Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft
File:                     C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json)
Hash identifier:          4Gjlhb7uyn0WHDWF0n9MnoartJBb9iKyrCztzXes1BQ=
Subject key identifier:   A0:9D:55:58:8F:B1:6B:EB:06:8E:1A:43:2F:94:E1:CB:2A:67:31:20
Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2
Certificate issuer:       /CN=C2E929DFB05F81B91880BC808154365AECAC27D2
Certificate serial:       2EB45EA7065E9F85B4D24C852BC71F6FDA1B34CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft
Manifest number:          018D
Signing time:             Mon 27 Apr 2026 20:31:55 +0000
Manifest this update:     Mon 27 Apr 2026 20:26:55 +0000
Manifest next update:     Thu 30 Apr 2026 22:48:55 +0000
Files and hashes:         1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=)
                          2: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: Td2M/Km+n+sGWL9ODso1tM2rNNyLk1vNvUuueC7+YQY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b4:5e:a7:06:5e:9f:85:b4:d2:4c:85:2b:c7:1f:6f:da:1b:34:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2
        Validity
            Not Before: Apr 27 20:26:55 2026 GMT
            Not After : Apr 30 22:48:55 2026 GMT
        Subject: CN=A09D55588FB16BEB068E1A432F94E1CB2A673120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:b5:12:55:a1:c3:5e:2b:6e:1b:b4:e6:21:
                    64:53:9b:a0:7b:de:19:57:c4:8f:f1:17:33:79:3a:
                    59:48:7d:ca:68:8a:b9:1f:17:e6:d3:38:3a:b4:43:
                    8e:93:ad:4d:47:aa:c5:e6:84:3b:65:9f:7f:0f:ed:
                    90:a4:1b:6f:a8:e1:df:76:27:d5:4c:b3:4b:6a:ed:
                    b2:fc:fe:f7:8b:bc:6e:68:9a:04:f2:ea:da:76:82:
                    da:b5:6f:cb:25:65:f3:94:4a:f6:2d:2b:80:68:b2:
                    58:b5:b1:a1:b7:62:01:77:5a:62:bf:f9:a9:9a:23:
                    50:1a:a0:a7:60:97:48:54:ab:39:84:94:48:8f:1b:
                    76:d1:c2:30:12:e2:0b:f2:71:db:64:79:f2:02:2a:
                    f9:92:c1:0c:82:a5:2c:6b:53:4b:39:82:2e:22:6b:
                    55:d7:1b:74:20:d7:75:ba:d5:ae:d5:13:aa:7a:e0:
                    bf:90:18:86:48:45:9c:6c:db:ca:36:2c:e7:10:eb:
                    e5:fa:23:10:fc:05:91:de:39:02:b4:d4:7e:07:c4:
                    f3:b7:80:19:b3:4a:99:11:4b:78:ad:26:75:6c:34:
                    bc:a3:76:24:ef:db:9d:18:17:7c:a5:90:06:29:f3:
                    6b:a0:51:fc:1b:2b:64:3c:2b:f9:a1:b4:c8:f2:99:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9D:55:58:8F:B1:6B:EB:06:8E:1A:43:2F:94:E1:CB:2A:67:31:20
            X509v3 Authority Key Identifier:
                keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:b5:44:9e:27:88:49:26:46:fe:a2:3a:04:b8:18:0a:6e:
         d6:a5:e9:d2:66:c7:05:d0:cf:d0:1c:f0:8e:a2:d8:49:53:ce:
         c5:40:6b:67:c0:d9:e8:3e:51:14:fc:44:1d:69:1c:59:df:37:
         4d:b5:bd:9a:c8:4b:9e:30:61:15:c1:aa:61:0b:b4:45:30:96:
         f1:16:ee:f8:b9:d9:8e:6b:6f:e2:1c:cf:55:54:f3:33:da:8d:
         1a:4d:e4:c2:0e:32:21:86:37:90:21:20:f0:96:e0:73:ba:d4:
         4b:b2:4e:0a:02:83:92:8b:8d:c0:3b:af:74:7a:44:e3:4a:a2:
         cd:fe:af:f1:b6:83:44:fd:37:2c:18:32:6d:1a:95:a9:2c:5f:
         0f:9a:2c:29:b2:44:53:68:fd:96:d5:05:18:89:ec:03:78:db:
         25:2f:95:5f:63:34:23:16:50:46:8a:58:78:47:64:fa:bd:4b:
         8b:73:d6:63:da:e9:ca:86:a1:22:83:a9:12:c7:48:73:c9:a2:
         d8:32:5a:71:88:ec:9c:b8:05:eb:d5:8c:9d:b3:a0:f3:80:de:
         17:35:20:ec:8d:69:2d:27:21:44:e7:5c:4c:f1:62:0f:a9:68:
         6b:18:25:24:98:91:29:76:81:1a:25:bd:9a:2f:78:fc:ef:bb:
         3d:df:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:59 2026 by rpki-client