Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft
File:                     645C9D445B2796662EE98A03E50C124F3E962CAB.mft (raw, json)
Hash identifier:          U41pCRR0SYbTCKxLAeXUZhVbG4A853I1XAPPHYPXqF8=
Subject key identifier:   F8:21:44:94:20:DE:8B:ED:4C:29:AC:9A:FB:8D:E3:0B:D1:14:3B:3F
Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB
Certificate issuer:       /CN=645C9D445B2796662EE98A03E50C124F3E962CAB
Certificate serial:       65F533F333273D720050474096D14367D0436C4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft
Manifest number:          0411
Signing time:             Mon 27 Apr 2026 09:31:20 +0000
Manifest this update:     Mon 27 Apr 2026 09:26:20 +0000
Manifest next update:     Thu 30 Apr 2026 11:42:20 +0000
Files and hashes:         1: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: e9MuQpUdmZSWJyLwqKXY1nxQlgwTqEZ4CpPjIrRXOr8=)
                          2: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: bgUQl2KKDVdxSEkmrD5bo1yuFXhp8F+vNio9ZlmO2Lc=)
                          3: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: +SeGBM9CdtDOWXU9iixLlEgCajKedvFQm/V7StxkJlo=)
                          4: 645C9D445B2796662EE98A03E50C124F3E962CAB.crl (hash: 2KDJLjUu7lhQutEwk9QetdmulN09WwdHUzjKXCAFCm8=)
                          5: 323430313a626534303a3a2f33322d3438203d3e20313336383431.roa (hash: 8QSbauO9NNotVx0xsCiC0xHQEL8XE+fwtGOjSQB5tIM=)
                          6: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: IX4uPd9N3SkfP7LEqX7tm7Aw2XVAAH51yq8xtLADMD0=)
                          7: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: SMPg/3qiOryd428jAGKTXmMedIlqTpx2BfnFfzgQnCk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f5:33:f3:33:27:3d:72:00:50:47:40:96:d1:43:67:d0:43:6c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB
        Validity
            Not Before: Apr 27 09:26:20 2026 GMT
            Not After : Apr 30 11:42:20 2026 GMT
        Subject: CN=F821449420DE8BED4C29AC9AFB8DE30BD1143B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:20:2a:ef:29:17:48:b7:63:d9:07:e7:b7:
                    cf:ee:0a:65:a2:17:35:59:87:c3:b5:7a:ef:65:d5:
                    65:31:89:e1:58:ad:ac:cf:c8:d3:64:64:a3:15:96:
                    39:30:5d:fc:84:ae:37:e6:04:b3:d1:16:12:3d:cd:
                    b6:e4:d3:e2:5b:3f:e2:31:8e:27:9f:25:4a:08:12:
                    57:8c:37:d9:d9:d2:56:b2:03:ca:60:57:30:f5:f3:
                    43:2b:b8:d4:95:36:3b:09:c3:f5:6c:18:b1:ba:fb:
                    cb:00:44:34:4d:11:db:23:d9:75:f5:e4:80:ab:80:
                    e4:21:12:2b:37:19:0b:f4:cb:42:7e:7e:6f:28:83:
                    29:3a:00:58:50:2b:fa:52:67:f6:62:e5:90:46:3a:
                    45:8e:0c:4b:5a:dd:4b:2a:66:c0:af:fe:9a:67:08:
                    92:56:ab:63:3d:38:c3:cc:71:65:a4:62:c2:3c:55:
                    21:84:be:c9:6f:a6:f0:42:d2:98:9b:58:14:86:34:
                    2d:ff:be:ef:1f:ca:01:fa:d6:22:0e:8f:48:3d:17:
                    19:38:9c:c3:24:9f:57:e6:87:29:bb:cd:01:c2:6f:
                    36:be:2b:a8:25:34:b0:fd:47:8f:35:4a:5c:d8:89:
                    1a:00:9e:00:1c:e9:05:a5:7c:61:57:18:b7:d5:58:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:44:94:20:DE:8B:ED:4C:29:AC:9A:FB:8D:E3:0B:D1:14:3B:3F
            X509v3 Authority Key Identifier:
                keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:12:76:17:07:5d:fa:8d:ae:2a:f0:9c:9c:41:78:14:3f:
         38:13:35:27:76:96:0d:01:b7:7f:3f:08:77:3b:dd:52:c7:0e:
         54:51:14:e0:f3:0b:80:d6:5c:b1:ca:66:ae:0e:f1:5f:a7:06:
         45:85:a0:bb:8e:5e:de:e1:a2:7b:e8:83:60:5f:de:73:71:73:
         d6:78:13:d2:a9:a5:21:93:05:f2:87:0a:e6:7a:44:f3:0c:72:
         03:49:07:4e:15:a5:70:6c:67:e1:ee:7d:46:fb:9a:61:99:17:
         37:a0:29:5b:0b:bb:27:fa:b2:c6:8f:5c:a7:83:9e:cf:dc:e2:
         2c:23:cc:e1:b8:46:53:19:92:02:0a:be:ea:b9:5d:35:7b:43:
         67:6a:15:41:18:9a:bd:79:59:8d:0d:4e:82:4f:7c:61:ef:10:
         15:4c:82:e8:18:d5:a7:ab:b4:2e:df:ed:ed:13:de:07:ad:6b:
         0c:4f:11:e9:71:0d:44:2d:d2:5a:6f:a9:9b:2a:59:80:a2:89:
         55:50:f5:5a:46:64:6d:6f:3c:d2:2c:b4:57:c7:c7:47:de:14:
         e1:fd:4b:29:cf:48:d5:a2:88:7f:e8:8d:7b:2e:40:07:75:cc:
         e3:2b:8b:8d:b3:e2:d7:f1:6b:dc:78:6b:8c:07:25:32:00:2b:
         54:06:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:41 2026 by rpki-client