Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json)
Hash identifier: RxTOn1CEUojuvYF830Nyq0fhLB9Wu0spB+N8FjG+ZdQ=
Subject key identifier: 04:C8:3B:33:A7:60:21:41:5C:ED:CC:07:59:6B:0B:D0:58:FE:70:F6
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial: 0CD2F42E2D9629FF86D82FA7ECC238E0F93C4324
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
Manifest number: 023D
Signing time: Tue 28 Apr 2026 05:51:17 +0000
Manifest this update: Tue 28 Apr 2026 05:46:17 +0000
Manifest next update: Fri 01 May 2026 16:42:17 +0000
Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: tbNz0yyLX/gg9uoN16SH34fcRolMR3sQimkDf6UJTck=)
2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d2:f4:2e:2d:96:29:ff:86:d8:2f:a7:ec:c2:38:e0:f9:3c:43:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
Validity
Not Before: Apr 28 05:46:17 2026 GMT
Not After : May 1 16:42:17 2026 GMT
Subject: CN=04C83B33A76021415CEDCC07596B0BD058FE70F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:af:a5:7f:8c:79:8b:2d:8c:06:24:b1:56:
fb:07:64:2d:65:84:6e:5b:5e:44:20:12:70:22:0b:
a9:98:9f:1d:4c:59:8e:ba:1d:89:dc:73:2d:f4:51:
bf:7a:3e:88:31:24:12:f3:13:77:1c:21:ef:4e:c3:
af:9b:d0:b4:21:e4:a4:f1:05:13:e2:55:0d:44:01:
9d:35:f1:df:bb:22:8d:fb:13:79:e6:42:54:92:7b:
02:d9:3f:84:c8:68:d9:9d:dd:da:f6:ad:4b:e3:7e:
44:d6:3a:58:75:46:e3:02:6c:b1:09:e1:f2:59:06:
a6:b3:81:94:d6:02:05:a7:f3:02:9b:0a:62:04:9b:
bc:b9:4a:ea:62:87:f6:46:40:f5:1f:65:02:81:68:
7f:66:08:40:39:7d:4d:60:04:3a:0f:7b:f3:88:1b:
73:59:e2:81:d2:1a:ff:82:c8:f0:a1:53:5b:c8:ce:
a2:fc:1f:07:ab:23:17:0f:c4:07:e1:6d:11:2f:a0:
8b:00:aa:aa:a7:e8:47:79:93:37:79:ab:fc:65:3a:
d0:d6:45:de:67:c8:93:3e:f5:56:65:ab:88:69:d9:
42:a6:fe:c3:b5:41:e2:1a:bf:1b:e2:5b:4c:6c:1b:
c0:3e:3f:2a:44:e5:1b:07:72:52:af:1c:72:98:37:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:3B:33:A7:60:21:41:5C:ED:CC:07:59:6B:0B:D0:58:FE:70:F6
X509v3 Authority Key Identifier:
keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c2:82:89:0b:9e:ee:eb:00:fc:48:4a:d8:3b:a7:7c:1b:25:
27:c4:5a:ec:21:9a:9c:3b:db:f4:ab:30:5b:7e:2c:81:dc:0d:
1e:ac:f3:1b:c8:1a:6b:a2:f6:70:0f:33:9f:69:5a:66:6a:3f:
db:32:c0:f3:a6:f4:bb:9b:7b:8a:b8:08:d3:16:8f:cf:77:cb:
d5:dd:7b:4f:cd:bd:4a:d1:9a:e1:52:44:7b:4d:4a:8f:92:00:
c4:46:3c:68:bb:e7:41:a2:43:20:f1:d8:2b:c5:65:5d:4c:eb:
fa:cc:0c:b2:a5:b3:50:60:b5:d5:eb:30:b2:e2:cd:5c:02:45:
0e:8c:a1:d7:47:3c:8d:05:8b:1d:f2:da:e3:dc:1b:c1:3a:25:
49:a0:0c:fb:b7:68:35:99:93:03:cc:49:17:57:de:7d:ee:87:
4d:6b:71:3d:bf:0e:3f:5b:8f:32:6c:38:e2:e1:69:f6:29:a5:
7c:bc:3d:53:e4:c6:9b:fa:52:9b:51:40:0d:ec:d8:10:cb:30:
5a:a6:94:72:07:d7:3f:cb:05:0c:d6:cb:cf:fb:16:66:02:d5:
0d:db:d7:40:fa:dc:1e:8c:e9:30:c9:8d:89:54:03:2c:b1:87:
33:ef:48:84:0f:13:08:c3:0d:b5:c8:2b:96:a0:4d:ea:e8:51:
d2:15:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:43 2026 by rpki-client