Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json)
Hash identifier: Vmk6xq8HPogromPize9qalKaBOcG3wHgIx/4vEbwA7o=
Subject key identifier: 59:C7:84:B5:1A:D8:12:42:45:D2:5E:56:75:42:72:B3:22:18:53:3A
Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F
Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
Certificate serial: 63962AE4BA8593A651BA5A3B94E37ED8F37BB1DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
Manifest number: 0277
Signing time: Tue 28 Apr 2026 15:11:27 +0000
Manifest this update: Tue 28 Apr 2026 15:06:27 +0000
Manifest next update: Fri 01 May 2026 21:30:27 +0000
Files and hashes: 1: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: eJ1XGH3PQ4o+OhkD3fQ4IKKdCGLyiVJ505C/lW7FPoc=)
2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: yK7nyqbkyDPHD1QbGGLBt44X/fl33LRlABzMx16APXY=)
3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: Igv98vYEgbx/H/nLs5GFhs4VaMX48c/Gm1Cn6D0gniE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:96:2a:e4:ba:85:93:a6:51:ba:5a:3b:94:e3:7e:d8:f3:7b:b1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
Validity
Not Before: Apr 28 15:06:27 2026 GMT
Not After : May 1 21:30:27 2026 GMT
Subject: CN=59C784B51AD8124245D25E56754272B32218533A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:88:34:16:d7:81:a6:dd:c9:3d:51:75:7b:
45:58:68:a9:4b:7c:e7:4d:8d:db:51:60:33:8d:c5:
11:d4:f8:bd:69:b1:aa:91:ec:9c:13:62:c8:52:d9:
84:64:ce:8e:65:4c:e1:91:65:32:aa:39:5b:95:1a:
c8:69:03:61:32:56:10:0a:f9:e2:d7:31:df:d3:55:
39:59:cc:7b:88:22:e2:7d:12:f9:45:3f:66:3c:7c:
43:c7:be:40:dd:9b:04:d2:8a:b2:f5:9f:2c:9a:de:
76:b6:5b:4f:3d:d4:17:21:17:16:ec:af:a2:d6:2a:
73:ac:83:80:bb:61:fa:4c:ed:3b:4c:4c:c4:0f:5d:
38:65:15:57:91:d7:41:4d:e4:a3:f4:7b:d1:b8:40:
22:fc:76:ea:dd:75:06:0b:2c:c6:25:da:5f:c7:15:
d7:01:53:81:ed:13:3a:ea:9b:01:2c:1f:93:ae:dc:
25:9b:d8:62:ea:a6:77:0d:f0:89:8b:bf:df:4b:55:
9a:f9:cf:60:b6:70:bb:ae:86:03:ec:f0:0e:db:de:
0a:0c:64:07:07:87:01:99:ce:81:67:97:1e:76:7e:
bc:41:20:dc:23:8e:89:9b:33:1a:38:57:81:ed:0c:
9e:d6:25:20:98:a0:29:08:2f:1d:86:f4:1f:e5:3d:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:84:B5:1A:D8:12:42:45:D2:5E:56:75:42:72:B3:22:18:53:3A
X509v3 Authority Key Identifier:
keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:83:e5:c6:f6:bb:71:30:71:a8:96:88:b8:e8:04:fd:f1:d5:
cd:ab:81:0b:da:7b:71:65:38:30:99:2c:ae:8a:c2:54:4c:8f:
ec:ee:17:aa:bf:91:d4:60:82:62:5d:28:91:4c:4b:0b:ba:30:
04:30:e5:a0:8d:5a:61:ad:73:5c:01:7a:13:53:de:de:3c:e9:
f9:bf:18:09:f6:b9:6f:36:fc:91:e5:64:d5:67:82:3f:16:e4:
54:1f:33:eb:f5:c0:81:4b:a8:0a:d3:12:96:18:22:2a:a6:20:
f9:6f:63:43:8e:b0:92:fa:3a:4f:3b:d9:fa:e5:2b:e9:0a:e5:
3c:8f:c1:3a:89:dd:06:a7:09:b8:4a:6b:a9:52:67:b2:a7:29:
02:fa:1d:41:9a:4a:53:95:6b:61:a4:83:7f:84:d4:47:84:25:
e4:35:b1:56:af:db:25:a9:c3:7f:8f:1d:03:33:e8:83:74:a8:
7c:05:52:69:e0:79:fd:d2:75:2a:58:a3:b9:34:e5:e3:8b:ee:
29:e6:2c:ea:5c:df:c6:02:5a:cf:83:ee:aa:10:43:6d:91:f2:
81:28:cb:da:8f:5d:7b:31:1a:e2:8d:b4:6d:12:b7:53:50:f5:
d1:29:26:f5:85:9c:9a:0e:29:a2:08:c4:17:ef:3c:ff:98:d0:
40:e4:68:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY5Yq5LqFk6ZRulo7lON+2PN7sd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3
QjQ5OUQyRjAeFw0yNjA0MjgxNTA2MjdaFw0yNjA1MDEyMTMwMjdaMDMxMTAvBgNV
BAMTKDU5Qzc4NEI1MUFEODEyNDI0NUQyNUU1Njc1NDI3MkIzMjIxODUzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4dog0FteBpt3JPVF1e0VYaKlL
fOdNjdtRYDONxRHU+L1psaqR7JwTYshS2YRkzo5lTOGRZTKqOVuVGshpA2EyVhAK
+eLXMd/TVTlZzHuIIuJ9EvlFP2Y8fEPHvkDdmwTSirL1nyya3na2W0891BchFxbs
r6LWKnOsg4C7YfpM7TtMTMQPXThlFVeR10FN5KP0e9G4QCL8durddQYLLMYl2l/H
FdcBU4HtEzrqmwEsH5Ou3CWb2GLqpncN8ImLv99LVZr5z2C2cLuuhgPs8A7b3goM
ZAcHhwGZzoFnlx52frxBINwjjombMxo4V4HtDJ7WJSCYoCkILx2G9B/lPTA1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWceEtRrYEkJF0l5WdUJysyIYUzowHwYDVR0j
BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz
ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5
OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0
NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3
OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADSD5cb2u3EwcaiWiLjoBP3x1c2rgQvae3Fl
ODCZLK6KwlRMj+zuF6q/kdRggmJdKJFMSwu6MAQw5aCNWmGtc1wBehNT3t486fm/
GAn2uW82/JHlZNVngj8W5FQfM+v1wIFLqArTEpYYIiqmIPlvY0OOsJL6Ok872frl
K+kK5TyPwTqJ3QanCbhKa6lSZ7KnKQL6HUGaSlOVa2Gkg3+E1EeEJeQ1sVav2yWp
w3+PHQMz6IN0qHwFUmngef3SdSpYo7k05eOL7inmLOpc38YCWs+D7qoQQ22R8oEo
y9qPXXsxGuKNtG0St1NQ9dEpJvWFnJoOKaIIxBfvPP+Y0EDkaAw=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:52 2026 by rpki-client