
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json)
Hash identifier: wUsQHlELhVceemHuYAfYHU2N6w0TeBSTMkYjg8udsfI=
Subject key identifier: CA:78:27:F6:DD:1B:B9:6B:38:9A:2E:04:44:B4:5D:8A:A2:DC:82:81
Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Certificate serial: 5FBE4BC4C919BAB5F8174B2CFE275D1AF6D91B4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
Manifest number: 0117
Signing time: Mon 27 Apr 2026 21:30:01 +0000
Manifest this update: Mon 27 Apr 2026 21:25:01 +0000
Manifest next update: Fri 01 May 2026 04:40:01 +0000
Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=)
2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: T5sw5XO9UQVptprQSd+C0ZGtB0uvxNQ/bXo4u1z+GnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:be:4b:c4:c9:19:ba:b5:f8:17:4b:2c:fe:27:5d:1a:f6:d9:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Validity
Not Before: Apr 27 21:25:01 2026 GMT
Not After : May 1 04:40:01 2026 GMT
Subject: CN=CA7827F6DD1BB96B389A2E0444B45D8AA2DC8281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:4d:34:f6:8c:c6:9f:87:af:84:59:d9:a4:
fd:bc:88:51:ee:1d:f3:17:d0:81:3a:f8:2b:9f:e4:
79:75:63:9d:a3:f6:fa:d3:2d:15:88:e4:0f:09:5b:
48:44:f7:7f:c1:f0:53:4e:b8:27:5a:4b:17:76:5c:
4c:da:a4:16:52:47:dd:c6:65:1a:bb:72:74:8a:ac:
31:38:4c:23:7e:91:78:44:7a:8a:96:46:7f:f6:39:
27:a1:7e:7f:92:cc:19:03:30:b3:cb:1a:1d:6f:f4:
77:a4:88:02:d6:ca:c7:38:c5:12:9c:1d:6d:62:08:
9d:f7:1f:be:b8:ae:99:6d:03:45:3b:c9:e7:d0:83:
f3:3e:6a:bc:eb:1b:3d:49:33:2c:f1:21:99:6d:ea:
0f:87:88:d9:8b:30:c9:c6:1c:82:c8:b9:83:71:b8:
9f:17:2d:0f:35:5f:68:f4:1d:ec:60:a5:82:4b:10:
17:73:30:6f:45:7d:0e:a2:d0:81:d7:26:34:ed:c5:
92:98:9f:16:74:99:66:f0:d2:fa:fd:95:4a:01:3d:
4d:79:f3:1e:27:19:6e:58:80:3a:ca:70:77:31:ad:
f9:4a:92:13:47:2b:4e:2f:bd:ce:8f:0d:b3:79:0b:
34:91:a0:1a:d1:c2:5f:80:46:fb:01:e4:e8:df:99:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:27:F6:DD:1B:B9:6B:38:9A:2E:04:44:B4:5D:8A:A2:DC:82:81
X509v3 Authority Key Identifier:
keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8c:67:bc:4d:2d:59:9f:26:63:4b:34:12:39:23:b3:09:a6:
40:45:2f:0a:4e:ea:88:e8:4e:74:91:71:0e:8f:40:ec:bc:a0:
b4:72:3f:b3:1d:57:a4:2e:44:e5:30:cb:2d:ac:ec:84:c9:db:
bf:ce:a7:cc:1c:85:f5:ed:88:16:04:35:45:92:77:04:01:78:
e1:53:13:a7:76:ab:b8:9c:4f:da:4e:ed:ba:0f:a3:63:ad:3e:
28:d0:9d:a5:ae:3e:35:62:e7:c4:52:c6:eb:d2:6d:e4:bc:50:
00:e5:25:ac:06:04:a7:ae:7d:f6:b4:07:71:86:7c:b5:5d:db:
ae:c6:eb:67:90:32:79:6a:7e:69:8f:ec:56:09:6d:0c:8c:b0:
41:ab:07:fc:11:35:66:93:85:2e:69:c5:11:2f:35:ea:47:9d:
81:bb:42:0c:b2:40:56:42:52:10:26:03:48:40:6e:87:6a:7b:
65:b4:29:b7:08:f0:13:80:ff:34:a1:f1:0e:c4:b6:b0:a3:6b:
31:9c:2b:2e:38:e0:8a:75:96:7b:f1:40:93:d3:75:80:ea:6a:
4c:5f:48:ce:8d:f5:60:10:36:61:9d:c6:c8:6b:f1:83:bb:8a:
fc:e1:90:08:4b:4d:57:26:86:10:de:ba:cf:b8:53:ea:e2:19:
ea:a4:81:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX75LxMkZurX4F0ss/iddGvbZG00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy
NDg2QTc1OTAeFw0yNjA0MjcyMTI1MDFaFw0yNjA1MDEwNDQwMDFaMDMxMTAvBgNV
BAMTKENBNzgyN0Y2REQxQkI5NkIzODlBMkUwNDQ0QjQ1RDhBQTJEQzgyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVU009ozGn4evhFnZpP28iFHu
HfMX0IE6+Cuf5Hl1Y52j9vrTLRWI5A8JW0hE93/B8FNOuCdaSxd2XEzapBZSR93G
ZRq7cnSKrDE4TCN+kXhEeoqWRn/2OSehfn+SzBkDMLPLGh1v9HekiALWysc4xRKc
HW1iCJ33H764rpltA0U7yefQg/M+arzrGz1JMyzxIZlt6g+HiNmLMMnGHILIuYNx
uJ8XLQ81X2j0HexgpYJLEBdzMG9FfQ6i0IHXJjTtxZKYnxZ0mWbw0vr9lUoBPU15
8x4nGW5YgDrKcHcxrflKkhNHK04vvc6PDbN5CzSRoBrRwl+ARvsB5OjfmconAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyngn9t0buWs4mi4ERLRdiqLcgoEwHwYDVR0j
BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5
MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2
QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5
YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD
MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABuMZ7xNLVmfJmNLNBI5I7MJpkBFLwpO6ojo
TnSRcQ6PQOy8oLRyP7MdV6QuROUwyy2s7ITJ27/Op8wchfXtiBYENUWSdwQBeOFT
E6d2q7icT9pO7boPo2OtPijQnaWuPjVi58RSxuvSbeS8UADlJawGBKeuffa0B3GG
fLVd267G62eQMnlqfmmP7FYJbQyMsEGrB/wRNWaThS5pxREvNepHnYG7QgyyQFZC
UhAmA0hAbodqe2W0KbcI8BOA/zSh8Q7EtrCjazGcKy444Ip1lnvxQJPTdYDqakxf
SM6N9WAQNmGdxshr8YO7ivzhkAhLTVcmhhDeus+4U+riGeqkgSg=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:17:21 2026 by rpki-client