Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
File:                     E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json)
Hash identifier:          OM+EKEVy1Kacc3veh4um5pZQSf+3Ui7xrzrvYhpkpMg=
Subject key identifier:   0C:A5:93:CB:5D:59:38:09:FD:A8:5E:85:89:3D:1B:81:F6:27:B9:83
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Certificate issuer:       /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial:       2A87C2D5ACF4FF2CC0BCAB3DBF7D40FAD5BAAB17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
Manifest number:          03FC
Signing time:             Tue 28 Apr 2026 16:50:52 +0000
Manifest this update:     Tue 28 Apr 2026 16:45:52 +0000
Manifest next update:     Sat 02 May 2026 00:19:52 +0000
Files and hashes:         1: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 804HXnC9WlBS21d4SfuHgFOcruO6kfwM3PJgXEA5PHA=)
                          2: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: jM1dJ3YR7TzVljwojJa4q/EeDXXOpsBTj/prM8KE7fc=)
                          3: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: yAg9m7pF+iYdNCy/yrXz8NRtzJrusflXAmCndUFdC8g=)
                          4: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=)
                          5: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: rGHSmtnO8YlcwKux+iU+plREJhdzVU0+yTBDbs6kXto=)
                          6: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: HY9osVwLOMR4tD+eVQatSGC0dv83RQqDvb78nVO4AL0=)
                          7: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: BxXiGZiZ0RhEjv39QYMG93IThYVCN/N1iK7U2fft/Rc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:87:c2:d5:ac:f4:ff:2c:c0:bc:ab:3d:bf:7d:40:fa:d5:ba:ab:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
        Validity
            Not Before: Apr 28 16:45:52 2026 GMT
            Not After : May  2 00:19:52 2026 GMT
        Subject: CN=0CA593CB5D593809FDA85E85893D1B81F627B983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:5d:29:c3:3b:ad:e0:4c:9b:03:e8:1b:d9:
                    a2:7e:23:32:ab:8a:84:33:d6:25:12:77:8e:6c:cd:
                    a2:36:58:e7:d6:22:e7:87:4b:6b:d2:5f:f8:ff:49:
                    1e:18:a6:6b:2d:ac:89:f6:08:0e:94:1c:9b:50:2e:
                    14:32:85:7e:05:ef:ce:0c:24:4d:02:b9:25:1b:17:
                    4f:fa:ce:c1:31:5a:07:ec:e6:3c:3f:8b:5b:0c:a0:
                    32:99:8e:9b:2c:ea:81:f8:c5:a4:9e:8e:25:2c:a7:
                    5c:7a:a0:05:47:81:97:62:ca:15:41:ea:2f:62:b5:
                    2e:ce:0f:bf:48:c4:da:f1:ed:49:72:ab:19:08:76:
                    6f:75:d3:5a:ce:95:80:80:e8:c2:9d:ae:7e:0f:a0:
                    11:b9:02:e8:de:5e:e7:22:ee:55:07:13:e3:6e:b7:
                    ed:ab:1f:b0:30:70:6a:86:ea:f9:2c:41:b3:72:a7:
                    05:52:1f:71:72:06:e2:29:0f:60:8d:d6:98:ec:fc:
                    a3:82:21:98:ed:dd:36:a1:63:f5:db:df:17:74:cc:
                    f1:c1:94:9e:b4:10:56:42:bf:1e:35:04:3c:29:60:
                    ff:29:c2:d6:4a:0d:67:31:9d:06:7e:04:dc:cc:6b:
                    18:5c:3b:42:0c:01:9c:04:3f:5b:e7:73:de:7c:ae:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A5:93:CB:5D:59:38:09:FD:A8:5E:85:89:3D:1B:81:F6:27:B9:83
            X509v3 Authority Key Identifier:
                keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d8:0f:be:b2:83:38:51:6a:3e:5e:90:d8:fd:f0:ae:89:20:
         c3:59:2e:61:7a:df:c2:3a:c8:37:b8:41:43:ae:33:2d:3c:36:
         15:84:59:f6:12:02:38:c0:76:36:cf:e6:de:13:1e:9a:fa:60:
         65:00:ed:da:bb:08:19:96:a3:3d:e4:75:08:b9:12:8f:f2:bf:
         f7:74:b9:6b:64:07:79:d5:7e:d1:0f:e1:f3:a7:9f:a5:e1:41:
         9e:c8:cd:f6:d2:f7:cb:b5:05:d7:23:66:51:b3:c4:51:08:4e:
         52:56:e9:bc:2c:94:ae:7e:a5:81:f4:21:92:b5:67:31:77:2e:
         be:c5:29:9f:bf:ca:0c:9e:ce:8b:6e:95:c6:a7:ea:15:89:e3:
         6c:82:98:93:1b:2a:ea:61:5e:d4:9b:f7:f9:0b:02:f5:d2:77:
         a9:e0:24:0e:c7:63:1a:2c:a9:38:4e:17:eb:57:69:67:c6:c5:
         f3:db:42:b6:c6:2b:37:25:26:b9:c1:60:45:73:b3:79:e1:60:
         ba:e3:6d:ed:e9:95:2b:db:c9:4b:b0:1e:ae:6b:1d:3c:26:d4:
         02:3d:7c:04:44:9f:55:71:95:3d:9e:dc:4d:af:d3:0d:1c:fd:
         00:16:4c:f5:40:95:b3:c2:3e:73:4b:6c:f2:21:38:0b:46:cc:
         69:ec:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:04 2026 by rpki-client