Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
File:                     D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json)
Hash identifier:          8aSlgsZJ/qc37+y81RxurPQnFNQWFZOCXuer6RN6gjQ=
Subject key identifier:   2D:B3:7A:F6:A4:0C:FA:A9:F0:F9:3B:6E:7F:57:00:ED:C6:DD:C7:18
Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7
Certificate issuer:       /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
Certificate serial:       64DD3DF1A39AC8F9B7A8D7F79094A35C6938B9E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
Manifest number:          024C
Signing time:             Mon 27 Apr 2026 15:32:00 +0000
Manifest this update:     Mon 27 Apr 2026 15:27:00 +0000
Manifest next update:     Thu 30 Apr 2026 23:42:00 +0000
Files and hashes:         1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=)
                          2: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: gL1mR8VmNocwuJWC/17jhQyiX6vIeVJ6LW6Eeiid8dY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dd:3d:f1:a3:9a:c8:f9:b7:a8:d7:f7:90:94:a3:5c:69:38:b9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
        Validity
            Not Before: Apr 27 15:27:00 2026 GMT
            Not After : Apr 30 23:42:00 2026 GMT
        Subject: CN=2DB37AF6A40CFAA9F0F93B6E7F5700EDC6DDC718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:da:3e:7b:86:04:f4:4f:8c:92:df:0f:3e:
                    d6:9a:c1:a1:2c:a6:ea:85:37:11:3a:0f:25:61:63:
                    0b:b8:8b:92:d7:42:83:81:d9:3a:b3:5d:96:ba:16:
                    bd:e1:35:41:b4:6b:ad:5e:91:95:3a:fb:7b:be:6f:
                    1e:bf:5e:3b:b9:76:31:88:1f:e0:86:18:7f:6d:4f:
                    e7:75:33:ad:ce:5b:fb:e9:ce:39:cc:aa:a4:25:68:
                    1e:0a:73:e7:0e:92:4a:c4:d5:4f:7c:8e:ed:07:a9:
                    1c:ea:a0:f2:fd:f7:24:21:53:fb:a9:92:08:6e:13:
                    b2:cb:94:c6:5f:91:9f:86:fd:ab:ec:f2:ea:e2:06:
                    74:4f:db:8d:a7:10:da:dd:57:10:34:11:5b:96:8f:
                    c1:da:4a:b1:54:3b:21:ea:45:09:ae:b8:b5:de:5b:
                    e1:ba:77:a1:63:25:a3:16:19:b8:a2:28:4a:3e:e2:
                    15:88:76:6b:30:9e:3a:06:14:69:93:fc:00:62:fb:
                    a0:18:2e:16:08:91:65:6a:4e:cc:2d:51:9d:e0:4a:
                    f0:b4:b4:26:92:67:e8:f3:2a:01:94:9c:6f:5e:79:
                    38:de:03:0b:4c:e2:bf:b6:f6:23:0b:73:69:11:86:
                    b5:10:cb:67:96:42:33:12:aa:53:4f:c8:a3:1d:75:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:7A:F6:A4:0C:FA:A9:F0:F9:3B:6E:7F:57:00:ED:C6:DD:C7:18
            X509v3 Authority Key Identifier:
                keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:de:3a:45:69:10:10:45:70:7f:55:39:0a:32:ef:0a:c0:78:
         fb:34:ea:cf:99:c9:e5:04:f9:62:17:8c:49:6b:42:83:95:b1:
         bb:e9:8a:26:d0:aa:a8:23:ca:40:20:0c:dd:ab:e2:d2:39:56:
         00:1c:34:92:c9:ea:dd:dd:b3:ad:e5:6f:96:96:b2:29:5b:bf:
         98:d5:e8:c0:ae:7e:52:6b:84:f9:ce:da:42:88:24:e2:5f:9e:
         32:44:54:11:c2:36:26:29:cb:8e:a3:f0:82:eb:95:7c:aa:63:
         9a:20:0c:e7:bc:82:51:a4:68:a1:36:99:f5:24:c3:f9:44:87:
         64:3f:26:3b:c6:28:ac:a6:35:40:5b:a8:9a:47:a1:1c:22:96:
         ca:41:2a:71:4e:9b:7e:9f:1e:38:75:c3:dc:39:58:f6:2a:88:
         1f:16:9b:43:dd:2d:f4:d0:d1:d8:e3:a5:b1:89:5b:d8:b1:cf:
         74:1e:32:51:7c:3f:da:67:29:d4:e6:db:1f:fe:cd:05:f7:d9:
         d7:3f:c4:d9:c4:81:1a:f3:42:42:c2:8e:55:36:35:9b:30:b7:
         01:24:fd:0b:6d:08:cf:4e:44:bc:8b:2c:26:e9:42:c7:f0:60:
         b1:f4:8d:27:ff:b3:d8:e8:9a:f2:f1:10:4f:9b:92:04:5a:0a:
         d3:bb:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----