Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft
File:                     D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json)
Hash identifier:          kIyFdEbMlpm9zko/NfwM4AG+k3vpZ2fnvjoW4oLTD7A=
Subject key identifier:   65:14:68:26:BA:E1:10:0C:A0:BA:40:EF:28:6C:B1:93:C2:AF:E1:57
Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68
Certificate issuer:       /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668
Certificate serial:       636F067891C18329FB275112FD378280DA337865
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft
Manifest number:          0291
Signing time:             Mon 27 Apr 2026 19:00:05 +0000
Manifest this update:     Mon 27 Apr 2026 18:55:05 +0000
Manifest next update:     Fri 01 May 2026 06:59:05 +0000
Files and hashes:         1: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: 1njY/9fT/qfm6Md0PdFzQiCpYR1db+XEwvF4+y0Q5vk=)
                          2: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: EkcP4yt7Y7RR88+yPmsnwone2vyYnErU4qElOxX2Bj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6f:06:78:91:c1:83:29:fb:27:51:12:fd:37:82:80:da:33:78:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668
        Validity
            Not Before: Apr 27 18:55:05 2026 GMT
            Not After : May  1 06:59:05 2026 GMT
        Subject: CN=65146826BAE1100CA0BA40EF286CB193C2AFE157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:fa:33:b8:40:5e:f5:4e:f6:bc:4b:c8:5f:
                    db:ff:57:a3:b2:4b:3c:26:fe:9d:61:59:45:14:c2:
                    d7:d3:2e:29:47:05:de:77:56:a0:32:53:57:89:84:
                    3f:f7:d8:57:17:c2:8b:d1:30:4f:10:19:dd:b5:09:
                    6e:ba:e1:36:5f:27:81:b6:7a:fe:bc:8b:f2:06:4f:
                    03:d3:48:52:30:93:ae:ce:be:8b:bd:71:69:9e:51:
                    2d:2a:2a:37:c4:01:8a:cb:42:fd:d2:47:a3:55:fb:
                    c4:7a:0c:2b:5e:00:57:20:4b:ad:0a:77:03:47:19:
                    fa:9b:31:fb:f8:d0:04:f2:2a:e9:4a:23:66:a3:21:
                    87:74:55:3c:29:a1:84:3b:94:c2:04:35:cd:3c:35:
                    21:52:9a:a5:dc:2c:f6:b0:b2:4b:5e:14:d9:d1:bd:
                    ec:b6:7c:b9:6a:4e:25:a1:c3:ef:57:2c:04:72:da:
                    d9:c5:a3:9d:3a:bf:2c:f1:3d:06:dc:c9:b1:7c:8e:
                    da:aa:b0:66:87:64:01:d2:e2:58:3c:6d:16:6c:c9:
                    c0:97:bf:c3:9c:9f:32:98:0d:fb:6b:b4:6f:d2:9e:
                    25:fb:9b:5e:c7:4e:fb:12:3e:aa:02:36:3b:58:52:
                    63:c4:90:2b:1c:49:7c:bb:08:ae:31:5a:43:ca:35:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:14:68:26:BA:E1:10:0C:A0:BA:40:EF:28:6C:B1:93:C2:AF:E1:57
            X509v3 Authority Key Identifier:
                keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:50:1f:1e:33:1a:f2:68:f6:14:bb:fe:93:cd:99:b7:02:
         74:39:0a:df:8b:2c:3c:90:ac:ed:af:91:e3:6d:f0:a1:0a:54:
         64:fd:8f:ac:79:99:8a:ec:7b:fc:5e:92:aa:60:c1:6d:0d:dc:
         cf:59:e5:79:0c:1e:a0:57:5a:a1:f9:5d:d3:09:b2:b5:fd:c6:
         67:2a:c0:1d:58:bf:eb:aa:a0:b5:1e:e4:d9:14:c6:19:c8:8f:
         cc:a2:49:e6:5a:e1:8e:f9:45:4f:f2:5e:80:a2:18:a8:76:23:
         be:1a:ae:63:25:b9:ce:db:5a:d9:1b:b0:6c:62:e3:90:07:55:
         0b:60:fc:de:6c:58:93:38:f4:93:10:53:05:48:3c:75:a6:23:
         2c:7f:8d:17:53:d4:47:4d:6d:68:8d:ef:3a:8f:7d:13:c2:81:
         5a:e4:74:61:74:ca:af:b4:86:3b:e7:dc:fb:2d:41:18:1b:c3:
         5c:14:f5:d8:db:32:d1:5b:ca:11:9d:cc:5c:34:e6:7f:76:c6:
         9a:32:66:2b:cb:11:f3:9b:dd:80:b8:68:f8:ae:6a:a3:eb:ee:
         da:b1:79:62:8c:e8:27:0d:0d:2d:c8:04:bd:b2:49:24:dd:67:
         01:5a:92:eb:f6:ca:bd:99:61:03:25:32:33:f0:6a:8a:06:19:
         cb:fc:d5:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY28GeJHBgyn7J1ES/TeCgNozeGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB
RTJBQTY2ODAeFw0yNjA0MjcxODU1MDVaFw0yNjA1MDEwNjU5MDVaMDMxMTAvBgNV
BAMTKDY1MTQ2ODI2QkFFMTEwMENBMEJBNDBFRjI4NkNCMTkzQzJBRkUxNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLk/ozuEBe9U72vEvIX9v/V6Oy
Szwm/p1hWUUUwtfTLilHBd53VqAyU1eJhD/32FcXwovRME8QGd21CW664TZfJ4G2
ev68i/IGTwPTSFIwk67Ovou9cWmeUS0qKjfEAYrLQv3SR6NV+8R6DCteAFcgS60K
dwNHGfqbMfv40ATyKulKI2ajIYd0VTwpoYQ7lMIENc08NSFSmqXcLPawskteFNnR
vey2fLlqTiWhw+9XLARy2tnFo506vyzxPQbcybF8jtqqsGaHZAHS4lg8bRZsycCX
v8OcnzKYDftrtG/SniX7m17HTvsSPqoCNjtYUmPEkCscSXy7CK4xWkPKNXJDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZRRoJrrhEAygukDvKGyxk8Kv4VcwHwYDVR0j
BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC
NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB
QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4
YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4
QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEvVUB8eMxryaPYUu/6TzZm3AnQ5Ct+LLDyQ
rO2vkeNt8KEKVGT9j6x5mYrse/xekqpgwW0N3M9Z5XkMHqBXWqH5XdMJsrX9xmcq
wB1Yv+uqoLUe5NkUxhnIj8yiSeZa4Y75RU/yXoCiGKh2I74armMluc7bWtkbsGxi
45AHVQtg/N5sWJM49JMQUwVIPHWmIyx/jRdT1EdNbWiN7zqPfRPCgVrkdGF0yq+0
hjvn3PstQRgbw1wU9djbMtFbyhGdzFw05n92xpoyZivLEfOb3YC4aPiuaqPr7tqx
eWKM6CcNDS3IBL2ySSTdZwFakuv2yr2ZYQMlMjPwaooGGcv81fo=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:54 2026 by rpki-client