Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft (raw, json)
Hash identifier: 6aZfzh8jevpz/8yH0X8ot4tidd7WXhjyxHbEFJGYhXQ=
Subject key identifier: 57:84:F1:02:BA:34:2A:53:DE:A3:A0:3F:BB:1C:7D:7D:1F:0A:B8:E6
Authority key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96
Certificate issuer: /CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96
Certificate serial: 0AE0B4479279E4BEB565E6F2E893D5D60D2786A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
Manifest number: 056E
Signing time: Tue 28 Apr 2026 11:12:20 +0000
Manifest this update: Tue 28 Apr 2026 11:07:20 +0000
Manifest next update: Fri 01 May 2026 20:26:20 +0000
Files and hashes: 1: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: JY5X7Ni0FqjOLHL/IBAcPoDotTFSEzReZjChPfIbLws=)
2: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: olwDZQoWpFkRsK81GVJEPLld+99Dlx/8F9oVv6zB3jQ=)
3: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl (hash: 53CUGurUjb/2MkYqgLMNpA+AO8J2YuqJA07OPxSLbBI=)
4: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: WF4j8x2tGr44aFsHKkav+2ARzcYAA9lGEfxLV4cOOpQ=)
5: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CeNMr8Y0wuM60Zt6nplzMluIcrI9La3EhazffayBItA=)
6: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: B78QMc7X1AynG/67CvGHE09qoTlYPrnz5pImIeutRLM=)
7: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: JSx+5xTx71eWK8GnVgu4sokLS7+0LsCbDYaq7VNDJRQ=)
8: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 1GnFCQ0Tavqgsu3zMfhYc58ad3h7NpVZT5asqIEYmDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e0:b4:47:92:79:e4:be:b5:65:e6:f2:e8:93:d5:d6:0d:27:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96
Validity
Not Before: Apr 28 11:07:20 2026 GMT
Not After : May 1 20:26:20 2026 GMT
Subject: CN=5784F102BA342A53DEA3A03FBB1C7D7D1F0AB8E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:80:c7:fc:4d:3f:aa:d3:d9:92:ae:b9:5b:
2f:d3:a3:33:a8:81:0d:6a:13:24:55:86:35:ca:29:
d0:09:4d:df:3a:45:66:4b:2a:e2:f8:39:20:29:db:
c5:0b:72:1c:c3:b1:08:e1:2a:84:3a:c3:b6:d5:49:
88:6c:14:a1:d6:da:af:64:ee:ac:4d:99:a8:92:62:
13:25:d5:bd:eb:3e:54:29:a3:4b:9f:08:a8:38:36:
41:16:95:22:08:5d:20:1f:4f:14:a4:94:e6:2b:18:
bc:e3:9e:eb:15:ab:43:cd:d7:be:40:60:1d:fd:61:
2d:7f:42:fe:cb:85:e3:2b:47:f4:81:b9:5d:1c:a3:
93:79:1f:d4:76:26:a5:ca:ad:c3:76:f2:32:fb:f7:
d9:9e:7a:a5:7a:8c:91:ee:0c:1a:63:db:24:0a:74:
dc:4e:dc:87:98:f1:cc:fb:67:5e:1f:66:52:77:4c:
53:68:61:23:ac:56:0d:58:f6:f2:bb:22:15:5b:8d:
9d:c1:2b:84:47:b6:9b:03:b3:f0:da:ee:2a:e8:88:
12:c2:fe:44:76:b3:28:86:79:c9:a6:3b:ad:a4:bb:
b7:1f:19:a6:6a:98:e9:df:ee:c3:d7:43:49:80:ad:
f9:34:4e:df:42:1a:96:04:cd:7b:27:d7:39:99:23:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:F1:02:BA:34:2A:53:DE:A3:A0:3F:BB:1C:7D:7D:1F:0A:B8:E6
X509v3 Authority Key Identifier:
keyid:42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:af:c1:8f:ec:0c:94:72:26:79:83:57:d7:01:ad:7c:5f:46:
23:51:17:d6:5f:69:4a:c3:8a:a9:27:a3:fe:51:30:a4:26:8d:
b0:01:59:af:3b:ae:8b:dc:d3:67:ad:c9:61:e9:33:d8:c7:9f:
90:d0:c4:d0:ef:d2:3d:45:de:b2:d2:7c:29:61:4a:a9:87:4e:
a2:44:c7:cf:39:b3:b6:9c:f3:da:a2:a3:8b:dc:bf:17:5b:83:
d9:36:94:5f:f9:fe:9e:a4:3f:b4:c4:08:a3:67:55:63:82:37:
a0:17:cb:4a:10:22:71:28:9f:7b:35:89:02:83:d4:cc:14:6d:
a7:da:98:ae:3f:d7:d8:d2:eb:92:a0:9a:3c:f6:56:51:b3:aa:
4f:70:12:4c:60:7c:0f:3a:b8:5b:26:d1:46:00:fc:bd:5f:fa:
32:1c:7f:59:51:9d:8a:e7:af:c7:02:f2:47:1f:11:40:b0:46:
88:58:32:4a:a2:61:47:66:aa:73:79:8f:ce:f3:0e:c8:23:1c:
44:0c:ac:a6:4c:c1:f1:50:66:33:14:86:3e:26:d8:18:53:4f:
bf:0a:95:a7:10:d9:39:16:36:da:29:4d:ac:e5:90:b2:e4:68:
99:99:ed:8b:eb:de:6d:66:70:77:f3:60:62:f6:91:57:2d:d3:
4d:b7:07:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:56:40 2026 by rpki-client