
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft
File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json)
Hash identifier: CiN1kdxA44HRotWHRMIHJqK5Q3tbnWySqAjDYjeAfUM=
Subject key identifier: 2A:E3:47:4D:4E:0D:ED:D3:DD:10:87:83:2E:E7:12:04:7B:56:70:B0
Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87
Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87
Certificate serial: 5E294FC50FEB38AAE3BB84D15505AFDD7CF11990
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft
Manifest number: 0202
Signing time: Tue 28 Apr 2026 09:35:33 +0000
Manifest this update: Tue 28 Apr 2026 09:30:33 +0000
Manifest next update: Fri 01 May 2026 14:56:33 +0000
Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: zydaV7vXOljio1PbDe3DJntWYJjt5+nwPN1xl5NBaKY=)
2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: qNfkeYmAnfvc0eHCyeo7RMM7MgtKZ+urfS52oX6ZOKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:29:4f:c5:0f:eb:38:aa:e3:bb:84:d1:55:05:af:dd:7c:f1:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87
Validity
Not Before: Apr 28 09:30:33 2026 GMT
Not After : May 1 14:56:33 2026 GMT
Subject: CN=2AE3474D4E0DEDD3DD1087832EE712047B5670B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:36:6a:20:fe:4a:75:02:c1:8b:9b:b7:d9:
5c:ce:ab:d5:80:2e:35:0f:dc:c2:91:b8:58:bb:21:
9e:70:ae:02:25:8d:62:1a:bb:44:4f:fb:f2:d1:59:
b1:a3:30:2f:24:c0:dc:68:9b:c5:2e:4a:b1:95:33:
01:68:e5:b2:93:9a:d8:2d:2b:d7:d2:3e:93:9a:2d:
e8:da:08:3b:c1:9b:bb:e0:d6:d5:3c:b6:78:bd:84:
1c:ed:1b:f3:57:09:ca:b8:33:d2:a1:c9:a4:04:8f:
20:07:90:18:e7:a9:69:ef:90:c6:3e:fa:fd:08:2e:
b4:31:a8:00:e8:c9:16:93:4e:a0:9c:ef:3d:09:c6:
9f:d5:84:dd:0d:5b:c5:a9:61:5b:80:ba:9f:97:d6:
0c:7b:d8:54:e5:d4:ee:d7:8c:6c:e9:70:7e:91:65:
37:57:bd:4c:fe:88:39:d5:d2:66:f7:3c:b8:93:c4:
83:f9:0a:97:87:58:8f:af:7e:b2:12:19:a5:6c:16:
d4:fc:e2:49:22:85:dd:6c:a9:17:13:99:7a:4f:55:
24:28:25:17:ee:00:dc:0d:72:40:06:f7:48:0f:97:
50:35:61:87:13:72:d1:5b:f8:a8:d6:02:fb:3b:f9:
a9:b3:5f:9d:b3:5e:96:c7:5f:f2:13:e6:d8:fe:a1:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E3:47:4D:4E:0D:ED:D3:DD:10:87:83:2E:E7:12:04:7B:56:70:B0
X509v3 Authority Key Identifier:
keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fd:bd:6d:de:9e:0d:c1:58:52:7c:94:04:0c:b4:84:d6:bb:
54:63:ca:01:a2:16:b9:29:df:08:8b:23:85:b1:89:17:7c:ea:
b0:e3:45:e7:0e:3e:89:f4:4e:0c:d8:a7:01:8b:43:bc:cc:02:
a6:71:d4:45:98:08:ed:52:c0:02:6c:0a:32:53:f7:16:03:ad:
65:8f:c5:16:0b:37:b8:16:75:82:de:b6:6a:ad:b0:c1:a4:14:
3c:b4:f3:59:f7:45:2a:2e:00:b0:4e:9d:ce:05:0f:33:1a:a8:
58:71:3f:52:5d:f2:67:d2:ee:fd:a7:61:c1:c9:81:4e:9f:97:
bb:ae:74:d0:54:89:ca:78:cd:a5:09:28:1c:b3:bd:31:ae:5e:
89:6f:cf:64:a9:c6:c0:63:b6:c0:c6:ab:85:4d:43:36:2a:89:
f6:a7:ce:db:c8:b7:46:0f:22:f0:68:f0:8b:cc:eb:a2:df:e5:
db:37:6d:ef:bc:81:51:be:0e:be:d7:30:76:5b:84:70:0a:4e:
9e:1e:37:11:21:7b:6d:61:2d:19:b7:d5:6e:a2:60:cd:ab:c5:
5c:25:be:34:c0:fc:87:91:6f:4b:e5:92:39:8d:b6:98:49:b5:
a4:dc:96:a0:ae:c0:8e:dc:a0:4e:f4:6c:61:13:e8:4f:1d:de:
9e:d8:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:48:14 2026 by rpki-client