Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft
File: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft (raw, json)
Hash identifier: a61hAX/NAKD0XJEJN8Vm/VBcdjiKiFyACovEadIBw8U=
Subject key identifier: DE:80:2C:29:B8:19:DA:10:47:08:90:C5:E8:14:63:8C:97:12:D1:15
Authority key identifier: 67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F
Certificate issuer: /CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F
Certificate serial: 287F6DF56AF51A879B5C4CEF746D538D24104CAE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft
Manifest number: 021E
Signing time: Tue 28 Apr 2026 03:11:33 +0000
Manifest this update: Tue 28 Apr 2026 03:06:33 +0000
Manifest next update: Fri 01 May 2026 13:40:33 +0000
Files and hashes: 1: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: 8iEgHOEIqDfpr7gSt8jxyho1deCIzw83qW565uPVSgs=)
2: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl (hash: NUKeVkpykFjCiNvLobAMcflDyFtO2ZzQiIXM5fmdB9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7f:6d:f5:6a:f5:1a:87:9b:5c:4c:ef:74:6d:53:8d:24:10:4c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F
Validity
Not Before: Apr 28 03:06:33 2026 GMT
Not After : May 1 13:40:33 2026 GMT
Subject: CN=DE802C29B819DA10470890C5E814638C9712D115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:87:e5:a4:fa:dc:bc:92:0e:fe:78:6c:bf:
98:76:7e:34:05:08:75:a2:3d:bc:be:49:8b:d1:e0:
15:61:25:e9:c8:77:82:50:fd:3e:21:8a:be:7c:0c:
ed:45:40:85:7d:ea:c0:e0:16:a7:e3:ab:1c:68:3d:
f9:f2:40:cb:b3:da:73:3d:6d:b0:b6:0d:28:bf:9b:
11:5a:1f:06:b1:5d:97:88:ba:2c:72:3e:ce:e4:61:
46:e5:15:f6:db:85:d3:dc:7c:34:05:73:a5:ef:99:
54:43:94:4a:68:10:66:2e:3e:23:ca:15:c7:9f:9c:
a1:44:00:bc:a5:ba:0c:1c:e0:e4:13:b1:71:0c:55:
e7:bd:cf:ab:ef:c0:94:84:8a:a6:6b:00:25:cd:d9:
6b:b7:a1:eb:e0:33:2c:40:ed:f3:97:4e:75:6e:c7:
88:4a:df:ff:0f:0e:e0:1a:50:7f:f5:65:96:48:58:
38:25:ef:22:cd:65:f3:76:2f:95:e4:fa:2e:d6:44:
24:ce:5c:ad:26:0c:d5:23:36:0d:9d:1e:75:31:ab:
cd:59:68:96:a1:1e:80:65:3d:6c:a1:fb:66:36:1d:
10:e4:58:ed:b9:0a:01:8f:a8:f6:14:af:6f:75:83:
15:df:63:25:54:4b:2d:4f:f4:e4:49:6c:15:92:f7:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:2C:29:B8:19:DA:10:47:08:90:C5:E8:14:63:8C:97:12:D1:15
X509v3 Authority Key Identifier:
keyid:67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:00:2c:8d:87:64:ee:72:77:78:16:a3:a6:da:d6:e5:0b:
d5:ab:3f:5d:0c:31:ca:0a:01:6c:73:d2:0a:80:22:73:09:37:
f3:ca:91:6b:8f:fb:3f:06:2d:13:5d:f1:d8:6e:89:79:7a:3c:
f8:fa:5e:2e:c9:c4:cc:7d:9f:ea:1a:81:89:45:97:19:7a:a0:
36:ac:4d:d9:14:8c:90:df:41:ed:5b:e4:ca:e7:8c:5f:e5:8c:
2e:07:75:07:d9:83:8c:30:21:82:ed:63:cf:50:ff:fb:2a:69:
76:1f:c3:bc:43:dc:64:a9:b3:5a:97:91:e4:89:89:31:79:ee:
49:3d:4d:02:e3:74:be:45:2f:45:8a:d6:4c:e1:0d:55:10:a2:
94:03:02:9d:29:67:f7:d9:5e:98:fd:e7:6b:f8:c8:bc:fa:47:
9b:00:ec:1c:7b:d4:aa:cb:cb:d7:87:e8:a9:cd:2a:3e:5c:81:
9e:44:20:87:6d:f8:4b:1b:20:0a:03:32:51:ab:f9:ff:0e:14:
dd:a2:5c:b6:2b:f5:72:28:75:7f:4f:6d:3c:a9:6d:42:17:87:
1b:35:a8:b2:f3:de:a9:8e:a3:cf:38:e4:20:40:0d:22:05:9a:
ec:f7:ce:f2:73:9d:8e:a9:46:ab:21:3a:56:5a:2d:78:13:62:
85:ee:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:53:55 2026 by rpki-client