Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft
File:                     39E28911B503E25DB463229AC922CAEF5693A5DD.mft (raw, json)
Hash identifier:          amWuYOTNgDFIZb7K9VuMlOSO9faWE2T6+txII82vfE0=
Subject key identifier:   C5:CE:A1:C8:A7:35:BD:13:0D:F8:22:98:6E:8E:0B:BD:C5:D8:62:70
Authority key identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD
Certificate issuer:       /CN=39E28911B503E25DB463229AC922CAEF5693A5DD
Certificate serial:       5DA6F95D967F9DF16196699861890BA005E9D841
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft
Manifest number:          2C
Signing time:             Mon 27 Apr 2026 15:00:00 +0000
Manifest this update:     Mon 27 Apr 2026 14:55:00 +0000
Manifest next update:     Thu 30 Apr 2026 18:06:00 +0000
Files and hashes:         1: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: V6FgFuQb/8P2YK/Gbx8tP5jXLguLbqQuIRGKv1SIkcI=)
                          2: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: /J0shVYTQYkB9FYkHOQENvK7HQrOevFXVOREKIMBB2w=)
                          3: 39E28911B503E25DB463229AC922CAEF5693A5DD.crl (hash: kpz2b9k46t+McXTB0m8QOKuoVdPIjiwhl8GnwV+zp9c=)
                          4: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: ad1wd0ZIpEpyRiDtqRMVdgtKv4TeNXfOsvHmoLGBFtc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:f9:5d:96:7f:9d:f1:61:96:69:98:61:89:0b:a0:05:e9:d8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E28911B503E25DB463229AC922CAEF5693A5DD
        Validity
            Not Before: Apr 27 14:55:00 2026 GMT
            Not After : Apr 30 18:06:00 2026 GMT
        Subject: CN=C5CEA1C8A735BD130DF822986E8E0BBDC5D86270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:1d:1c:69:0f:b6:7f:95:91:08:09:4b:fe:
                    0b:9a:91:5a:52:e4:f6:af:13:ee:28:4b:40:36:6f:
                    b8:46:7c:e4:a2:8e:4a:ad:bc:91:e2:ee:ea:0b:d2:
                    94:cb:b9:52:b8:79:41:f6:bc:00:85:9a:b2:c7:3c:
                    7d:34:92:8f:14:56:4e:73:a5:94:11:aa:db:43:a0:
                    71:ab:d7:bc:36:ae:9f:11:d6:0f:75:b5:7e:70:f2:
                    6b:19:42:ba:61:87:9c:c0:4b:66:3e:26:47:24:41:
                    de:18:4b:f8:97:4a:1a:bf:3e:b2:6c:c4:8e:37:f0:
                    23:63:cf:e4:7b:74:62:d8:8a:04:f1:84:6a:56:09:
                    21:be:b0:e1:07:3a:e4:42:cc:e4:75:77:af:d4:1b:
                    36:29:fc:e6:ad:70:b6:fa:db:40:01:1f:98:21:81:
                    2c:8d:93:fb:0e:2e:c5:cf:70:d6:df:3a:c2:af:72:
                    7b:9f:45:a2:84:71:74:50:68:37:f1:6c:ac:d1:18:
                    64:cf:76:a9:2a:05:6d:f9:ba:4e:f1:d0:38:7c:e2:
                    ce:d8:2f:e1:f5:d4:67:d9:f7:43:a0:64:e8:aa:c5:
                    ad:43:e6:c4:cb:f2:d1:da:e1:1b:18:90:c6:d9:d9:
                    8e:c3:15:92:a9:7d:4f:25:31:b3:a4:29:65:4b:10:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CE:A1:C8:A7:35:BD:13:0D:F8:22:98:6E:8E:0B:BD:C5:D8:62:70
            X509v3 Authority Key Identifier:
                keyid:39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:9c:52:91:ca:58:07:e2:41:01:7f:d0:63:5c:c5:55:45:74:
         b7:5b:4b:87:68:a4:db:73:55:bd:32:45:69:8a:b6:14:8d:2a:
         04:e3:d8:12:a0:30:4f:9d:7d:ae:cf:00:ed:80:5d:cb:ed:9b:
         6a:d3:ab:9a:cf:bc:c6:02:ca:95:9c:f5:51:8f:cd:7f:07:3d:
         4b:95:f4:8d:ac:54:86:e3:d1:2a:0f:c9:6b:9f:56:e2:4e:c9:
         28:13:8f:1c:6d:1f:75:31:80:03:2a:04:c4:41:3c:33:cd:12:
         25:bb:67:3c:e8:9d:6b:84:55:e9:b8:82:ab:53:57:07:88:23:
         a1:ac:b0:8f:22:af:1d:6c:da:3e:21:cf:15:ee:29:11:b3:f4:
         08:7f:b4:fe:aa:ce:c4:53:f7:67:2d:44:eb:35:6e:25:3a:cc:
         17:b9:02:ce:13:73:c2:3e:32:d1:95:e3:2a:42:f5:58:d3:23:
         d3:93:3e:dd:ab:f9:9f:2d:03:29:0b:f5:6e:63:b5:3d:37:6e:
         49:11:08:33:45:43:ce:7e:87:3b:a1:8a:56:d6:17:55:3d:b7:
         79:d1:75:4a:78:05:52:4e:72:66:5c:e2:fc:17:9f:c3:9d:0d:
         de:2f:08:43:94:6c:0f:64:dc:20:41:b5:b4:20:77:36:8e:1f:
         8e:fe:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:16 2026 by rpki-client