Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
File:                     CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json)
Hash identifier:          8m494/OcUaFkzEUzRGiGwmFQnnaukqac6x2UifohPOQ=
Subject key identifier:   B5:EE:54:BE:01:C0:82:AA:97:16:B6:B5:6B:A4:83:ED:16:03:75:7D
Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B
Certificate issuer:       /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
Certificate serial:       2D4847762469B220617A95FB5867DBE2D0A41306
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft
Manifest number:          0574
Signing time:             Wed 29 Apr 2026 07:02:08 +0000
Manifest this update:     Wed 29 Apr 2026 06:57:08 +0000
Manifest next update:     Sat 02 May 2026 12:09:08 +0000
Files and hashes:         1: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=)
                          2: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: SOcqGCoMc1OsX2GjMsJPdCHkVdDZdq+YXQtQQ6na9M0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:47:76:24:69:b2:20:61:7a:95:fb:58:67:db:e2:d0:a4:13:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
        Validity
            Not Before: Apr 29 06:57:08 2026 GMT
            Not After : May  2 12:09:08 2026 GMT
        Subject: CN=B5EE54BE01C082AA9716B6B56BA483ED1603757D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:80:ac:1f:7e:fd:9e:59:85:48:0e:9d:e1:
                    35:0a:55:c3:1a:33:f0:27:c8:ab:b9:6b:50:54:eb:
                    51:83:38:36:84:74:f7:b9:be:0c:26:cd:6d:bb:97:
                    6e:25:7c:d1:80:e0:70:af:43:44:dd:62:26:ed:03:
                    58:22:61:69:cd:fa:4f:69:a4:06:25:53:20:6e:98:
                    fb:c9:ed:08:7d:ba:36:a2:77:9a:81:32:39:9c:58:
                    a5:ce:b1:36:46:38:fa:4f:f4:b2:2f:bc:94:7b:ad:
                    aa:0d:1c:d0:a4:84:7d:2f:07:ed:0b:8e:d3:cc:dc:
                    cc:4c:c2:8b:b4:d6:dd:ab:18:01:96:db:98:94:bc:
                    be:70:4f:77:2e:84:1a:39:9c:15:f8:5e:e7:84:65:
                    4a:b0:b5:0c:7c:b2:cb:49:67:b0:ac:e6:eb:d5:c2:
                    4c:5f:b0:1c:a2:a5:bf:52:9c:18:d8:b6:b4:24:ee:
                    51:08:16:0b:93:40:a5:d8:bb:2d:56:66:f9:94:78:
                    2e:b9:67:af:53:65:d6:8a:e0:25:ec:2c:87:20:18:
                    66:ee:be:79:01:f9:ec:37:3f:09:19:20:5c:a2:c0:
                    28:d5:f2:89:4b:b1:45:dd:9a:29:ea:bc:e3:ee:74:
                    6e:b0:22:02:e8:12:7b:d8:ab:76:36:5f:f7:38:7a:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EE:54:BE:01:C0:82:AA:97:16:B6:B5:6B:A4:83:ED:16:03:75:7D
            X509v3 Authority Key Identifier:
                keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:c7:ab:fc:48:37:b4:98:91:70:15:e6:a5:7a:e9:31:30:
         2f:d7:17:50:59:3d:51:da:f3:44:09:ee:01:eb:69:07:14:43:
         5c:8b:05:1c:72:fe:cf:43:c3:69:9b:d6:94:1c:36:6a:d5:0e:
         7a:61:47:bd:cb:67:21:b5:14:01:aa:1b:65:1e:6c:d6:8e:3d:
         7b:f1:b8:f5:36:06:cf:2d:0b:fb:75:2b:c6:1c:67:a4:52:dd:
         5a:f7:3a:7e:e3:a4:e5:11:fc:55:00:06:b1:cd:38:e9:31:35:
         d5:70:e3:4c:29:9a:71:60:ef:22:79:13:6c:8e:b7:16:ca:4e:
         79:bc:56:db:d9:94:39:42:df:fb:72:7a:7f:02:a6:20:77:02:
         96:33:f9:53:37:3a:ed:49:d6:6e:e5:c5:7f:70:5a:45:db:85:
         b9:6c:a5:bd:14:77:81:b6:e2:7e:fc:88:78:d8:70:c2:ac:9e:
         eb:07:d7:69:45:b4:7c:4e:e3:af:49:3a:0c:8b:12:56:02:63:
         2f:9e:df:89:4d:bf:e9:90:73:ec:f0:f5:c4:fd:70:9d:66:43:
         a8:88:32:35:d4:fc:f4:90:db:43:2c:e2:62:5e:57:76:83:6d:
         75:87:de:7b:4b:10:8a:18:63:3f:76:1d:54:0b:1f:4a:c5:f6:
         d0:a3:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:23 2026 by rpki-client