Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
File:                     21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json)
Hash identifier:          7DWnH1x6B9Z+NMjYJ2a6nwMJ2MY1YDoNdbkVIDg8efU=
Subject key identifier:   07:6F:85:BF:8E:1B:8D:78:E6:85:5D:0B:11:6E:1C:F8:A2:E2:93:89
Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42
Certificate issuer:       /CN=21AB9EB0A860D2619CF210410608EB831A463442
Certificate serial:       5A37BB4530D9601278621381E2E7F4892EDD1CC3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
Manifest number:          011A
Signing time:             Tue 28 Apr 2026 07:22:12 +0000
Manifest this update:     Tue 28 Apr 2026 07:17:12 +0000
Manifest next update:     Fri 01 May 2026 14:40:12 +0000
Files and hashes:         1: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=)
                          2: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: SH7XkQXRlxNhXFkG1mKXFBVP8VqqY4/ngKOwgkoieKc=)
                          3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=)
                          4: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:37:bb:45:30:d9:60:12:78:62:13:81:e2:e7:f4:89:2e:dd:1c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442
        Validity
            Not Before: Apr 28 07:17:12 2026 GMT
            Not After : May  1 14:40:12 2026 GMT
        Subject: CN=076F85BF8E1B8D78E6855D0B116E1CF8A2E29389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:c3:43:0a:86:39:f0:c4:23:3d:3c:89:f8:
                    a5:cf:7c:27:cb:92:22:0e:68:62:7a:4f:12:4c:44:
                    9d:1c:0a:7b:a5:db:e3:9d:af:d0:36:85:51:36:ea:
                    c7:bc:47:1b:62:f0:0b:ea:84:68:d4:a5:6a:1c:78:
                    4e:f2:a6:c2:45:57:2b:26:1c:be:c0:77:c3:cf:b1:
                    e1:0e:d6:05:44:45:bf:bb:93:64:7e:a6:ac:00:4a:
                    ec:2f:17:1b:06:ff:2a:a4:c9:0e:40:7b:a7:5a:01:
                    d9:23:10:fb:b4:ed:b5:6c:ea:31:7e:bc:c6:b9:e7:
                    aa:98:78:73:83:df:61:7d:19:c5:0c:e4:cb:46:9c:
                    58:01:9b:e3:30:76:1e:d1:de:7f:40:47:d5:94:29:
                    08:90:f6:75:b0:75:96:b1:6e:65:07:2a:7a:b8:23:
                    49:45:13:74:14:9f:78:e6:c9:dc:81:8f:07:1a:7b:
                    75:2f:76:11:80:67:d4:7c:98:ae:ae:3c:eb:bf:d6:
                    ce:d8:7f:3f:21:1f:12:5e:1f:d0:7a:c1:24:d9:b6:
                    f2:f5:05:4f:63:db:94:0c:43:b0:21:7b:f0:b6:cc:
                    9d:75:11:ca:20:f8:51:d5:29:3e:ce:ab:eb:9b:a7:
                    a7:80:37:02:e0:19:01:a3:fb:77:ca:21:87:69:d7:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:85:BF:8E:1B:8D:78:E6:85:5D:0B:11:6E:1C:F8:A2:E2:93:89
            X509v3 Authority Key Identifier:
                keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:92:f3:44:40:8b:b9:a2:64:48:f8:aa:04:d2:c3:98:ed:
         ec:6c:14:28:e2:44:33:66:a0:1a:73:8a:f8:2a:72:8c:17:39:
         4f:67:f8:be:40:bb:96:0a:21:de:b4:9c:16:bd:26:20:b2:a0:
         ba:6c:95:43:19:96:a9:e7:ea:0c:e5:5b:f7:e9:26:cc:a7:a9:
         69:19:5f:be:d4:51:4f:4b:a0:44:fe:42:7a:70:bf:e6:f6:e7:
         c2:d1:47:10:29:26:3c:03:b3:78:5c:14:af:12:56:07:d4:34:
         9d:18:31:24:0d:70:c9:24:22:f0:30:10:65:3f:07:24:46:5c:
         80:c5:01:2a:c1:85:63:0c:dd:31:62:c8:7a:4e:2a:b3:3e:6a:
         a5:84:b1:38:86:3f:a0:f8:71:d6:d4:ec:be:b5:dd:44:16:0f:
         cd:50:7c:18:c4:ea:a6:26:73:00:14:e1:73:2e:74:70:32:f0:
         79:dd:5f:92:29:b4:c5:29:9d:d8:87:01:61:70:f9:3c:f4:cb:
         f3:ab:54:e4:37:21:bf:28:6f:f7:de:49:b3:f7:c3:26:78:61:
         fc:0b:d5:eb:66:71:fa:ae:e5:4f:ff:fd:19:57:3b:2b:a8:4b:
         f8:f8:38:a7:fd:88:c3:36:cc:9f:57:b0:df:e5:d1:f4:5f:c6:
         f8:17:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:43 2026 by rpki-client