REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD9/hotV/GDAb/+WhCqRKj8oIa0h0S+5NZir
WjYxedFidgCHrIL0jeZddBdIZ4CGf8Ak8JUlZp1qHLWIwWWuxMmeBUgm46N2d6Km
IgISWXLsAAneSV5rJ2TJ0jVUYxm3iaSvb17aLGvTlMXbJ8k/EZ+qdRmvqTJ+wOde
Oe1+rDwaStSl6lo6IgVlaQcoWN7skuIy824jZ1/hxap0on5TLYXnikhz91etefze
q6yXPI2aMPC/s7YBgODwURZLKj9yP+HvbuQDt1nJmFiZhtCSr1j7iqOWuPkzdGF2
M0vfCwqMKWiAYrfzXAoAYtbBHSzEB9mUNy5dz3TsI5wv81mgE24=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:43 2026 by rpki-client