Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft
File:                     3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json)
Hash identifier:          914FaWLXnU3x5810cWZsJKiZz4NjcVZ4cMqhq2pJ8DQ=
Subject key identifier:   47:FC:70:3F:10:C9:BC:C8:53:26:E5:6C:4B:EA:E4:91:24:B2:03:9D
Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51
Certificate issuer:       /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251
Certificate serial:       4F25E19C840FD808AAFA6DDABBC92AE8E36D0C9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft
Manifest number:          0290
Signing time:             Wed 29 Apr 2026 01:02:22 +0000
Manifest this update:     Wed 29 Apr 2026 00:57:22 +0000
Manifest next update:     Sat 02 May 2026 04:09:22 +0000
Files and hashes:         1: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: o/hW8qZTONTOAc20EcYPM6z7EK54AM3nJtkiYTqdmzw=)
                          2: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=)
                          3: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: ozPJYOVssKP+q4r+91KDUKMOA2Q0wr5UVi5gcfhibY8=)
                          4: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 3exU7oFsvYUFSV8eY2HjGvJAd31licbqMiWMGxc4mP8=)
                          5: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=)
                          6: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=)
                          7: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=)
                          8: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=)
                          9: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: g7MxCuMcZcUZMViRKxMdEfGOeCRM4ZwEaqaIDOryUYY=)
                          10: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: WD3hCT6MILwIPZ4dCDhl0fGWEEcaNJ+QbJrnwlE7Ah4=)
                          11: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: KmsUdHDk3KWG6ZVcZIyi7cy4EBKg+PkfE62y9MOD+Qk=)
                          12: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: tMWjooLi2F7KXFCZbnIlkGyY3nB0YSrhkrZ6SMkaGL0=)
                          13: 3132302e32392e3232352e302f32342d3234203d3e203139393035.roa (hash: 8oS+uko7G4J7a7YK5iDBr81dMlt64vMgKJuUKbWy4MA=)
                          14: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: MIBjJ0juyARBq3pL12kDjJxTxoFUENwyQCjEpJRY2ns=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:25:e1:9c:84:0f:d8:08:aa:fa:6d:da:bb:c9:2a:e8:e3:6d:0c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251
        Validity
            Not Before: Apr 29 00:57:22 2026 GMT
            Not After : May  2 04:09:22 2026 GMT
        Subject: CN=47FC703F10C9BCC85326E56C4BEAE49124B2039D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:bc:1e:b8:54:d6:61:47:e5:1f:06:1b:46:
                    b0:42:9e:c5:64:bc:22:de:6d:7f:d5:f8:c9:bf:62:
                    55:5e:66:7c:8c:32:80:d1:e1:b9:8c:67:0c:4f:2c:
                    34:c1:58:3a:20:ba:30:fe:d8:17:dc:37:80:88:1c:
                    ea:59:ea:22:fc:5c:64:dc:08:c1:04:55:33:91:9a:
                    0d:66:15:7c:2f:3c:b9:90:64:a6:0d:b4:01:36:33:
                    87:25:f7:37:4f:52:19:10:be:36:50:3b:47:df:04:
                    c8:a1:93:0f:c6:91:a8:51:3f:62:90:3e:2a:8b:e1:
                    22:2b:1c:14:d7:93:dd:3f:1c:1a:ec:0c:7b:3f:22:
                    8f:7b:86:d0:1e:04:e3:5e:74:5c:d3:69:ef:d6:7a:
                    7d:8a:f5:2a:cd:0f:27:20:61:3c:25:81:65:4b:fb:
                    dc:04:17:7d:c8:f8:8f:aa:9d:e0:8f:7b:f7:f5:91:
                    8d:a1:03:2b:d7:58:4e:25:11:f3:0a:99:7c:94:b3:
                    06:7c:be:e7:69:ff:bb:11:29:a3:54:de:8d:7c:22:
                    5f:74:42:32:1d:76:c1:b2:b5:8d:5e:b3:0a:74:27:
                    d8:e6:85:c8:83:26:9d:03:5c:03:5b:39:39:56:91:
                    f3:58:01:7f:d5:05:d8:ee:5f:a1:8d:34:c5:38:61:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FC:70:3F:10:C9:BC:C8:53:26:E5:6C:4B:EA:E4:91:24:B2:03:9D
            X509v3 Authority Key Identifier:
                keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3a:87:75:6c:66:c7:8e:a9:6e:ec:8c:7f:59:7c:67:a4:b6:
         cf:d8:a0:b7:4b:27:44:d6:f3:f4:2d:f4:0d:19:c6:7a:46:85:
         f6:73:57:dd:df:ee:7b:6b:df:bf:21:04:5a:70:8a:62:d6:3d:
         98:af:6c:f5:c3:af:e9:cd:21:9b:e1:32:ac:2f:e8:b0:b6:f4:
         95:e6:6b:7d:0d:3f:05:60:93:af:1d:7a:ee:21:66:ac:8c:18:
         fd:48:fd:92:f0:b9:fa:08:40:29:eb:ea:f5:78:5a:59:34:82:
         f4:4f:50:28:e4:be:fa:39:b8:74:28:6a:e0:e3:25:aa:46:04:
         70:5b:d3:94:87:b4:ab:86:df:9b:9b:ff:00:b9:71:59:8e:e4:
         b8:e6:82:59:90:ba:27:1b:1f:32:f3:68:c9:17:eb:eb:ef:bf:
         e3:36:c9:e1:a4:f7:fa:8f:83:2e:a5:7a:b7:a6:3b:19:34:d1:
         4b:61:88:d9:86:ef:55:f2:d3:09:7a:cb:0f:f1:0d:d5:0d:35:
         9f:15:cb:99:55:c6:47:f0:64:d7:ae:b7:5f:ca:fb:dd:74:8e:
         36:23:47:78:e0:a8:e0:4f:e1:0e:43:b3:6f:27:ba:7a:c9:52:
         2c:32:78:9d:fd:f4:ef:be:9d:85:63:07:e8:1d:e1:21:36:74:
         d0:a4:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:32 2026 by rpki-client