Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft
File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json)
Hash identifier: PZeou5Z5Dwh5bsvk5AmWcgWqC3zXESXx9PJA9tPriRo=
Subject key identifier: 31:40:70:8B:12:37:D1:0E:4D:5B:AC:B1:DF:3F:10:81:30:95:26:36
Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C
Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C
Certificate serial: 2077F469A6E003395C1A6956C5DE36DD1D0516DC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft
Manifest number: 03EA
Signing time: Wed 29 Apr 2026 01:01:21 +0000
Manifest this update: Wed 29 Apr 2026 00:56:21 +0000
Manifest next update: Sat 02 May 2026 09:35:21 +0000
Files and hashes: 1: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: FMIZnbjDFu/PtIjiFlzw38bMeJGu7dULX6Cxb86htH8=)
2: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:77:f4:69:a6:e0:03:39:5c:1a:69:56:c5:de:36:dd:1d:05:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C
Validity
Not Before: Apr 29 00:56:21 2026 GMT
Not After : May 2 09:35:21 2026 GMT
Subject: CN=3140708B1237D10E4D5BACB1DF3F108130952636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:34:ee:2a:54:06:ee:04:c7:95:7c:cf:67:
18:c8:7c:c7:a8:62:8c:c5:09:94:c7:17:46:e4:35:
66:c4:ac:a5:6e:5b:ca:f6:56:c9:09:4e:3e:9f:6c:
2b:d8:81:4c:9d:2e:4d:ae:ba:b9:56:f5:31:19:94:
32:96:71:0d:0b:c1:31:e1:40:04:a6:19:64:51:05:
91:1e:05:f1:1f:93:4b:13:f2:8f:3e:fa:01:28:d2:
36:6a:12:54:ff:3b:cd:52:44:6b:4e:d3:a2:fe:54:
de:ee:88:5c:47:0a:d4:0a:0d:d4:83:a1:24:78:2e:
2a:b3:60:d0:5c:ee:16:e3:6b:6f:fd:0a:e2:08:2a:
a1:2f:db:f1:94:04:ab:d6:3f:85:30:36:d2:9e:9e:
04:28:92:0b:5e:be:b0:af:22:13:2b:27:0c:96:d5:
a7:cb:28:22:3e:fb:1f:52:2b:d8:72:97:d5:ed:51:
49:af:3e:b6:23:b3:f4:f6:62:b9:07:91:38:2b:50:
b0:e1:67:50:8a:f7:6c:cf:9b:7c:96:65:4d:30:a2:
f9:8c:22:a5:ac:47:7b:14:09:8b:04:99:f6:41:26:
71:a6:b7:6d:a2:c8:fc:25:79:a6:29:8c:e9:23:90:
cb:5c:e6:d0:a8:ec:5b:6d:71:bf:3c:cb:75:ea:e5:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:70:8B:12:37:D1:0E:4D:5B:AC:B1:DF:3F:10:81:30:95:26:36
X509v3 Authority Key Identifier:
keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c4:cd:f8:83:de:3f:bf:c5:45:a2:c9:f3:98:c4:4e:60:a4:
1c:30:52:17:fb:0e:dc:db:6a:c7:69:bb:1f:c0:b5:8f:a6:5d:
f7:58:77:9d:0f:d7:4a:1b:5f:73:b7:83:c5:a0:4d:de:94:35:
f4:b9:80:a5:12:1b:b3:f7:2e:fb:ab:a3:e4:f7:15:2e:20:ab:
1c:62:e7:d9:0b:58:1c:33:8c:7b:79:1f:4a:f6:ba:9e:78:83:
8e:52:74:06:b8:e7:8b:57:c9:7b:6b:ec:92:56:a2:16:66:89:
19:b1:47:20:da:45:9f:66:a6:77:96:bf:39:4c:47:9e:4b:51:
4a:69:84:f6:ae:f9:69:b1:3b:79:68:91:f7:f2:24:33:a8:e8:
74:cf:7b:e5:e2:f7:1b:d0:c6:5a:97:40:71:0c:b6:70:31:f8:
d4:20:71:7b:9f:b4:3b:ed:29:dd:a0:63:59:c8:98:c1:3d:4d:
62:e5:7d:04:26:cb:0a:0d:b1:6f:5f:06:3d:8e:b8:69:22:0f:
b4:d1:23:28:52:10:3f:b6:f5:b8:2b:7a:b8:e2:6f:5f:6b:7a:
34:6b:ec:0a:bd:df:16:4b:c9:83:5d:fd:7c:76:43:af:59:51:
01:03:f4:2b:e2:1b:6a:54:cb:24:94:f4:69:44:f4:a2:b7:36:
b8:be:fe:9e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIHf0aabgAzlcGmlWxd423R0FFtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx
MjkwM0Q3QzAeFw0yNjA0MjkwMDU2MjFaFw0yNjA1MDIwOTM1MjFaMDMxMTAvBgNV
BAMTKDMxNDA3MDhCMTIzN0QxMEU0RDVCQUNCMURGM0YxMDgxMzA5NTI2MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxzTuKlQG7gTHlXzPZxjIfMeo
YozFCZTHF0bkNWbErKVuW8r2VskJTj6fbCvYgUydLk2uurlW9TEZlDKWcQ0LwTHh
QASmGWRRBZEeBfEfk0sT8o8++gEo0jZqElT/O81SRGtO06L+VN7uiFxHCtQKDdSD
oSR4LiqzYNBc7hbja2/9CuIIKqEv2/GUBKvWP4UwNtKengQokgtevrCvIhMrJwyW
1afLKCI++x9SK9hyl9XtUUmvPrYjs/T2YrkHkTgrULDhZ1CK92zPm3yWZU0wovmM
IqWsR3sUCYsEmfZBJnGmt22iyPwleaYpjOkjkMtc5tCo7Fttcb88y3Xq5aoBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMUBwixI30Q5NW6yx3z8QgTCVJjYwHwYDVR0j
BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE
NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw
M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw
NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0
OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGjEzfiD3j+/xUWiyfOYxE5gpBwwUhf7Dtzb
asdpux/AtY+mXfdYd50P10obX3O3g8WgTd6UNfS5gKUSG7P3Lvuro+T3FS4gqxxi
59kLWBwzjHt5H0r2up54g45SdAa454tXyXtr7JJWohZmiRmxRyDaRZ9mpneWvzlM
R55LUUpphPau+WmxO3lokffyJDOo6HTPe+Xi9xvQxlqXQHEMtnAx+NQgcXuftDvt
Kd2gY1nImME9TWLlfQQmywoNsW9fBj2OuGkiD7TRIyhSED+29bgrerjib19rejRr
7Aq93xZLyYNd/Xx2Q69ZUQED9CviG2pUyySU9GlE9KK3Nri+/p4=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:50 2026 by rpki-client