
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json)
Hash identifier: H9A6+/fBT5m0hBwhb48T0mqzxshWTOpirSNnHJE9DOE=
Subject key identifier: 45:1C:2B:61:41:9F:9B:AC:16:80:A0:83:CC:77:3A:52:20:F7:93:DE
Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5
Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
Certificate serial: 38585C49784B22BE9C0F1DCD8FD05C39F9243AB3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
Manifest number: F5
Signing time: Tue 28 Apr 2026 20:10:01 +0000
Manifest this update: Tue 28 Apr 2026 20:05:01 +0000
Manifest next update: Fri 01 May 2026 22:06:01 +0000
Files and hashes: 1: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk=)
2: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA=)
3: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: rWkD/REzcU1dPCmYOlc0GWTqR3BaVRJbmkRMpkvZLoM=)
4: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: llbK8JVFmbrLSSzLv9Ovv2C1Mqs66Yxl6xm9VnsVOAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:58:5c:49:78:4b:22:be:9c:0f:1d:cd:8f:d0:5c:39:f9:24:3a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
Validity
Not Before: Apr 28 20:05:01 2026 GMT
Not After : May 1 22:06:01 2026 GMT
Subject: CN=451C2B61419F9BAC1680A083CC773A5220F793DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:6d:b2:3d:37:fe:85:18:bd:a9:cf:a5:5e:
f3:7d:f7:56:de:1b:8e:34:75:f8:71:99:4f:ae:db:
b2:0c:d3:07:3b:6d:7a:00:4d:f2:97:d2:33:09:69:
f4:eb:a4:e9:da:07:b1:f6:e7:bb:41:5a:cb:b4:5a:
46:f8:1c:41:47:7d:02:c6:2c:c4:20:83:c3:53:d2:
25:d8:52:ca:ab:14:ba:8e:eb:9d:68:b9:3f:80:fd:
ac:a3:b7:ff:2c:1c:52:19:cd:03:fe:24:40:bf:4d:
47:de:22:aa:23:63:2f:ac:cb:bf:7c:89:93:83:e5:
56:d4:a3:54:69:ad:45:87:97:a3:88:79:65:03:bd:
8d:2b:3f:ea:6f:b5:d0:f4:f0:a6:53:67:3f:f3:32:
f6:f3:4b:50:7e:cc:ca:56:b0:fc:78:0b:e1:dc:d0:
15:6f:26:d6:87:46:d2:b7:86:1f:54:ba:6c:53:c3:
46:c7:4e:00:25:34:31:ff:44:d9:e4:07:14:52:4b:
4f:b6:39:b0:bc:b3:47:3f:30:4a:d9:23:29:45:87:
f1:11:99:87:8e:4a:0b:14:37:5e:64:12:87:47:41:
02:0c:c1:be:9b:6e:96:26:ff:a6:71:dd:09:26:76:
0d:99:23:87:8b:3d:fc:86:2f:e7:e7:4b:67:c0:fe:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1C:2B:61:41:9F:9B:AC:16:80:A0:83:CC:77:3A:52:20:F7:93:DE
X509v3 Authority Key Identifier:
keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0f:e9:2a:97:c3:82:10:6b:4b:42:f5:ff:c5:b2:36:10:bd:
d0:85:62:3d:29:a5:b2:79:8c:da:1a:f4:6c:63:5e:dd:f6:92:
7e:97:30:9b:0c:a8:b8:ab:1a:f3:2f:e7:58:af:de:3f:fe:97:
b8:ad:33:7a:73:87:d7:17:c6:bf:2d:46:e4:01:d6:df:b0:57:
26:f1:1b:a3:af:36:d8:b2:dd:89:0b:7a:15:95:03:b0:1a:4a:
c1:87:1e:27:62:a1:e4:c3:bd:40:a0:4b:4f:11:e8:88:f7:21:
87:6e:9a:f1:1e:26:df:41:12:56:89:91:6f:8b:d0:be:11:9b:
8f:4e:72:30:e0:88:ec:8d:a1:40:c5:d4:6a:3d:e5:14:a9:07:
0c:54:bb:37:96:24:92:1a:64:23:6f:3d:05:70:58:44:2d:cb:
18:d5:3a:f2:20:52:42:00:07:40:01:b4:ca:72:3b:d7:dd:92:
fc:02:e7:67:59:6f:e6:c7:4d:58:cf:79:86:35:0e:c1:b5:44:
36:f0:b6:1c:94:c7:00:11:75:ea:31:49:fb:49:62:73:19:9a:
5c:19:03:70:a9:0a:71:53:8e:99:df:0a:9d:d7:ff:c6:b7:d9:
08:ac:d3:93:7d:26:08:62:7d:8e:d1:0d:3c:13:23:d9:cf:ee:
75:b5:1b:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOFhcSXhLIr6cDx3Nj9BcOfkkOrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD
RURFQzNENTAeFw0yNjA0MjgyMDA1MDFaFw0yNjA1MDEyMjA2MDFaMDMxMTAvBgNV
BAMTKDQ1MUMyQjYxNDE5RjlCQUMxNjgwQTA4M0NDNzczQTUyMjBGNzkzREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvY22yPTf+hRi9qc+lXvN991be
G440dfhxmU+u27IM0wc7bXoATfKX0jMJafTrpOnaB7H257tBWsu0Wkb4HEFHfQLG
LMQgg8NT0iXYUsqrFLqO651ouT+A/ayjt/8sHFIZzQP+JEC/TUfeIqojYy+sy798
iZOD5VbUo1RprUWHl6OIeWUDvY0rP+pvtdD08KZTZz/zMvbzS1B+zMpWsPx4C+Hc
0BVvJtaHRtK3hh9UumxTw0bHTgAlNDH/RNnkBxRSS0+2ObC8s0c/MErZIylFh/ER
mYeOSgsUN15kEodHQQIMwb6bbpYm/6Zx3Qkmdg2ZI4eLPfyGL+fnS2fA/uwFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURRwrYUGfm6wWgKCDzHc6UiD3k94wHwYDVR0j
BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE
MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF
QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm
Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1
NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJIP6SqXw4IQa0tC9f/FsjYQvdCFYj0ppbJ5
jNoa9GxjXt32kn6XMJsMqLirGvMv51iv3j/+l7itM3pzh9cXxr8tRuQB1t+wVybx
G6OvNtiy3YkLehWVA7AaSsGHHidioeTDvUCgS08R6Ij3IYdumvEeJt9BElaJkW+L
0L4Rm49OcjDgiOyNoUDF1Go95RSpBwxUuzeWJJIaZCNvPQVwWEQtyxjVOvIgUkIA
B0ABtMpyO9fdkvwC52dZb+bHTVjPeYY1DsG1RDbwthyUxwARdeoxSftJYnMZmlwZ
A3CpCnFTjpnfCp3X/8a32Qis05N9JghifY7RDTwTI9nP7nW1G3Y=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:10:38 2026 by rpki-client