Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
File:                     1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json)
Hash identifier:          g/bOZCbk1oC6l5Yi4za+NhmOPLzFwRAIUJy/ujvJcus=
Subject key identifier:   30:D3:62:0F:79:92:B0:99:E3:CE:1A:BD:EC:33:59:D8:6A:A3:B1:35
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Certificate issuer:       /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial:       74592032B1361FD8D9A9C009E2ACB5B0D625F072
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
Manifest number:          02A5
Signing time:             Mon 27 Apr 2026 04:34:17 +0000
Manifest this update:     Mon 27 Apr 2026 04:29:17 +0000
Manifest next update:     Thu 30 Apr 2026 10:56:17 +0000
Files and hashes:         1: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: nPXN7jiM3pyEkrdy+/m6LPxlqXOvK01rGWZj8klP7xs=)
                          2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: D3+VPean7D1EYCu/31sceMfjTlNNJfKyOQfz7pihzoU=)
                          3: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: cBkGG+I0fKOsMSDWDVv2R09AQ7o+qWoi+Szb7iMxrC8=)
                          4: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: MOHy6wjWBeL51UZchzZ1GnyqLqHldaTv3zuh0HMsJtQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:59:20:32:b1:36:1f:d8:d9:a9:c0:09:e2:ac:b5:b0:d6:25:f0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
        Validity
            Not Before: Apr 27 04:29:17 2026 GMT
            Not After : Apr 30 10:56:17 2026 GMT
        Subject: CN=30D3620F7992B099E3CE1ABDEC3359D86AA3B135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:f0:8d:95:69:f1:61:2a:f0:30:b8:c8:12:
                    d0:1f:39:e9:60:1a:ab:3e:d7:35:4a:57:b2:15:55:
                    6e:f8:ef:cb:8b:b9:fd:59:2b:2c:28:a8:ab:9f:1e:
                    eb:75:9d:80:20:b9:8d:fe:88:c7:0d:00:42:ff:60:
                    2b:d7:1c:34:80:2b:06:a0:fc:cb:75:15:ea:2f:27:
                    ae:8c:4a:63:50:90:07:a5:62:51:83:9a:46:6e:f0:
                    b5:1c:44:e5:23:8a:23:2a:eb:4e:60:00:6f:a4:d2:
                    67:5a:2d:5c:c6:49:4a:52:8c:08:87:a9:98:3d:9a:
                    2e:47:e8:24:79:fe:43:2b:e9:bc:1a:98:94:e9:e4:
                    62:e0:49:24:8f:a6:84:8b:f6:8e:28:4a:cc:e2:8d:
                    c6:cb:e7:97:77:66:dd:a4:6a:aa:89:c6:74:f7:f3:
                    d7:d8:06:d9:3f:e7:e9:c2:d2:99:61:3e:d8:8e:4e:
                    5f:55:9f:d6:89:d6:8b:04:f8:41:b6:e5:88:37:03:
                    c9:72:6f:34:0a:c6:73:fa:45:b0:5c:c2:62:e3:c9:
                    e9:c9:68:8f:ac:e1:25:65:0a:2a:7e:04:de:e9:3a:
                    f7:99:10:7d:47:de:84:aa:43:d6:a6:aa:7a:92:f2:
                    a2:ea:2b:80:7a:e2:be:33:a4:f0:e3:e7:8d:ef:ab:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D3:62:0F:79:92:B0:99:E3:CE:1A:BD:EC:33:59:D8:6A:A3:B1:35
            X509v3 Authority Key Identifier:
                keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e7:40:c6:f0:a2:10:a1:fb:2e:99:bb:69:de:f5:48:f7:50:
         07:e7:42:df:af:c7:a8:61:94:a9:48:d8:53:af:b7:e1:52:b6:
         ac:ab:13:a9:5d:b1:0c:d0:1c:f7:10:6d:7b:0d:3e:31:69:d9:
         33:61:0e:17:86:4f:e5:57:65:46:f3:6f:ee:21:46:ce:1c:ac:
         91:71:77:ce:3d:52:64:5d:d1:b0:2b:2e:ff:55:58:b1:79:47:
         91:55:64:0b:45:b3:5d:d4:81:25:56:a1:bf:ad:b1:7f:34:a5:
         cd:96:9c:c9:74:59:a8:95:8a:ff:8b:a6:50:c8:28:85:a2:a9:
         68:c9:42:61:46:85:4d:ec:c3:ad:bd:6f:8c:26:00:a5:e2:ee:
         40:70:20:5b:6a:9e:82:7c:9e:a5:f6:95:59:55:e6:b4:4d:b2:
         9c:9c:7e:d1:e8:2d:75:4f:94:44:1d:09:ba:a3:03:f9:c3:4f:
         ab:62:e8:7e:b2:ed:cc:fc:c3:e5:93:9b:f6:aa:be:a9:9e:59:
         1a:02:ac:ed:ec:99:b0:e7:4e:78:d9:3a:0d:31:0a:fa:3e:91:
         a1:51:c6:d6:5a:39:94:ae:18:e0:96:db:63:a8:9e:dd:3a:bd:
         e0:e0:b1:21:e7:e0:74:23:98:36:51:0b:64:6b:9f:b6:1d:71:
         af:e3:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:49 2026 by rpki-client