Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft
File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json)
Hash identifier: 6Xzf5Q8KY2rHtIs3o8u7VOe8BYvyNt37fuul8peLwr8=
Subject key identifier: ED:FE:07:F4:CE:A4:7B:9C:22:EA:9E:0E:88:DF:BB:80:88:FA:93:FE
Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93
Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93
Certificate serial: 3962D5730655CFA3A9B0CFE72A4964CD4949A11D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft
Manifest number: 0124
Signing time: Tue 28 Apr 2026 19:42:28 +0000
Manifest this update: Tue 28 Apr 2026 19:37:28 +0000
Manifest next update: Fri 01 May 2026 19:43:28 +0000
Files and hashes: 1: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: 9HcMn3I4XGR9gCZZPwjQDGBo7tgZN5G+yM9cxbzNmtk=)
2: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: q3g+tAB0OhoASdAzGLJuU0CBjjoCybB6dd0OqZbeRFg=)
3: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:62:d5:73:06:55:cf:a3:a9:b0:cf:e7:2a:49:64:cd:49:49:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93
Validity
Not Before: Apr 28 19:37:28 2026 GMT
Not After : May 1 19:43:28 2026 GMT
Subject: CN=EDFE07F4CEA47B9C22EA9E0E88DFBB8088FA93FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:78:74:2d:4e:fb:93:f2:f8:b2:6e:ed:74:
dc:cb:eb:ba:ad:d6:fb:c2:bd:d4:d5:e9:93:80:a8:
56:8f:13:bc:16:4b:c5:80:b4:e5:c3:2e:85:b3:ca:
3a:9a:1c:d0:76:13:1e:11:7b:c2:1b:98:f6:cc:6b:
d0:ec:84:ca:1e:1f:7a:c0:f6:3b:a2:a8:29:dc:e9:
65:a2:15:d3:7a:c3:cb:9c:43:4c:1a:e0:dd:95:02:
ef:84:66:45:aa:ad:d6:19:2b:a8:43:8a:79:cb:f1:
ec:48:97:d6:4d:94:98:81:d6:7a:db:0f:62:64:ce:
25:59:ed:ff:f3:76:8d:39:04:8f:f6:c8:fd:07:c8:
2a:c4:9c:b0:16:f7:bf:88:48:87:f8:d0:9c:2c:5a:
9c:ff:8f:57:5f:de:99:90:34:42:74:58:b7:a9:c0:
31:99:c6:33:6b:5f:fe:7a:7e:83:9f:ea:7e:ff:29:
df:87:e6:de:14:c7:09:4e:c1:37:cf:32:97:26:77:
d8:fa:74:88:b0:c6:9c:66:0a:fd:e6:77:e6:bd:56:
74:1c:18:25:db:4e:6f:c3:75:bc:f6:70:92:ce:57:
54:d7:91:31:d4:e7:fa:55:06:9d:de:84:a3:c8:7c:
1f:bc:ff:d1:5d:f2:3d:be:ef:5e:d9:29:87:45:27:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:07:F4:CE:A4:7B:9C:22:EA:9E:0E:88:DF:BB:80:88:FA:93:FE
X509v3 Authority Key Identifier:
keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7f:64:cb:d0:33:ba:c4:b4:71:ec:81:9b:d5:08:c6:83:09:
d7:57:68:ef:44:f2:bc:d8:15:db:d7:8b:87:d5:80:93:40:62:
ea:90:a6:0c:45:56:a8:a8:68:a5:c1:3e:29:59:d9:4d:bb:a4:
da:96:6b:93:56:36:b6:c2:83:01:7a:0c:d3:3c:d0:0a:f4:e9:
59:65:6e:0a:aa:3e:f0:1f:02:ce:4a:33:4a:b3:ae:e6:d9:4e:
53:90:8b:1a:7c:d7:8d:90:25:af:a2:48:45:8e:71:f8:f8:92:
00:4a:a6:a5:94:a7:fa:c8:f5:cd:20:4d:8d:75:73:0c:72:b6:
c0:7c:7a:96:db:7e:2f:55:50:0c:84:a0:fe:9a:b9:4b:74:ae:
a7:b5:ec:be:4a:25:79:ef:8c:a5:db:37:32:46:fb:94:f3:9d:
10:4a:ec:48:0f:6b:fb:f1:59:c4:de:e5:2c:24:06:c9:61:ba:
4f:24:d8:b3:cf:98:84:e2:fa:14:90:27:6c:4a:ac:dc:10:4f:
5a:75:27:9f:ba:4e:16:4e:05:12:94:50:18:97:31:4f:ea:33:
43:19:f6:29:44:57:78:5f:93:f8:a2:84:2c:79:c7:13:06:53:
37:75:92:0e:8e:b7:4c:e3:31:bf:33:8e:7b:10:8a:62:15:74:
72:4c:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:16:33 2026 by rpki-client