
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json)
Hash identifier: tbU+yxObyRAikUTdiFqls6VIP/NrmojTMnjEAL6JDqo=
Subject key identifier: CC:CF:A1:3A:80:6F:15:1F:B9:1D:2E:A2:58:44:F6:55:FE:1B:52:A4
Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Certificate serial: 642342B08FEBD7A52D300A03A42837CFB2C49BDA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
Manifest number: 039E
Signing time: Wed 29 Apr 2026 08:02:18 +0000
Manifest this update: Wed 29 Apr 2026 07:57:18 +0000
Manifest next update: Sat 02 May 2026 18:29:18 +0000
Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: tBTMbBjYZExLc5SJL9JQw1F5TGyhTk01AuS7NPYkFeM=)
2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 5yLcXk58rrEbW81S/YzUiu1DSwOapOgY98yvtKPxV4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:23:42:b0:8f:eb:d7:a5:2d:30:0a:03:a4:28:37:cf:b2:c4:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52
Validity
Not Before: Apr 29 07:57:18 2026 GMT
Not After : May 2 18:29:18 2026 GMT
Subject: CN=CCCFA13A806F151FB91D2EA25844F655FE1B52A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e2:fc:b5:b6:2c:6a:3d:0d:f4:af:73:42:76:
71:7c:26:af:bf:33:68:c2:69:b4:b0:ad:43:28:c8:
27:02:14:d5:c0:83:4f:74:f5:fc:8a:6d:7e:16:e1:
16:e9:2a:5e:55:1b:ef:56:d4:d7:b4:be:3f:99:50:
24:f2:52:8e:ba:b9:04:92:07:11:97:97:2b:9b:00:
8e:d4:16:18:0b:34:99:b8:6c:cc:66:10:98:54:85:
39:46:cd:a3:9e:9e:c2:cc:62:7e:5e:89:3c:61:42:
93:86:96:d5:41:f6:de:52:6c:25:5c:04:50:ca:04:
4c:53:c3:01:01:0d:3c:ab:24:d2:25:98:40:f4:b5:
0f:c3:95:63:46:64:61:c1:f0:e7:e3:c5:75:60:18:
47:34:52:d0:ab:c6:28:e1:0e:45:80:2a:29:8d:c2:
59:69:33:c2:cf:bb:c3:bb:e5:bc:56:88:f5:8d:e8:
98:9e:8f:5b:64:3a:ac:12:b1:b4:e0:cd:df:7d:5d:
69:1b:4c:de:10:44:4b:83:0b:59:0a:65:26:ae:22:
8b:df:42:15:47:36:c9:1d:68:85:17:3c:3f:1f:19:
44:c0:e1:5d:47:b7:df:1a:36:a5:f8:05:29:97:bb:
aa:c9:af:e6:c7:a4:f8:ca:d3:59:c3:d1:b3:91:5c:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:A1:3A:80:6F:15:1F:B9:1D:2E:A2:58:44:F6:55:FE:1B:52:A4
X509v3 Authority Key Identifier:
keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a3:9e:e3:0a:36:8f:11:1a:83:e7:d8:d5:5d:2d:98:61:ba:
3a:74:41:7c:48:01:b1:ec:04:83:0e:5a:83:4d:97:60:67:fc:
85:ad:3b:a4:99:aa:7b:b7:a0:8a:a2:cb:a1:a6:11:fa:51:12:
81:c6:17:20:39:64:0d:67:5a:24:79:d2:f3:a8:86:c6:4d:77:
4c:89:ad:4f:0c:18:a3:0f:0c:71:4c:73:c2:32:ec:4f:18:ce:
94:b8:a6:41:87:e3:86:29:09:a9:92:4d:5e:cf:dc:87:88:e9:
b6:ee:c8:80:40:35:f2:27:b9:a4:60:7b:6c:37:15:c5:13:c8:
bb:6e:44:7b:78:cb:e4:e3:c3:7c:72:a5:cc:cf:03:31:bd:c1:
d3:0a:13:e7:22:ce:c6:22:87:c9:10:4d:50:f9:6d:fb:85:9c:
fa:ca:87:65:42:3c:0b:47:5e:52:38:b5:f9:90:d5:39:37:70:
97:e8:18:64:d6:ed:22:e8:82:02:c6:f5:5a:96:38:7a:db:63:
3a:ba:5d:ca:5e:c9:0c:2f:00:96:b7:d4:f3:ac:92:24:12:83:
1c:fa:f3:d9:2f:90:f2:73:ff:87:51:ee:07:08:24:fe:9f:93:
83:90:a1:78:fa:57:ae:0f:24:fd:51:0a:51:38:6a:a7:6b:6a:
ad:eb:a1:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZCNCsI/r16UtMAoDpCg3z7LEm9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4
Q0I4RkQ1MjAeFw0yNjA0MjkwNzU3MThaFw0yNjA1MDIxODI5MThaMDMxMTAvBgNV
BAMTKENDQ0ZBMTNBODA2RjE1MUZCOTFEMkVBMjU4NDRGNjU1RkUxQjUyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy4vy1tixqPQ30r3NCdnF8Jq+/
M2jCabSwrUMoyCcCFNXAg0909fyKbX4W4RbpKl5VG+9W1Ne0vj+ZUCTyUo66uQSS
BxGXlyubAI7UFhgLNJm4bMxmEJhUhTlGzaOensLMYn5eiTxhQpOGltVB9t5SbCVc
BFDKBExTwwEBDTyrJNIlmED0tQ/DlWNGZGHB8OfjxXVgGEc0UtCrxijhDkWAKimN
wllpM8LPu8O75bxWiPWN6Jiej1tkOqwSsbTgzd99XWkbTN4QREuDC1kKZSauIovf
QhVHNskdaIUXPD8fGUTA4V1Ht98aNqX4BSmXu6rJr+bHpPjK01nD0bORXCgvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzM+hOoBvFR+5HS6iWET2Vf4bUqQwHwYDVR0j
BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2
QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4
RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk
ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2
NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK+jnuMKNo8RGoPn2NVdLZhhujp0QXxIAbHs
BIMOWoNNl2Bn/IWtO6SZqnu3oIqiy6GmEfpREoHGFyA5ZA1nWiR50vOohsZNd0yJ
rU8MGKMPDHFMc8Iy7E8YzpS4pkGH44YpCamSTV7P3IeI6bbuyIBANfInuaRge2w3
FcUTyLtuRHt4y+Tjw3xypczPAzG9wdMKE+cizsYih8kQTVD5bfuFnPrKh2VCPAtH
XlI4tfmQ1Tk3cJfoGGTW7SLoggLG9VqWOHrbYzq6XcpeyQwvAJa31POskiQSgxz6
89kvkPJz/4dR7gcIJP6fk4OQoXj6V64PJP1RClE4aqdraq3roYY=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:01 2026 by rpki-client