Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
File:                     9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json)
Hash identifier:          qVhiQvpmlzTu9jhdbLsvvj7otFqJHMCi0/eRfzovpX4=
Subject key identifier:   FC:1F:44:1F:AA:42:AB:DA:FD:C8:7D:7E:8E:A4:71:81:F4:AC:EC:7A
Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
Certificate issuer:       /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Certificate serial:       30FFA46A0860C985C56D2B1AB5E3C80CAC8D0145
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
Manifest number:          0219
Signing time:             Tue 28 Apr 2026 22:41:43 +0000
Manifest this update:     Tue 28 Apr 2026 22:36:43 +0000
Manifest next update:     Sat 02 May 2026 07:50:43 +0000
Files and hashes:         1: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Nka7D2jqXbj79FFV3Yc8UZRbj0fZb/aLLQS8vVOKGSE=)
                          2: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: OUcMMcoYs3L7qjCtIg1As0dtEmAMfCqKj4310DqgcIs=)
                          3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: abrBJodRCx5xNvn2142HhlgOkzWj2GA0de3Mgx2vU6c=)
                          4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: Hg8oWG164Y0Dz0OH2cwj6JjK/OmfQmVg/cUvcWXZfYs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ff:a4:6a:08:60:c9:85:c5:6d:2b:1a:b5:e3:c8:0c:ac:8d:01:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
        Validity
            Not Before: Apr 28 22:36:43 2026 GMT
            Not After : May  2 07:50:43 2026 GMT
        Subject: CN=FC1F441FAA42ABDAFDC87D7E8EA47181F4ACEC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:37:e8:4e:fd:66:c5:ad:55:1b:1f:0d:1f:
                    c5:08:8e:6f:ad:9b:2a:d0:3a:d1:95:f2:ed:25:35:
                    52:f3:95:63:22:24:53:96:b9:80:db:ea:c3:04:bf:
                    84:40:5d:4d:56:75:d8:b8:b8:57:66:4a:18:1a:d5:
                    a0:56:af:32:35:eb:fa:b9:33:fe:aa:4d:51:bc:67:
                    36:41:1f:76:7c:44:c6:22:58:fe:af:42:3a:59:b7:
                    eb:50:85:75:e9:c4:6c:cf:39:ce:3e:6d:fc:10:a4:
                    6c:ab:aa:08:aa:7e:85:90:25:58:ed:c1:20:de:da:
                    1f:92:16:7a:b4:14:7b:a9:d3:8f:06:68:e0:92:94:
                    8c:50:63:ab:40:65:18:f8:2f:17:33:0d:e4:87:73:
                    82:5a:d8:20:cb:71:02:ce:49:06:fa:65:e1:f2:0f:
                    54:20:b1:a9:80:a6:84:cb:21:d0:77:de:a9:f2:6d:
                    79:eb:2a:ab:2f:1f:07:7b:ec:d1:63:df:0c:4f:82:
                    9c:36:71:0f:ea:52:72:a5:17:a6:79:70:de:de:9a:
                    a0:9e:79:83:dd:2e:98:04:33:f4:20:b6:27:b2:dc:
                    09:27:56:f4:1f:be:78:32:b3:5c:6a:71:4b:2a:c5:
                    44:6a:e2:56:e4:cb:4b:e2:40:c0:42:15:66:8f:da:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1F:44:1F:AA:42:AB:DA:FD:C8:7D:7E:8E:A4:71:81:F4:AC:EC:7A
            X509v3 Authority Key Identifier:
                keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:84:fa:ff:43:a2:75:4e:a5:f0:19:1b:d6:46:27:ce:c0:
         78:1b:b0:b9:0b:15:20:e4:6a:b9:da:e8:19:73:6a:fd:d5:de:
         e8:de:0f:a3:7d:2a:37:05:70:04:66:10:70:1b:50:4d:a3:92:
         96:a3:9f:b0:f3:45:6b:7f:6a:93:d7:c2:22:c3:a1:9b:06:0f:
         d6:d4:f0:f6:52:f5:ad:31:69:f1:be:83:a1:de:7d:d3:a3:b5:
         cb:3c:9a:44:db:e0:d8:d1:1c:c2:9a:0e:ed:7b:07:29:5e:6f:
         e1:91:8f:85:a3:7b:3e:ac:ed:70:5c:b6:1b:d9:5d:d0:a9:a3:
         c1:10:da:e1:bf:5f:d3:b4:b8:9c:72:a5:a1:0b:9e:49:56:41:
         51:4e:3d:46:2b:59:05:c9:e4:d4:34:0f:c6:d7:7e:ba:91:5b:
         5c:0c:fa:43:f6:e1:7d:76:25:34:d1:d7:28:2b:c4:4a:f7:94:
         56:a6:ce:d0:36:74:ae:22:bd:78:6e:31:35:ee:ac:1a:4b:d5:
         60:05:80:68:f6:2c:29:a2:0f:23:d3:9a:5c:d6:28:d5:1d:83:
         4d:ce:a1:4c:99:35:b1:d9:9f:43:e2:ed:2d:27:3f:16:40:60:
         bb:7c:af:09:89:a6:10:04:29:41:06:65:79:b2:20:40:ae:11:
         39:6a:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:21:58 2026 by rpki-client