Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft
File:                     289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json)
Hash identifier:          6fIV4lmLnUtb0ovTYn51tbelFTExF0VR0noxo3eky98=
Subject key identifier:   08:94:63:30:D1:83:00:0D:90:B0:88:88:EC:78:82:FC:AA:C0:FF:AA
Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C
Certificate issuer:       /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C
Certificate serial:       6A68F8C62C7F0C0F6F7ED085BE42EA6EAEEC61F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft
Manifest number:          01D6
Signing time:             Mon 27 Apr 2026 22:52:01 +0000
Manifest this update:     Mon 27 Apr 2026 22:47:01 +0000
Manifest next update:     Fri 01 May 2026 10:30:01 +0000
Files and hashes:         1: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: BomqdPcEWc7ThbBvhWDgZwYqBISDPqqeOo30nwHFh5Y=)
                          2: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: vVFtcDy4aPivFUPPIcMbLhe9f28+1kgtEKXIpm8Qbe4=)
                          3: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: SVFwINKj0MlyrdJSZkyw0gZ5NE/sqyEUMiZgmR0eFwY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:68:f8:c6:2c:7f:0c:0f:6f:7e:d0:85:be:42:ea:6e:ae:ec:61:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C
        Validity
            Not Before: Apr 27 22:47:01 2026 GMT
            Not After : May  1 10:30:01 2026 GMT
        Subject: CN=08946330D183000D90B08888EC7882FCAAC0FFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:8e:4b:28:f5:88:e5:4c:64:5c:dc:d1:49:
                    e8:18:a0:a8:52:72:c6:90:dd:25:c7:7a:59:71:bb:
                    18:b0:42:8c:b5:e5:b8:2b:18:c3:c7:47:69:63:c3:
                    dc:72:a2:30:0b:cc:64:37:57:e3:c6:ca:a9:e0:71:
                    6f:d9:a6:e4:2a:80:30:2c:e8:fd:c0:71:f6:bf:3d:
                    40:b1:bf:f7:6e:92:d8:56:9f:17:7d:d6:ea:a4:d4:
                    16:95:5c:b8:6e:b0:49:c2:29:d8:7f:66:b9:66:e0:
                    0d:e6:36:5d:24:39:90:1a:43:4b:74:a3:c7:d8:d7:
                    d3:ec:1a:86:29:1a:79:72:1a:9f:39:82:3f:c4:a4:
                    8a:df:c3:fb:b2:53:99:71:f9:97:ee:de:3e:f8:89:
                    b5:64:5a:9a:16:f5:15:79:a3:1d:2f:66:22:c7:72:
                    30:58:71:2e:09:df:4b:21:77:25:70:df:95:d9:cc:
                    70:67:de:e1:82:f9:53:ae:7c:91:71:50:4e:9a:12:
                    7e:88:59:6c:73:c9:61:3b:5f:b5:55:38:15:4a:40:
                    49:f9:47:69:56:52:28:35:f0:eb:86:08:9c:4a:cc:
                    2d:08:8e:6f:26:39:68:88:1a:b0:49:eb:fe:90:ae:
                    51:29:3b:4a:88:15:97:c6:00:6c:85:f7:1d:b3:3d:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:63:30:D1:83:00:0D:90:B0:88:88:EC:78:82:FC:AA:C0:FF:AA
            X509v3 Authority Key Identifier:
                keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:c9:09:0f:ee:6f:6f:b1:80:a4:d5:bb:c7:84:a8:16:f1:
         52:76:8f:71:85:4e:f8:16:3d:cb:ee:99:7e:f6:c0:48:dc:22:
         b7:ba:30:54:41:39:cc:56:7d:c4:8f:87:06:b8:e7:d3:e3:a8:
         be:5c:9e:2c:35:59:1c:c1:8f:20:55:46:42:e8:58:a7:3c:52:
         d3:df:d7:d8:77:b9:ea:9d:78:20:17:da:10:ef:2c:69:5f:9f:
         f4:df:1f:e4:83:0a:63:e6:eb:0a:e2:1a:af:28:6a:3a:46:24:
         a7:b6:65:41:5a:ae:2f:6e:e2:11:95:71:49:73:22:66:0c:ea:
         80:6a:46:d4:34:79:1a:2c:f9:7d:2b:d1:e7:c1:21:ec:98:4e:
         be:d7:08:41:4c:9a:68:1d:e8:61:7a:91:2b:e1:ba:b2:19:29:
         df:9b:e7:35:ae:72:84:a8:a4:db:e0:92:0b:f3:7c:ab:69:bb:
         f3:5b:5d:44:9e:69:88:db:bb:44:9e:4c:31:b7:7a:b4:5b:f6:
         a0:8b:5c:ae:e3:1b:62:a7:a4:0f:0a:59:0f:99:7d:7b:9d:4c:
         b1:a3:e8:bf:27:3d:0a:d2:bb:3e:4a:f7:98:37:35:d2:33:42:
         7c:50:a3:63:4b:95:76:f5:76:d4:0f:85:4a:31:df:1d:18:ec:
         65:9c:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:25 2026 by rpki-client