Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft
File:                     DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json)
Hash identifier:          lVMrI6lZ86RmEg4DxBvlnonOcvx1k5gceWR5IPYgNXo=
Subject key identifier:   7F:CA:AF:0D:81:2C:02:72:87:36:68:8E:06:A0:0E:29:AC:AD:76:C0
Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E
Certificate issuer:       /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E
Certificate serial:       410B90E171FB0C80EB1AC2B05631497EBE0DF652
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft
Manifest number:          01E1
Signing time:             Mon 27 Apr 2026 20:41:52 +0000
Manifest this update:     Mon 27 Apr 2026 20:36:52 +0000
Manifest next update:     Fri 01 May 2026 01:08:52 +0000
Files and hashes:         1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: bOMw2z/DqljmPFskG2vsYIuUCGDr+Iq+bzXjTNV2cFE=)
                          2: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: +LmGLDsCNia6NEwtD5aUsnCRSzJzU6kANpfX7/AQcrM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0b:90:e1:71:fb:0c:80:eb:1a:c2:b0:56:31:49:7e:be:0d:f6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E
        Validity
            Not Before: Apr 27 20:36:52 2026 GMT
            Not After : May  1 01:08:52 2026 GMT
        Subject: CN=7FCAAF0D812C02728736688E06A00E29ACAD76C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:b3:00:19:49:6e:6f:00:1e:d0:0e:85:9b:
                    49:bc:52:8f:25:98:d4:32:fc:54:0e:28:5e:75:43:
                    f9:50:ed:0d:92:13:17:5e:56:3d:17:28:44:05:28:
                    ed:ac:8f:a0:f1:82:aa:01:86:17:f8:a6:1f:0b:d5:
                    3c:f1:27:18:a1:15:06:74:c9:1a:17:6a:f0:4a:f1:
                    12:a4:36:a8:c7:99:18:30:e0:cd:ea:0c:ab:9e:a0:
                    db:d1:d7:55:2e:e5:74:2e:4d:32:ac:71:be:8f:9b:
                    3a:5c:5e:01:f6:c9:64:6e:04:91:69:2d:1e:29:43:
                    15:0d:3a:9d:b2:96:42:ba:a6:0b:8a:98:a5:10:e0:
                    bd:47:15:80:e7:b4:b3:b5:57:d1:f4:e5:31:b4:e0:
                    0d:6c:67:98:6b:cf:a0:5b:14:8e:04:0e:f4:84:ca:
                    5b:84:7f:2d:b9:3a:9c:64:11:46:35:71:53:1e:21:
                    70:b0:96:d8:d9:53:d2:9a:f2:67:d3:cf:ac:41:33:
                    f5:c4:7b:d8:b5:d0:69:7d:93:3e:68:b0:62:56:40:
                    76:36:b5:7a:24:99:34:ff:eb:eb:13:18:40:c9:c3:
                    7e:91:55:44:79:82:1b:fd:0d:93:d5:f1:21:97:f7:
                    42:d5:1e:d1:bb:33:27:1f:30:13:bf:38:63:91:40:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CA:AF:0D:81:2C:02:72:87:36:68:8E:06:A0:0E:29:AC:AD:76:C0
            X509v3 Authority Key Identifier:
                keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9e:b3:94:22:9a:e8:0f:5c:6c:cf:1f:16:a6:bd:52:49:ed:
         93:a0:03:0a:51:94:b5:79:d9:73:25:34:d1:d5:d8:28:47:83:
         ba:9b:48:31:b4:52:0d:5d:b5:38:f0:ca:48:5b:76:94:55:bd:
         d4:2d:78:80:bc:cc:c3:01:69:af:44:9c:16:04:18:11:d3:ea:
         63:06:ca:e3:88:0f:15:77:d9:5f:ed:8a:f0:84:e6:75:55:cc:
         18:ee:97:74:82:08:da:5a:c8:52:86:de:d8:da:ff:a6:ed:46:
         a9:39:6d:f5:aa:7c:5c:4b:8f:eb:c7:27:86:43:82:1c:42:3a:
         c6:86:51:32:56:10:14:77:9e:81:76:21:94:df:cd:88:5b:89:
         b2:a9:3a:7d:74:68:c7:d8:85:03:01:79:3c:f5:e2:2f:6f:dd:
         1d:08:bf:b5:4b:b0:74:82:ad:49:02:d3:3b:c9:ae:99:9f:44:
         91:61:58:61:09:76:b2:5a:59:25:07:14:07:df:a6:00:0c:5b:
         73:53:fb:c3:f2:95:87:9d:3d:d0:36:9a:b6:1d:6d:eb:a4:13:
         a1:bb:e5:95:d8:90:6b:25:dd:20:ad:7b:45:d5:24:ca:87:b1:
         d8:2b:36:b6:91:63:1e:b6:3a:12:be:2f:19:33:22:11:73:84:
         5f:c0:1e:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQQuQ4XH7DIDrGsKwVjFJfr4N9lIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE
NjIyRkIyRTAeFw0yNjA0MjcyMDM2NTJaFw0yNjA1MDEwMTA4NTJaMDMxMTAvBgNV
BAMTKDdGQ0FBRjBEODEyQzAyNzI4NzM2Njg4RTA2QTAwRTI5QUNBRDc2QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZULMAGUlubwAe0A6Fm0m8Uo8l
mNQy/FQOKF51Q/lQ7Q2SExdeVj0XKEQFKO2sj6DxgqoBhhf4ph8L1TzxJxihFQZ0
yRoXavBK8RKkNqjHmRgw4M3qDKueoNvR11Uu5XQuTTKscb6PmzpcXgH2yWRuBJFp
LR4pQxUNOp2ylkK6pguKmKUQ4L1HFYDntLO1V9H05TG04A1sZ5hrz6BbFI4EDvSE
yluEfy25OpxkEUY1cVMeIXCwltjZU9Ka8mfTz6xBM/XEe9i10Gl9kz5osGJWQHY2
tXokmTT/6+sTGEDJw36RVUR5ghv9DZPV8SGX90LVHtG7MycfMBO/OGORQNH7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUf8qvDYEsAnKHNmiOBqAOKaytdsAwHwYDVR0j
BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF
RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy
RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx
YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0
RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACSes5QimugPXGzPHxamvVJJ7ZOgAwpRlLV5
2XMlNNHV2ChHg7qbSDG0Ug1dtTjwykhbdpRVvdQteIC8zMMBaa9EnBYEGBHT6mMG
yuOIDxV32V/tivCE5nVVzBjul3SCCNpayFKG3tja/6btRqk5bfWqfFxLj+vHJ4ZD
ghxCOsaGUTJWEBR3noF2IZTfzYhbibKpOn10aMfYhQMBeTz14i9v3R0Iv7VLsHSC
rUkC0zvJrpmfRJFhWGEJdrJaWSUHFAffpgAMW3NT+8PylYedPdA2mrYdbeukE6G7
5ZXYkGsl3SCte0XVJMqHsdgrNraRYx62OhK+LxkzIhFzhF/AHt4=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:32 2026 by rpki-client