Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft
File:                     385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json)
Hash identifier:          j+4SSdK9v38op2wCEcX53BC1sRj+djR8mYiJ+Tz04c4=
Subject key identifier:   81:B5:77:03:B8:45:E2:EE:DD:19:90:02:8F:6F:2A:F5:42:87:02:8D
Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04
Certificate issuer:       /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
Certificate serial:       7EC97C2C40D7BD57B61A650D3692481B953B432C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft
Manifest number:          025B
Signing time:             Mon 27 Apr 2026 08:21:29 +0000
Manifest this update:     Mon 27 Apr 2026 08:16:29 +0000
Manifest next update:     Thu 30 Apr 2026 13:23:29 +0000
Files and hashes:         1: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=)
                          2: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=)
                          3: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: bYAXYc9j45eSSiOxKauAKVck09AbW8Sv8/pwPP78ku8=)
                          4: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c9:7c:2c:40:d7:bd:57:b6:1a:65:0d:36:92:48:1b:95:3b:43:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
        Validity
            Not Before: Apr 27 08:16:29 2026 GMT
            Not After : Apr 30 13:23:29 2026 GMT
        Subject: CN=81B57703B845E2EEDD1990028F6F2AF54287028D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:16:d0:c3:8d:fd:cd:7b:1d:1d:6b:53:1e:
                    6e:da:4c:64:d4:ba:fd:60:b0:e3:54:9b:8e:c1:89:
                    56:4a:a3:d6:e7:1f:47:0b:c0:67:8e:ec:62:4f:4a:
                    9d:1e:d8:51:d7:f5:e4:55:e8:db:d9:3b:26:89:8c:
                    42:fd:25:6e:c7:d4:4b:d9:40:4b:b2:5a:f2:69:49:
                    70:03:72:fd:cf:48:20:a4:f7:c8:1f:22:68:4d:9f:
                    d8:ad:1f:d9:fb:37:d6:9e:fc:ea:ed:f6:43:ff:c1:
                    89:4f:04:6b:5b:49:6c:c7:26:50:f6:c8:41:e0:99:
                    ac:54:4f:89:10:4f:02:25:5e:12:6d:9d:43:ed:b1:
                    cb:60:67:c8:6f:a0:86:af:e9:c0:93:d6:a0:de:3f:
                    6b:e3:bb:bc:7b:23:72:3b:ff:16:a6:05:f3:67:7d:
                    41:ca:f5:36:0f:73:c3:d5:18:15:c8:c3:37:1a:73:
                    97:f2:45:28:82:c0:8d:2c:2d:e2:f8:31:6a:ed:00:
                    cf:e6:27:49:a3:5e:5b:a6:b8:72:a7:e0:18:79:c6:
                    4d:12:11:8a:a8:13:24:b5:cf:e5:85:20:5b:8c:b8:
                    1f:5c:81:29:c3:2b:06:5e:42:6b:ab:db:38:f4:58:
                    c3:af:1a:c4:29:70:5c:57:92:2a:24:f9:93:bb:75:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B5:77:03:B8:45:E2:EE:DD:19:90:02:8F:6F:2A:F5:42:87:02:8D
            X509v3 Authority Key Identifier:
                keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:73:d5:b9:68:9e:b2:90:0c:63:e9:57:eb:07:ec:01:fe:e9:
         31:e7:22:5b:c3:8e:f6:4d:67:71:05:42:68:49:c2:4b:e3:6a:
         30:07:ed:bf:73:13:ee:2a:6d:b2:d0:bf:39:48:4a:3d:ac:3f:
         06:db:85:ac:64:0c:4f:47:8b:07:dd:5d:31:e3:46:57:d9:cb:
         60:c6:a8:14:a7:ff:10:1b:53:c2:68:93:00:0a:ac:e0:82:88:
         21:b2:86:fa:f3:5f:90:1f:96:23:29:cd:f4:c8:d9:47:0d:69:
         98:08:5b:4c:c2:d9:83:14:cf:e3:e1:3d:ce:d0:0e:5b:2f:b9:
         3a:e9:87:13:e5:d3:bb:63:8b:df:0b:73:7d:9d:e0:25:46:06:
         a6:75:46:3e:a4:e2:d7:1e:3a:bd:45:f2:33:e3:1f:bb:5b:53:
         40:9b:5a:f1:de:91:fb:75:31:b8:0d:d1:8c:49:c6:df:25:f2:
         86:08:21:97:b5:c1:3b:c2:be:d9:c9:85:8b:ce:db:36:c6:8f:
         00:1a:b2:32:44:b3:b6:60:d2:df:9c:4d:74:a0:bb:60:2b:7a:
         f5:82:df:3c:03:b4:26:0b:e6:8d:c9:61:28:18:38:ec:63:b9:
         60:a9:c1:f9:51:73:ac:44:23:14:16:20:e9:f5:42:b0:22:a8:
         f0:8c:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:15 2026 by rpki-client