Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft
File:                     D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json)
Hash identifier:          YRPQpaQMBSREQpMI0DJglN2mhwhZtT3trh4YXYgRSMk=
Subject key identifier:   42:43:C1:CD:E8:A3:49:A7:E7:6B:88:CD:6E:BE:F2:79:CC:1B:B0:55
Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF
Certificate issuer:       /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF
Certificate serial:       0EC0B231BFE1B554CE8A61C0A9BA297207DC6BC0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft
Manifest number:          02CA
Signing time:             Tue 28 Apr 2026 18:31:52 +0000
Manifest this update:     Tue 28 Apr 2026 18:26:52 +0000
Manifest next update:     Sat 02 May 2026 01:02:52 +0000
Files and hashes:         1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=)
                          2: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=)
                          3: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: pCk1lk/0NwuaDhA6SxMt7kq/2b6wvPG8QqYfUBIn/Bw=)
                          4: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=)
                          5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c0:b2:31:bf:e1:b5:54:ce:8a:61:c0:a9:ba:29:72:07:dc:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF
        Validity
            Not Before: Apr 28 18:26:52 2026 GMT
            Not After : May  2 01:02:52 2026 GMT
        Subject: CN=4243C1CDE8A349A7E76B88CD6EBEF279CC1BB055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:be:0e:cd:5c:89:8c:10:f7:a6:4c:12:d7:
                    7d:d5:47:99:a4:38:70:52:ff:4f:19:9a:95:3e:b8:
                    c0:79:c4:ca:24:23:8f:9d:32:71:47:dd:04:27:28:
                    f3:64:61:39:f8:66:fe:84:b1:b9:cd:7e:96:2f:aa:
                    fc:62:53:07:a0:29:17:30:ba:3f:96:7b:fb:bd:32:
                    9c:f8:e7:e4:93:0b:e2:82:75:8c:28:3e:0b:35:a8:
                    a0:7f:57:72:49:9c:b3:58:0d:5d:fa:81:7c:9c:2f:
                    ca:b1:fe:07:38:b5:a1:6c:9a:26:f9:96:17:a2:c8:
                    34:9a:73:6d:76:e1:c9:57:91:0d:a0:36:d0:b5:aa:
                    74:d7:96:70:e1:23:92:15:33:87:0b:81:59:82:db:
                    ff:59:c4:73:fe:ee:50:70:7a:f1:39:1e:8d:93:72:
                    af:42:a7:74:a6:05:26:91:04:67:9d:59:e3:3e:d3:
                    46:90:19:08:45:c6:88:a5:e8:21:6e:3d:6e:4f:e2:
                    c0:29:bf:dd:e9:f8:f9:3c:7f:af:3d:a8:0f:b8:01:
                    68:3e:6e:45:8c:8f:27:d7:21:89:20:86:e6:7d:7e:
                    96:0d:a3:5e:5b:69:4e:d0:6f:bb:5a:97:e7:50:43:
                    bc:be:e6:77:3d:b9:56:70:2b:9f:bf:d6:bb:89:9c:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:43:C1:CD:E8:A3:49:A7:E7:6B:88:CD:6E:BE:F2:79:CC:1B:B0:55
            X509v3 Authority Key Identifier:
                keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:47:7d:9d:bd:35:aa:19:48:96:f3:5f:66:65:b9:ab:fd:
         87:63:39:d7:bc:e4:f7:35:62:7f:63:5e:ed:a9:07:c6:c4:e6:
         41:9c:8c:d9:db:54:40:5e:a3:a2:a0:da:94:a5:29:6f:f7:12:
         f2:4c:97:58:6c:7a:b4:d5:76:cb:59:b4:86:24:74:00:95:3a:
         04:b3:6c:12:98:5d:2c:26:09:ae:87:6c:6a:34:d1:15:26:f9:
         c7:7c:c8:a3:64:b8:11:dc:e7:80:1d:fe:86:f0:f8:46:a6:10:
         a7:54:f6:60:d0:f0:d2:3e:6a:b2:c1:8b:26:85:c1:09:c3:6e:
         ce:04:ba:ce:82:ab:4e:76:18:ea:94:17:9a:52:7d:d3:25:37:
         6a:43:17:46:9e:43:18:4b:75:b9:11:52:18:97:91:3e:3b:d9:
         77:d3:a4:73:ca:ab:2e:83:a6:de:15:e9:58:b2:39:11:55:2d:
         c0:df:53:af:68:dd:56:3b:09:42:b0:9d:5b:1e:e5:b0:0d:4a:
         f7:2c:e1:97:d5:56:de:04:f7:6a:5e:73:43:19:59:04:87:e2:
         08:fc:eb:0a:81:da:45:2d:6a:f9:31:b5:ab:47:6a:be:d2:f8:
         09:43:da:83:a4:36:2d:87:53:3b:1b:d6:74:82:be:7d:e0:7c:
         e6:49:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:37 2026 by rpki-client