
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json)
Hash identifier: Ogu82TZWvPJpKIXHBMYpDs4g392kvqXqsURZ40fNFi0=
Subject key identifier: 9F:FE:9F:4F:D1:1D:BE:13:DD:55:B1:0F:59:58:E3:DA:BA:0B:2C:1D
Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC
Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
Certificate serial: 4EEF3AD29E8A4AF5F748C7A39D6376E8384B5F3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
Manifest number: 038F
Signing time: Tue 28 Apr 2026 04:42:44 +0000
Manifest this update: Tue 28 Apr 2026 04:37:44 +0000
Manifest next update: Fri 01 May 2026 09:28:44 +0000
Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: TxrmoKrqARWab9ylEV/+Zh9JMFb9eSPpmIr8WI895kM=)
2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ef:3a:d2:9e:8a:4a:f5:f7:48:c7:a3:9d:63:76:e8:38:4b:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
Validity
Not Before: Apr 28 04:37:44 2026 GMT
Not After : May 1 09:28:44 2026 GMT
Subject: CN=9FFE9F4FD11DBE13DD55B10F5958E3DABA0B2C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:e4:fa:2d:4b:5b:d8:2d:85:06:b8:6b:36:
5f:42:58:57:b8:7c:1f:fa:a8:36:22:1f:09:b5:4d:
cb:49:6b:ea:76:45:b6:ae:2d:cc:f9:32:1d:aa:3d:
b4:d6:11:db:7f:fb:e2:d8:a9:3d:ba:6d:38:4e:65:
47:35:6d:33:46:51:67:f7:1a:3b:4a:ad:af:08:28:
89:0a:83:32:99:16:9e:54:f7:75:a5:9d:82:e7:7d:
3f:f3:1c:b6:db:56:00:0c:18:30:86:b6:0a:91:68:
23:9f:d9:41:6e:20:eb:15:7d:a8:c2:a2:b9:4b:95:
6c:6b:8b:0d:4a:67:59:22:00:d9:b3:1d:cc:30:ff:
96:38:05:59:a9:9c:f7:10:45:d9:67:ff:b3:96:e7:
a3:da:c3:1d:16:e0:d9:d5:bc:38:1f:b6:f6:02:2d:
fe:e4:35:cf:bd:23:9b:f9:68:01:01:aa:e5:7c:18:
c9:f4:88:3d:e3:f3:7f:e4:67:3d:36:b5:63:3c:e3:
62:0b:a7:d8:30:0c:3d:f8:8e:90:85:9a:75:0d:17:
13:3d:39:7d:73:07:7e:ea:b0:18:de:82:6d:73:5e:
c1:89:91:31:f8:7a:56:94:17:fa:76:a0:4b:48:76:
5c:8e:68:fc:fe:17:fd:82:9e:80:86:ef:19:21:9d:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FE:9F:4F:D1:1D:BE:13:DD:55:B1:0F:59:58:E3:DA:BA:0B:2C:1D
X509v3 Authority Key Identifier:
keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:dd:ba:fb:09:92:15:a7:b8:4a:43:e5:71:de:ea:a6:87:fc:
5f:65:98:d5:b3:b1:35:14:99:58:f0:e4:ce:59:db:c6:6b:df:
33:f9:88:a2:08:a8:38:56:e1:d2:07:e4:94:52:6a:5a:ce:8e:
9b:60:dc:d6:a1:6e:85:2b:c7:87:e9:80:42:3c:2b:a2:20:2a:
d9:0f:71:47:c4:a2:d1:d3:fa:43:08:d2:55:5f:82:95:07:ec:
f9:67:08:6f:39:ca:d8:45:14:52:36:9a:17:5a:89:04:aa:88:
14:88:c2:05:a7:30:ff:ee:d6:fe:6e:d1:7d:e3:c1:3f:87:57:
7e:f0:92:44:af:fd:5d:1e:f4:fc:59:c4:ec:d8:8a:ff:0e:b8:
53:46:df:06:5a:9d:db:05:0f:90:66:c0:17:f6:52:44:7b:04:
86:d0:bf:c4:21:73:5d:b1:43:21:dd:eb:5c:c0:89:72:1e:86:
1f:bf:1c:96:d3:85:28:0f:15:b5:6a:3c:13:f5:af:88:c0:b7:
13:eb:1e:3b:3a:f8:3c:fd:5d:26:1b:03:96:53:bb:a1:f1:de:
61:e0:cb:d0:96:de:70:d6:49:58:51:80:a5:d0:8b:0c:c6:28:
3a:73:5a:30:8e:11:f4:0c:1c:b5:c5:f1:6d:97:2b:57:76:a9:
4e:96:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:32:53 2026 by rpki-client