Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
File: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft (raw, json)
Hash identifier: fr/PzIw4RPLJpNanshckI5/O+R8HUsh1m2W5SKlnxjc=
Subject key identifier: 97:00:E5:CC:96:CC:78:D5:34:63:46:4E:37:40:69:04:CD:F2:14:53
Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC
Certificate issuer: /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
Certificate serial: 2D43A6CC35A9D33F719FE66B432C079B8D9E0D97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
Manifest number: E2
Signing time: Wed 29 Apr 2026 10:22:28 +0000
Manifest this update: Wed 29 Apr 2026 10:17:28 +0000
Manifest next update: Sat 02 May 2026 21:06:28 +0000
Files and hashes: 1: 28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl (hash: JAtoNcb55GXOK7bRgpsa+Dn/ndLicHYd3RXUvU5U8y4=)
2: 3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa (hash: 4k5l0oKGlgrseypJOAcgbZ3voSGQS5pK7FIolyad81E=)
3: 323430363a373534303a3a2f33322d3332203d3e20313431303637.roa (hash: tGZJC6gHp+rBRUU+fviXr/Qmv6Fq3jy2euNYPnmiMt4=)
4: 3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa (hash: HqTyhMmIQNWyd9Uu39hBDh2ymSKez80mYyj1XdusXb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:43:a6:cc:35:a9:d3:3f:71:9f:e6:6b:43:2c:07:9b:8d:9e:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
Validity
Not Before: Apr 29 10:17:28 2026 GMT
Not After : May 2 21:06:28 2026 GMT
Subject: CN=9700E5CC96CC78D53463464E37406904CDF21453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:e1:4b:10:50:72:fb:bb:fa:1f:59:78:b9:
2a:db:0e:3b:47:e8:70:2b:60:3c:67:4b:cb:47:2b:
31:09:30:28:0f:8b:1a:63:e4:89:a7:46:f5:1d:2f:
5a:fc:0e:90:55:68:41:5e:09:6e:d5:33:ea:ab:d6:
7c:96:79:00:ab:38:ef:0e:89:ea:8e:80:3a:74:25:
b7:02:12:6d:d9:af:cc:48:e6:9d:89:d4:18:74:23:
bf:2b:3f:38:71:c2:11:db:3a:15:a2:d8:f0:7b:df:
20:84:99:c4:15:84:03:f8:7f:da:8e:77:9c:d8:55:
cb:ce:8c:c3:fd:f5:b3:da:5a:ce:a9:28:91:73:df:
95:e8:57:66:9f:04:2b:57:fb:45:bb:bb:ff:2b:22:
f4:33:f0:6a:56:ef:e3:c6:8c:06:7b:c7:31:54:af:
26:6f:df:89:8e:31:6c:39:b4:97:f3:a8:29:8c:ff:
b7:fd:3c:ba:72:be:74:37:48:36:f1:aa:b1:1b:b2:
76:19:1a:86:3a:cd:58:9c:57:cd:cc:7f:ec:b9:e7:
37:39:65:79:3f:65:a9:fe:c4:5b:22:88:6f:9b:8d:
10:b9:10:e2:66:d3:03:be:2e:23:34:12:60:64:8f:
17:44:48:d8:f1:7a:42:98:af:cb:d7:2a:2a:a8:48:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:E5:CC:96:CC:78:D5:34:63:46:4E:37:40:69:04:CD:F2:14:53
X509v3 Authority Key Identifier:
keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1f:28:b7:53:de:e9:af:87:c4:b8:06:88:a5:30:22:88:2c:
37:95:ba:9b:ce:b2:e2:8a:1b:aa:7f:23:7b:c0:2b:ee:79:86:
5d:14:57:5b:0b:36:49:3d:08:bf:06:49:ae:0c:7f:52:37:90:
2b:e4:9a:0f:86:9a:b7:29:6c:3a:92:f0:ec:a6:b4:aa:bb:08:
2c:a4:cb:1c:a2:d2:7d:fb:94:9a:92:56:c1:24:ce:ff:cb:96:
12:ca:9d:b0:8a:44:46:20:77:6b:6b:07:d5:b9:17:73:ac:e9:
9e:0a:64:52:cb:7f:7e:79:33:a4:21:cb:4d:6b:1a:92:ac:3a:
b5:db:10:83:34:d4:f4:6b:6c:ce:68:82:1d:bf:cd:81:70:73:
89:0b:83:7a:cf:84:4e:72:75:8b:7b:9a:92:98:1d:ba:4d:ba:
ac:07:6c:f3:bf:49:b5:fb:28:e8:e5:04:78:b0:7a:d5:90:b8:
40:14:dd:9f:d8:9c:21:89:ed:5d:0d:da:0c:ba:da:dc:a9:b7:
9f:88:88:b7:60:db:2a:d3:a3:cc:40:71:53:92:1e:df:32:f9:
fd:74:20:a5:f8:76:38:33:82:1a:43:a3:b4:57:ea:1f:32:9a:
4c:91:18:83:76:5d:23:11:a8:33:05:b3:aa:32:ab:1f:d8:ff:
a7:28:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:04 2026 by rpki-client