Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft
File:                     9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json)
Hash identifier:          Y4Kcv3yxfGXS8sdRW9ckNuUYGy9K1zdsCJVbYZr3OAg=
Subject key identifier:   64:EA:23:FF:45:01:DB:4C:FF:2C:05:9A:0A:0D:6F:24:B4:3A:7D:99
Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B
Certificate issuer:       /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
Certificate serial:       7B79AD2309E42AD63728DFA007170A451F9AE0A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft
Manifest number:          0227
Signing time:             Mon 27 Apr 2026 08:52:28 +0000
Manifest this update:     Mon 27 Apr 2026 08:47:28 +0000
Manifest next update:     Thu 30 Apr 2026 15:14:28 +0000
Files and hashes:         1: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: VVEa3KMLXZ6GkJ4P5tsWGoppnFXPqgFWFPOeFVHLezo=)
                          2: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: UIsEV+yUxnoy27zXekEfr9wJFUXejRjvqDfBen4AprU=)
                          3: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: kcEi7J2KzSD2C16sirfrvjjvmQ8zQakPG6+zInavgeM=)
                          4: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: 8hPKjOrrKRezfNVZLnLavcGoDjYQomlxrK85beUxD9E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:ad:23:09:e4:2a:d6:37:28:df:a0:07:17:0a:45:1f:9a:e0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B
        Validity
            Not Before: Apr 27 08:47:28 2026 GMT
            Not After : Apr 30 15:14:28 2026 GMT
        Subject: CN=64EA23FF4501DB4CFF2C059A0A0D6F24B43A7D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:ae:a2:96:6b:15:73:3b:03:59:b4:3a:8c:
                    67:fb:b5:63:58:94:d0:4c:13:e9:0f:ba:fe:40:6d:
                    1a:bc:a0:eb:9e:0f:83:0a:63:ee:e0:3e:40:f9:b7:
                    6f:e1:8c:a9:cc:59:6e:4f:70:54:0b:cd:fc:c2:c5:
                    e1:c4:ad:60:6e:80:ec:3f:73:0a:48:b1:ab:2c:e6:
                    f2:a5:6b:08:78:99:db:9e:48:a4:e2:d1:73:12:32:
                    ae:3f:86:3d:5c:43:98:42:08:e8:bc:cc:57:66:db:
                    78:57:db:22:3c:d4:88:a6:5c:3a:78:1b:5c:86:8d:
                    da:02:40:05:42:2e:fb:f2:4e:b6:1e:18:7e:1b:82:
                    12:a4:d2:9b:24:d8:04:a1:33:21:08:b9:28:21:94:
                    f7:36:fd:2a:60:89:49:3f:62:88:08:b7:a6:b2:4b:
                    a3:66:8a:ff:2b:fd:a8:c0:df:d1:1b:0b:52:dc:80:
                    d5:e1:16:2a:c4:4c:a1:12:21:ff:4e:6e:41:99:84:
                    b4:ed:1b:b4:75:5b:7c:6a:c2:9e:19:a4:1d:64:81:
                    17:0e:bb:30:99:a8:48:9b:71:0e:f9:3a:16:36:4a:
                    be:fe:95:34:f2:7c:30:c8:ab:1e:55:c4:b0:59:35:
                    3f:51:01:bb:3b:f0:29:be:53:b1:ad:1a:8a:fe:9d:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:23:FF:45:01:DB:4C:FF:2C:05:9A:0A:0D:6F:24:B4:3A:7D:99
            X509v3 Authority Key Identifier:
                keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b1:4f:ca:ae:39:13:2c:d2:68:39:bd:87:5a:8f:cd:39:0b:
         13:7f:b9:a9:82:70:dd:38:4c:6c:f7:6b:18:8c:96:d8:56:91:
         fa:74:3a:be:8a:5c:1a:4b:63:5b:d3:c3:b1:26:d0:1e:4e:14:
         ff:97:26:89:a4:23:e3:0a:8e:20:89:5c:46:de:06:15:17:d9:
         2c:6f:93:dc:c7:4d:ca:5b:23:42:b7:f7:26:d2:cf:66:cd:4b:
         26:43:25:e7:6e:26:b7:68:65:a7:59:f1:e9:6a:f6:6b:55:8c:
         88:23:1a:d2:33:e7:b7:c1:1e:19:2c:fa:a8:b5:89:53:98:b4:
         6d:4b:34:4b:0f:d8:65:8e:7d:47:d2:0d:8e:dc:9d:55:d3:f3:
         26:c4:83:f4:46:ea:5f:ed:e6:90:b5:37:ba:60:90:ef:47:3a:
         90:35:9b:db:bf:5a:fc:da:f1:8b:c5:b0:e1:8a:aa:8d:8f:42:
         73:dc:1c:8c:41:68:d8:26:95:b9:b9:24:5c:a8:9e:53:7c:d6:
         ef:eb:b8:f1:06:3b:75:5c:c0:ac:0a:b5:5f:1e:18:cc:75:c8:
         56:27:9f:a4:c0:24:52:74:f7:b6:bb:56:d3:92:84:ca:38:73:
         91:1b:8d:4c:1d:76:bd:9f:dd:38:01:63:5d:74:bc:b4:b6:b6:
         83:d4:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:38 2026 by rpki-client