
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json)
Hash identifier: qvTqKZi+b7rplskNqLwvilq04Ba+uUskOr5/qMHskmg=
Subject key identifier: 17:37:00:10:F6:F8:F0:68:4C:B0:9A:01:E5:AA:29:DF:77:38:BC:FE
Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7
Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
Certificate serial: 0FEBD051716BAB8C28150484ADE2A896BF984A12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
Manifest number: 01F1
Signing time: Tue 28 Apr 2026 10:06:25 +0000
Manifest this update: Tue 28 Apr 2026 10:01:25 +0000
Manifest next update: Fri 01 May 2026 12:30:25 +0000
Files and hashes: 1: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: T6EE7CbW35s45e0263f+URwYA2lm21nSH0YTz5UoU4o=)
2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: jW8jdRnHuWV/CGzvWek2GgncM27aFTLWkhF7bsF25vc=)
3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: qv17qnRz61RQph0IpXg8jbxkTC6WLBRRQzF218e9QvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:eb:d0:51:71:6b:ab:8c:28:15:04:84:ad:e2:a8:96:bf:98:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
Validity
Not Before: Apr 28 10:01:25 2026 GMT
Not After : May 1 12:30:25 2026 GMT
Subject: CN=17370010F6F8F0684CB09A01E5AA29DF7738BCFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:b4:dd:d2:7e:c9:a2:e4:f7:b8:1f:73:97:
2e:e4:92:77:9f:4f:d9:0e:db:c9:5f:59:1e:14:3c:
2e:33:64:9c:48:dd:e8:a8:df:f1:1c:37:a8:28:c9:
0e:aa:c9:80:68:ee:ce:37:19:85:29:d0:27:98:12:
69:ef:c1:46:35:85:f2:5c:8b:6c:68:1e:bc:18:59:
18:27:62:d7:68:f6:75:76:98:21:ba:e0:cf:d1:92:
c0:cb:c4:d6:ad:2a:3d:16:86:fc:98:c8:c5:61:90:
a4:44:d4:dd:44:fa:b4:e3:74:e9:48:d6:e4:c6:8e:
41:c3:ce:e1:1e:59:0d:86:06:aa:aa:9a:5e:1a:73:
eb:16:42:f3:34:42:a8:be:4f:e1:78:82:04:41:68:
49:e1:2a:bc:f4:9c:e2:fa:15:67:8a:87:19:fc:6b:
c3:97:83:e3:69:05:46:6d:69:d9:c7:4c:14:7b:47:
6a:b1:16:bd:2e:a8:f0:35:6c:9e:d6:9a:d3:15:29:
51:8d:3c:25:78:96:a7:7a:61:4d:0f:43:1a:d2:35:
3e:2b:70:9d:93:43:d6:c1:a2:d6:b5:6d:53:49:d5:
4d:c9:31:ac:aa:45:12:cf:ac:7f:97:41:80:ac:0b:
a2:ed:83:ba:20:2a:70:7a:3a:0e:9d:b2:5a:ac:1b:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:00:10:F6:F8:F0:68:4C:B0:9A:01:E5:AA:29:DF:77:38:BC:FE
X509v3 Authority Key Identifier:
keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ba:49:27:1e:95:26:87:f3:b6:f8:db:37:c4:bd:c2:65:3a:
87:a3:1e:eb:6e:45:0c:8e:8e:03:91:2f:07:32:63:6f:68:cd:
c2:30:32:ed:9e:3b:20:d9:17:11:89:e5:ef:f7:c4:3b:11:d4:
d3:52:9a:f7:d1:4f:8d:23:dd:f6:8e:70:cd:d0:16:0f:0c:b5:
ae:45:c5:19:ef:58:d9:ed:11:95:f2:1b:45:35:c0:bc:bc:01:
00:5a:da:a9:76:3f:c0:96:59:12:5c:db:bf:23:e5:78:57:a0:
8a:79:25:63:4a:4e:af:b9:9d:5a:77:f1:7f:79:7e:3a:8b:c6:
33:13:3d:f9:c0:ef:a1:34:ed:72:48:08:fa:eb:30:89:6c:53:
17:a9:8b:55:42:bd:6f:f7:48:c8:3c:7b:ee:be:9b:18:26:d2:
73:d7:e6:e1:d4:d9:72:71:3d:9f:2f:15:88:ed:59:76:98:24:
11:b0:53:ad:f3:b1:ab:48:88:18:8f:9c:d3:5e:19:0d:db:c7:
62:00:22:44:dc:ce:97:50:90:34:20:5f:b8:c5:b4:1e:ee:c9:
6e:92:da:6b:d7:cf:2d:be:c8:90:91:90:65:f3:f9:53:1b:95:
af:c3:8d:a9:bd:91:a3:73:10:c9:36:84:6d:a1:1f:ae:78:e6:
90:52:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:59 2026 by rpki-client