Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft
File:                     7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json)
Hash identifier:          VQJchwtzzFCPOjl0YSHgX1bAhQ2oGZZi8ARiU3VNty0=
Subject key identifier:   FD:88:D3:57:F5:09:67:88:8E:60:59:DF:8D:BF:A4:2E:BA:42:89:7E
Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53
Certificate issuer:       /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953
Certificate serial:       30DF89012ABA16531D265EF2C4F9BF9082F53BCD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft
Manifest number:          0217
Signing time:             Tue 28 Apr 2026 06:50:05 +0000
Manifest this update:     Tue 28 Apr 2026 06:45:05 +0000
Manifest next update:     Fri 01 May 2026 18:15:05 +0000
Files and hashes:         1: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=)
                          2: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: 8BvXnvoTGyJhISZMIaS9BvfUc1BEAYdSsmiI40c3DfM=)
                          3: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: v9nMdjUiAFgj/HQ4Hjr5TDNNNsBVPB9pxdCw6MN2TcM=)
                          4: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:df:89:01:2a:ba:16:53:1d:26:5e:f2:c4:f9:bf:90:82:f5:3b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953
        Validity
            Not Before: Apr 28 06:45:05 2026 GMT
            Not After : May  1 18:15:05 2026 GMT
        Subject: CN=FD88D357F50967888E6059DF8DBFA42EBA42897E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:2d:39:49:ba:94:13:a3:bf:f5:da:f2:3c:
                    f7:60:c4:42:5f:33:34:75:7f:7e:25:e4:6b:c4:24:
                    42:93:79:40:b6:34:c0:2d:e6:3b:56:8b:00:06:85:
                    14:70:16:be:bb:e8:68:6d:4b:af:5a:80:f1:92:2c:
                    6a:b1:37:01:99:a7:e9:f0:52:69:12:20:cd:1f:e1:
                    1c:57:ec:99:d3:c0:98:b5:2c:cf:1c:c8:f4:6b:ff:
                    2b:f5:12:00:dc:41:02:4a:09:02:bd:e8:0c:4f:13:
                    3a:a4:1c:7b:17:a5:b6:b5:0c:4b:e6:c5:af:1c:a8:
                    ae:9c:11:c2:03:61:2b:ed:1a:7a:95:e3:44:11:b1:
                    37:61:0e:e2:2c:82:fe:e6:56:29:d3:28:ab:18:b2:
                    95:1d:b4:6b:23:0f:2b:65:d9:0b:e6:c1:6e:29:ca:
                    09:8b:97:8f:af:b6:e4:76:26:04:88:e3:22:80:e0:
                    27:58:1e:e5:9b:be:fb:ff:19:00:98:70:f0:e0:0c:
                    cc:e9:84:65:c5:f3:df:50:32:cf:6d:fc:d7:0a:cb:
                    1d:1e:20:77:58:9b:11:53:41:9f:1e:8f:25:89:61:
                    f9:ff:4e:0d:50:f1:69:85:84:35:fe:84:88:6b:5b:
                    25:83:4d:d9:b4:4a:36:83:07:5d:b0:bb:b0:97:de:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:D3:57:F5:09:67:88:8E:60:59:DF:8D:BF:A4:2E:BA:42:89:7E
            X509v3 Authority Key Identifier:
                keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d8:6f:09:4c:46:5c:9e:40:ca:d9:cb:a1:58:c6:b8:0d:79:
         94:3d:f9:8e:88:7b:f0:3c:76:a6:19:f4:7c:27:7b:53:3a:0a:
         d6:79:d4:20:9d:b7:36:e9:70:fc:6a:c7:2c:0b:5e:92:86:5b:
         03:a4:ea:41:01:31:1f:71:a9:34:3d:9b:e0:da:ce:b4:50:a0:
         48:95:fa:cc:ae:fb:22:ad:3e:8a:f6:c2:09:3f:58:ab:90:b1:
         03:af:d0:60:24:be:1c:66:93:9f:28:48:4c:fa:55:40:51:fc:
         32:04:d8:e2:62:46:5a:4d:33:dd:fa:1b:d5:e7:58:d8:de:ee:
         5f:2c:1e:fa:7c:6a:ce:f1:86:ab:1e:f9:a9:c8:c2:fe:3e:c5:
         fb:0f:de:6c:93:f9:ee:a7:4f:2b:03:0f:36:da:54:bc:f5:b6:
         3e:9a:9c:64:c8:d8:73:e6:6f:ed:47:ba:ff:f6:a2:06:4e:4d:
         46:fd:04:4c:62:d6:9a:38:85:f3:6e:4a:99:0f:fc:61:03:c8:
         8b:06:15:96:b9:6d:13:10:76:0b:a7:9b:7a:9a:4d:16:f8:91:
         bd:c4:b9:b8:05:04:dc:d9:12:14:e6:d5:bd:bd:53:c9:e0:0a:
         52:9f:93:e9:70:83:cc:fe:50:e1:91:80:71:0f:0a:cf:da:73:
         52:97:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:21 2026 by rpki-client