Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft
File:                     4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json)
Hash identifier:          aWxxTrIa3Ivw7dAyQazzjNDQ43NR0vmRJ0qTJKsuQhU=
Subject key identifier:   5D:B2:8E:26:DB:E5:D1:74:32:D3:FC:C2:8F:F3:E2:7D:50:F6:B3:BF
Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12
Certificate issuer:       /CN=4FA812FE6A4A85F790CB2740EF08836883716912
Certificate serial:       2DF37F5AA37BE603B548292EC222FE7CE1DA5606
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft
Manifest number:          0537
Signing time:             Tue 28 Apr 2026 05:20:57 +0000
Manifest this update:     Tue 28 Apr 2026 05:15:57 +0000
Manifest next update:     Fri 01 May 2026 14:09:57 +0000
Files and hashes:         1: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=)
                          2: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=)
                          3: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: hqMPxhZS5ANhH914dVCOMY/GuYYburOsjxPgUdespGU=)
                          4: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f3:7f:5a:a3:7b:e6:03:b5:48:29:2e:c2:22:fe:7c:e1:da:56:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912
        Validity
            Not Before: Apr 28 05:15:57 2026 GMT
            Not After : May  1 14:09:57 2026 GMT
        Subject: CN=5DB28E26DBE5D17432D3FCC28FF3E27D50F6B3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:44:e2:d1:4e:b5:e5:a9:f0:53:0c:db:8d:
                    a1:ea:75:e7:ba:05:14:cb:98:ca:44:4a:49:e2:e3:
                    47:ad:af:6b:6a:21:66:b9:de:fc:b1:3d:d4:e1:ce:
                    21:63:1c:a1:ac:86:e0:ec:d2:a6:3b:54:e0:aa:29:
                    14:71:9c:e0:19:01:51:0b:5f:c1:dd:fc:55:6c:c2:
                    f5:d0:a2:0f:11:d3:37:77:b4:63:d5:b1:d5:84:00:
                    e0:5f:38:09:fe:91:fd:b4:4f:11:b6:e0:76:93:e6:
                    7a:fb:34:c4:82:81:7e:42:81:ff:00:22:49:5b:02:
                    8f:7b:ba:6e:bb:7f:ae:03:25:b0:50:30:c8:71:41:
                    a6:e9:93:25:8f:bb:ad:f6:88:f5:38:35:34:03:7b:
                    89:c1:08:0b:9e:ad:fd:93:85:0b:d1:ed:68:5a:b3:
                    63:bf:e6:89:33:f7:10:11:b3:cf:cf:85:55:77:ee:
                    94:ca:80:4f:1b:31:de:18:52:d5:d4:9d:cf:31:69:
                    80:de:0d:a4:6b:b7:24:a0:c7:aa:fc:a7:15:83:2e:
                    2b:95:76:ae:69:2e:3b:26:93:07:53:14:27:e2:61:
                    2f:04:71:79:5d:12:03:97:a7:d5:b6:b4:ba:bf:a2:
                    ac:21:ba:58:5b:71:96:67:c3:11:62:20:85:00:95:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B2:8E:26:DB:E5:D1:74:32:D3:FC:C2:8F:F3:E2:7D:50:F6:B3:BF
            X509v3 Authority Key Identifier:
                keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:a4:86:89:cf:b2:3b:0b:67:a9:9e:68:78:ae:25:11:f1:
         f2:b1:2f:bb:42:4f:95:21:d4:33:f4:62:58:e3:68:f8:cc:2c:
         9b:b4:1a:03:a8:81:ee:32:ae:d4:97:94:0e:78:4b:45:ea:33:
         46:42:19:10:d7:85:5b:e9:60:cd:c6:07:39:91:90:49:f2:3d:
         12:e3:f6:51:3d:50:80:c7:1b:c3:ed:ae:9c:22:72:9a:77:13:
         47:72:21:b9:20:c5:5d:b8:7f:7f:1c:b5:a4:24:41:a4:53:ab:
         4d:d5:3e:71:79:b2:52:d8:19:c3:47:d9:b0:78:62:6f:23:47:
         ea:4e:08:80:74:21:00:6b:89:5c:4a:19:49:5a:89:9d:bb:1c:
         bb:b8:f6:38:55:be:9f:e3:34:fb:f7:ab:37:09:b8:6d:42:e6:
         c5:9d:79:59:b5:b1:e8:51:70:e2:c1:70:a1:2d:8e:0c:43:d8:
         6d:a8:e9:37:2b:82:ec:3d:8d:e7:6e:b2:44:d3:53:8f:1a:26:
         4c:78:fe:0f:6e:a2:6b:76:7c:b9:70:c9:51:72:13:2d:e1:8f:
         c1:04:9d:c6:30:64:c8:59:7d:e6:59:4d:f1:8d:b9:f7:34:73:
         a9:9d:35:80:93:12:6f:93:c7:92:6b:61:1c:ce:05:5d:f4:1d:
         ac:4f:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:48 2026 by rpki-client