Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft
File:                     D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json)
Hash identifier:          AbsssMWUR8oV01ZkPqV2uaKjrQ0IIiTm1tKClUPzdmw=
Subject key identifier:   94:16:4C:59:AC:24:55:5B:CF:7A:AA:D2:6E:7D:1B:2C:19:C0:41:18
Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B
Certificate issuer:       /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B
Certificate serial:       7970965042607F0EC84CB2AA8DA747C2374E3ED1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft
Manifest number:          0124
Signing time:             Mon 27 Apr 2026 17:42:25 +0000
Manifest this update:     Mon 27 Apr 2026 17:37:25 +0000
Manifest next update:     Fri 01 May 2026 04:03:25 +0000
Files and hashes:         1: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=)
                          2: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: HCgqOMlvZLWi/vX9iir+DdjB4YLwEBbK2z8PTNR75PU=)
                          3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:96:50:42:60:7f:0e:c8:4c:b2:aa:8d:a7:47:c2:37:4e:3e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B
        Validity
            Not Before: Apr 27 17:37:25 2026 GMT
            Not After : May  1 04:03:25 2026 GMT
        Subject: CN=94164C59AC24555BCF7AAAD26E7D1B2C19C04118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:9c:20:f1:d1:33:e2:85:15:fb:42:0f:6c:
                    47:67:e9:69:9b:9c:81:5e:96:3d:8d:da:7b:8c:c4:
                    84:96:74:ff:05:74:cb:ec:49:e9:e1:c1:ba:9d:d1:
                    c7:46:70:2d:be:43:31:52:b3:19:33:92:fa:a8:36:
                    91:2c:69:71:9b:b1:96:39:a9:b5:49:70:57:85:8f:
                    62:3f:75:29:1d:df:26:25:e6:86:06:f0:50:6d:bd:
                    81:0a:5a:da:06:33:33:11:ab:64:0e:58:ef:dd:eb:
                    17:c6:98:a0:75:3f:63:e9:d4:c4:47:97:82:15:0a:
                    5f:65:c7:68:54:f8:9f:f4:89:86:87:a1:21:c4:85:
                    81:6d:1c:99:d8:56:e4:ba:ea:ca:04:59:00:02:b4:
                    15:e5:5c:09:bc:17:62:c4:72:0a:2f:56:60:52:80:
                    a7:f2:d1:a3:d6:2d:37:d1:01:ed:a4:4a:c9:d4:4d:
                    44:43:9a:d0:f3:0e:b5:73:bd:08:6e:7a:2d:17:f8:
                    21:d1:a9:a0:d3:aa:6b:f2:5b:27:c6:b8:6b:95:2b:
                    9f:a8:7d:5a:71:7e:ab:0a:14:6c:a9:dd:ee:14:4c:
                    6a:4b:9a:28:06:d9:28:6b:9e:c8:f2:b0:28:e8:3b:
                    f4:d5:56:f0:6e:83:9f:7e:12:6b:31:0a:1a:38:2d:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:16:4C:59:AC:24:55:5B:CF:7A:AA:D2:6E:7D:1B:2C:19:C0:41:18
            X509v3 Authority Key Identifier:
                keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:19:ba:5a:4c:22:35:37:f8:32:de:2a:aa:71:8b:11:41:
         fb:0f:2d:a9:85:94:9f:bb:75:05:4f:fb:93:fb:6e:a6:3f:73:
         13:2a:cb:34:63:51:b1:fd:6c:d3:dc:bd:05:4d:0c:7b:0e:dc:
         51:58:5a:2e:5b:67:03:68:c6:61:a8:25:8d:e9:1f:70:15:77:
         6b:35:30:21:07:50:6d:ff:02:bd:72:d0:60:f5:a3:f9:20:a4:
         ad:55:16:3a:90:67:a2:01:a5:55:42:8f:f8:9d:8b:c9:87:e1:
         b5:34:aa:56:3d:a9:96:5b:59:6d:75:44:48:6f:73:25:c4:9e:
         bb:35:a9:42:50:b5:be:b7:02:82:93:b7:8e:7e:83:34:fd:35:
         d9:b8:b0:ae:54:5d:b7:e9:d4:89:57:c0:02:db:a9:fd:c0:24:
         d6:d2:49:ea:b6:a2:6e:34:6b:c1:bc:41:9d:af:c6:19:59:cb:
         b7:71:1d:ad:b2:bc:19:0e:58:04:cf:3b:13:44:03:5a:02:bb:
         1e:a4:4f:20:ea:58:de:de:b3:41:2b:7e:70:c5:86:04:83:74:
         b3:27:d9:32:b1:ad:b1:bb:1c:f7:fc:2a:69:f5:f1:3f:f5:25:
         f6:0d:9e:11:be:e1:06:54:d2:ca:ec:16:d1:af:fb:94:7b:44:
         f3:06:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----