Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
File:                     87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json)
Hash identifier:          kgprc34xkER0FXzD9S6pRhWM23RijmhTVnGfjriKWL4=
Subject key identifier:   77:47:1F:AE:43:44:BC:67:A2:A9:E8:D5:0B:99:2D:4C:C0:1E:B8:0C
Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
Certificate issuer:       /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Certificate serial:       6CB3EE6F123D0557555068206508D92AAD13FBD8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
Manifest number:          01DE
Signing time:             Tue 28 Apr 2026 14:12:10 +0000
Manifest this update:     Tue 28 Apr 2026 14:07:10 +0000
Manifest next update:     Fri 01 May 2026 16:24:10 +0000
Files and hashes:         1: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: dYO4EYncz17AgE2NQ+gbu1sETsiNFmn4HcjMbsqN9Sk=)
                          2: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: M465AGkIQVJLTD8mWLihVhmnQLcd44l1pfpYvPChqew=)
                          3: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: UAGKGSjm0CH0zknVedkxHzDnhJTtYq6aJ2UvpPN4dUI=)
                          4: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: wgJ4l6Z4XSXlS4bEbbx1UlqQbPaEu6hH6VwQa4mHecg=)
                          5: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 1RATtgEQ2fC4CTZxbGq9E6JcRJ2nj2d+lfS9XKYbQiw=)
                          6: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: omacf/MlMTOtJi7pgs2aPCZclto1hvc9zlwr6k9i/3s=)
                          7: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: bEXXfN8D8Iwh6++6Sf4fNdlCeqEZEgaEYsFhbfU8XrA=)
                          8: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: gom2K2gkNEap6pRf8i6qpFWU+p3reMlN96fhfu6QcT4=)
                          9: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: HLOBvpyy+1Q1+d+ufFl3KdUrJdHRGSowqpK4jeodMdM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b3:ee:6f:12:3d:05:57:55:50:68:20:65:08:d9:2a:ad:13:fb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
        Validity
            Not Before: Apr 28 14:07:10 2026 GMT
            Not After : May  1 16:24:10 2026 GMT
        Subject: CN=77471FAE4344BC67A2A9E8D50B992D4CC01EB80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:a0:de:8d:a6:ad:1e:a1:45:25:af:fe:16:
                    62:ba:3d:84:19:53:df:6e:e1:f1:39:51:9d:b5:ae:
                    59:f8:58:50:1a:3e:4e:b4:43:b9:b0:e2:7d:08:ac:
                    7e:b7:f7:70:2f:e8:f5:89:51:36:52:a3:af:0c:3f:
                    db:f4:d0:d3:33:43:e8:99:38:f4:63:9a:91:a0:3e:
                    03:19:dc:5e:c3:01:0c:e0:c1:e5:ad:d1:61:99:9a:
                    d2:40:4b:63:4c:42:bf:b0:84:93:52:8d:4e:01:c3:
                    9d:b5:a8:59:36:b0:5e:c0:2c:76:e2:7d:b6:13:ce:
                    4e:e6:2e:20:f8:68:19:68:ee:05:6d:f9:2a:b0:5d:
                    57:3f:fa:da:e3:61:83:45:3a:92:e5:87:c4:ea:93:
                    06:83:c1:1e:b6:01:99:79:1f:49:ab:f6:2d:7b:9d:
                    7b:67:d7:f5:72:ca:6b:57:34:2c:ed:41:d5:ee:51:
                    0d:31:db:51:6e:ba:fd:a0:5c:2b:cf:5e:c8:2d:33:
                    ca:b1:2d:c5:ae:3b:c7:3c:87:5d:06:28:74:13:68:
                    a3:3b:56:34:0e:fc:95:66:bd:1a:aa:f2:c6:01:8d:
                    27:53:80:c7:6b:10:72:54:55:83:c5:ad:c0:18:3d:
                    8a:60:38:f8:90:d4:3e:a0:61:3b:0d:f7:0a:ab:78:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:47:1F:AE:43:44:BC:67:A2:A9:E8:D5:0B:99:2D:4C:C0:1E:B8:0C
            X509v3 Authority Key Identifier:
                keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ad:d9:5f:9a:14:fa:de:e2:71:3b:ae:8a:e0:d3:ca:ad:d8:
         cd:a2:d1:d9:74:c9:2b:cd:45:ef:34:2a:b1:95:e7:06:5b:af:
         ce:0e:75:05:a1:e7:19:b5:51:a6:63:84:2e:7f:99:0a:0c:d1:
         e2:e5:12:90:aa:97:5a:80:ef:0b:78:3c:1f:f8:c5:31:44:af:
         71:4a:f3:f7:0d:d3:12:2f:8c:a3:cd:0d:d1:c2:83:2e:23:3a:
         39:57:96:ed:36:93:fe:fb:67:76:d6:10:2f:81:6d:9d:29:03:
         d3:e4:ee:24:c8:ed:0a:11:49:af:23:eb:62:14:49:16:80:c9:
         c2:28:ce:e8:d0:50:88:b2:2b:36:26:1a:ae:7a:c4:83:16:b8:
         6f:0a:16:d7:5d:11:e0:7b:f3:59:ca:cf:d1:61:ec:a1:34:e2:
         b4:5b:68:0d:e2:0b:b6:31:12:10:81:19:09:27:36:6b:e2:ef:
         10:cd:97:29:6c:9e:13:da:78:0c:84:09:f7:1f:61:bf:7a:2c:
         e9:2f:9f:1d:c6:55:ee:db:2e:f1:5f:f3:db:0a:48:11:ee:ce:
         a0:10:41:d0:c2:60:89:3f:ad:d6:df:4a:0d:88:07:83:7d:32:
         61:85:39:9a:ae:5f:da:9b:69:c3:5a:b6:f6:15:43:ae:6f:1a:
         f4:27:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:32 2026 by rpki-client