Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft
File:                     8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json)
Hash identifier:          qk4e3FaPm8lXUeSCXTCtl/nmbOxfxF+Orjf62KSGeO0=
Subject key identifier:   6C:80:84:C4:BD:51:3B:D1:27:74:34:F4:BF:78:6D:31:65:1F:79:ED
Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59
Certificate issuer:       /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59
Certificate serial:       74B45F980AD0538302398BD919A135702B9086E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft
Manifest number:          028C
Signing time:             Tue 28 Apr 2026 00:21:45 +0000
Manifest this update:     Tue 28 Apr 2026 00:16:45 +0000
Manifest next update:     Fri 01 May 2026 11:32:45 +0000
Files and hashes:         1: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=)
                          2: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: HVYhAep7KgaM4M+kBrrFEPVlyU6iOfNPrETiLrA+FPY=)
                          3: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=)
                          4: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: FQr3dnu6W2wmRC6QsO/LIhkDuERPgR93ow/4oU8iN0Q=)
                          5: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: KOpwpgV3KMerxKCwLU3q9HuCOFmD7phkyqZLGcZkPQ8=)
                          6: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: f801Vt4Id7ntygWT5bXRc1d+pYsMMPuRFh29HkWICQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b4:5f:98:0a:d0:53:83:02:39:8b:d9:19:a1:35:70:2b:90:86:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59
        Validity
            Not Before: Apr 28 00:16:45 2026 GMT
            Not After : May  1 11:32:45 2026 GMT
        Subject: CN=6C8084C4BD513BD1277434F4BF786D31651F79ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:a7:99:7c:30:a9:a6:65:6c:84:90:c6:7b:
                    ef:7e:70:0c:1c:48:b0:bf:86:0a:46:6e:e0:bb:81:
                    80:6e:3b:2d:43:3a:83:06:5b:af:55:92:af:04:c3:
                    27:e1:b0:fc:19:ce:61:0a:b1:e3:4b:26:6a:db:a9:
                    46:39:70:56:01:49:4f:9d:fd:9d:eb:dd:fe:45:b2:
                    93:1e:50:f6:5f:13:73:50:63:f1:36:86:88:33:86:
                    0a:70:4e:40:d6:70:07:da:78:da:ae:e5:8a:4d:da:
                    ca:c9:1c:d7:2d:a4:c0:1e:05:a2:5d:2c:a4:b7:1d:
                    34:ec:82:3e:ec:fa:91:5e:da:bd:37:92:85:81:f0:
                    d1:78:41:37:72:c0:f2:ec:22:0d:5a:2a:e8:d3:b2:
                    98:e6:03:9c:3a:1f:13:8c:5e:45:66:0f:52:ca:16:
                    fb:17:de:68:fc:1c:bc:6b:90:c9:79:a0:8a:bf:81:
                    89:82:78:88:0a:d9:45:84:d6:54:31:35:64:18:f1:
                    c5:cc:16:f8:7a:31:66:6d:1b:a5:8e:c2:d8:f7:69:
                    e1:e8:f0:18:8c:bd:ec:59:74:8d:1b:5d:f4:df:22:
                    a8:8c:aa:8b:aa:9a:c2:1e:c5:40:e8:b4:5d:30:06:
                    3e:48:8e:4e:86:6e:d6:bf:83:fd:7a:6e:62:e0:4e:
                    7b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:80:84:C4:BD:51:3B:D1:27:74:34:F4:BF:78:6D:31:65:1F:79:ED
            X509v3 Authority Key Identifier:
                keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:05:2a:46:04:a2:96:7f:05:40:e6:f7:cf:7c:db:b6:1f:
         20:7c:9c:21:43:ce:98:fa:bb:bb:a3:6c:4e:88:97:8f:2b:f2:
         67:88:66:13:47:37:30:58:15:aa:b5:46:6b:6c:30:b4:b3:f0:
         88:3f:b1:6c:29:53:0b:d0:62:b4:7e:69:54:68:2a:77:60:4d:
         d2:6f:35:9f:32:31:bf:b1:c0:25:23:71:6c:c5:5f:a0:26:b0:
         be:bd:57:98:24:cc:dc:6e:b0:e5:a2:29:c0:29:90:be:59:44:
         c2:7f:0a:a3:6b:ef:b7:fe:96:15:24:4b:d1:11:a3:e8:70:c5:
         73:04:f8:13:60:a2:4f:ec:0b:76:1b:fe:cf:52:a8:26:97:0f:
         03:44:b8:c3:c8:ee:a7:55:a4:61:73:4f:6c:1d:53:c5:e7:5a:
         eb:e8:02:b3:71:fa:4e:dd:8d:6b:49:a0:bd:f1:99:90:8b:fb:
         da:e6:99:cf:e5:58:78:47:5c:07:b3:48:de:ff:99:94:c4:08:
         dd:86:70:ce:49:a2:b9:4c:4a:d7:d1:02:0b:11:1d:97:fd:f9:
         75:ae:d3:21:4d:f9:a5:06:fa:21:f5:84:3e:b9:fb:14:34:eb:
         bc:75:dc:98:85:c9:25:88:3f:28:09:66:a5:c9:52:0a:21:85:
         c3:29:9c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:09 2026 by rpki-client