Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft
File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json)
Hash identifier: bOOtb5fEhP/i/pUlAPz3fhEgjHoO3QQRk4y9p1DMRus=
Subject key identifier: 01:2F:82:FE:CB:80:C5:53:11:33:5F:EF:4E:34:7C:18:30:8C:7B:9E
Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3
Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3
Certificate serial: 5DAA3E0E010A0DFA5FF6E11A7AF36FEA4E462CE7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft
Manifest number: 0155
Signing time: Tue 28 Apr 2026 04:03:24 +0000
Manifest this update: Tue 28 Apr 2026 03:58:24 +0000
Manifest next update: Fri 01 May 2026 11:50:24 +0000
Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 4ND3+gZBeIoT6g+JB8RrxRMPJN0D54r28ZhCohuiwZ0=)
2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: qC4zLlZOkzGvPc6gxegNeW4zkkFc+GECnt+XKy8qU38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:aa:3e:0e:01:0a:0d:fa:5f:f6:e1:1a:7a:f3:6f:ea:4e:46:2c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3
Validity
Not Before: Apr 28 03:58:24 2026 GMT
Not After : May 1 11:50:24 2026 GMT
Subject: CN=012F82FECB80C55311335FEF4E347C18308C7B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:96:cb:0f:89:df:5c:bf:2b:a4:4a:ea:c9:
91:09:b4:28:61:21:d8:99:33:1a:e4:0a:30:40:62:
57:7c:8c:49:fd:d6:cc:26:f6:e3:b5:de:8d:9a:9f:
37:87:33:73:46:20:01:48:0c:2b:ee:e1:f0:e0:6e:
73:38:28:30:c4:ea:52:bb:86:36:91:be:45:0c:47:
28:fe:fa:2c:36:b5:fc:3a:9e:d3:ba:c7:32:47:23:
53:ee:4a:33:1b:86:31:f9:ec:a6:dd:aa:9f:95:2f:
91:63:c4:42:43:91:10:90:ce:24:66:4c:f7:9b:41:
69:b0:9b:eb:f8:1a:11:79:0c:0c:db:7f:6f:fa:43:
c6:57:75:48:22:16:32:d9:39:31:a3:34:5b:07:4a:
0e:f1:2d:d8:d3:ed:ca:48:71:ba:85:59:ba:43:a9:
fc:98:d4:af:7d:3b:4d:1f:d1:da:3c:f1:25:01:9a:
e6:0c:35:5b:c5:5d:7a:a8:b0:b8:e7:52:32:f2:04:
43:b0:a4:d6:a6:2b:22:7f:fc:0f:10:b1:a4:3f:0c:
09:67:b5:72:b8:c8:09:e0:5f:56:87:ef:43:48:86:
ba:03:e2:2f:8e:05:ab:45:5e:ce:00:74:d0:e9:92:
10:7f:d8:e1:44:41:0d:0a:73:a8:6d:3b:84:ee:46:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:82:FE:CB:80:C5:53:11:33:5F:EF:4E:34:7C:18:30:8C:7B:9E
X509v3 Authority Key Identifier:
keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:50:06:15:89:0a:87:8b:c4:72:ce:2d:c7:da:02:f3:fe:1c:
4f:a0:91:f0:8f:6e:44:c8:b0:94:b2:10:cb:8c:c3:d3:2f:a3:
9b:25:e9:84:eb:ee:3d:62:c6:44:cf:12:66:5a:ca:10:88:1a:
a4:e3:8a:ab:af:f6:99:2f:cf:ec:47:14:cf:88:6e:ac:e6:89:
e4:c1:8b:06:71:8c:45:6a:8a:2b:ad:63:dd:2c:a8:9c:cd:21:
28:75:05:e8:dc:70:05:90:6a:e7:a0:d5:c6:9a:4b:e5:a0:46:
be:18:b8:ee:9d:31:d5:90:8b:53:15:4e:e3:ff:9e:35:6f:ae:
53:53:ca:4d:1c:c9:34:e0:cc:96:bc:09:65:47:11:21:0e:be:
1a:34:d4:d1:a1:e9:e7:aa:46:b5:da:0a:8f:c9:1f:9d:97:9f:
97:8a:91:44:99:dd:16:b4:88:6f:b0:33:d9:b0:6f:28:a0:c0:
ea:6f:3a:b3:a9:44:68:99:d4:58:a3:99:db:5b:c4:9e:10:d4:
d3:f5:c7:61:3f:a4:c0:38:74:70:6d:31:3f:b4:11:49:99:46:
dd:28:08:59:8b:35:49:9a:48:86:0a:05:4d:af:37:2a:48:78:
9b:fd:92:1d:c3:77:8a:8e:29:6a:c4:e4:7c:93:3b:b6:01:5e:
26:57:8b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:16:41 2026 by rpki-client