Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
File:                     A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json)
Hash identifier:          iREmjWVQx8O5n2B/3C4BwtlbrAHhSJayxMNyVCoCk0w=
Subject key identifier:   DA:B3:5C:8E:AD:CB:C1:71:E5:49:77:A7:31:C9:2A:21:0F:84:14:A6
Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A
Certificate issuer:       /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
Certificate serial:       7ED3FB46B9BB1D42A57A74BB89C35203315D0D90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
Manifest number:          0295
Signing time:             Tue 28 Apr 2026 04:22:08 +0000
Manifest this update:     Tue 28 Apr 2026 04:17:08 +0000
Manifest next update:     Fri 01 May 2026 04:34:08 +0000
Files and hashes:         1: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: vgTgBTNTJydGtVf4bKSxwWlbjZECM4zNCEv4WqlYb9U=)
                          2: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: 90ZvhDHwMKwmyiWHYWN/HwNE0+LCJV8cHaNBGIHIHQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d3:fb:46:b9:bb:1d:42:a5:7a:74:bb:89:c3:52:03:31:5d:0d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
        Validity
            Not Before: Apr 28 04:17:08 2026 GMT
            Not After : May  1 04:34:08 2026 GMT
        Subject: CN=DAB35C8EADCBC171E54977A731C92A210F8414A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:92:7c:0f:f3:57:22:47:36:10:a0:90:a2:
                    f5:ed:00:4c:d6:c4:d0:9f:00:47:b1:23:ab:ae:8b:
                    30:e4:e7:4a:de:f6:ba:d1:62:68:5c:a8:da:c5:d7:
                    6a:af:07:15:ca:15:60:49:07:2f:c0:f3:6b:f0:04:
                    f6:77:f0:a4:44:0c:10:be:3e:74:a6:d7:ea:22:0e:
                    4d:b8:77:87:27:d2:23:44:3c:e9:c5:d0:c1:63:70:
                    81:fb:4c:91:85:79:cc:5f:0a:84:bf:c9:07:a7:13:
                    38:82:89:ff:56:5f:6d:d6:fe:22:d0:54:32:ef:12:
                    36:2c:ce:a8:44:2c:19:dd:85:d5:d1:c2:3d:bf:89:
                    dc:e7:8c:1f:41:de:f9:8f:3b:31:2d:5f:10:53:a1:
                    ee:a0:2e:98:7d:77:f9:3e:7c:01:3b:cc:c4:57:83:
                    7f:23:a5:00:27:b7:63:37:33:c1:45:c4:e7:65:2d:
                    3b:2e:7a:35:8b:fb:bd:ee:44:b5:78:81:d0:08:22:
                    6c:1b:64:ea:5f:38:35:1d:3e:4f:f9:3c:73:f4:ad:
                    9d:81:f1:2b:3b:26:4d:66:03:e1:82:5c:e0:80:09:
                    83:1c:07:a0:db:28:83:a8:e0:fd:39:c5:83:07:d6:
                    94:5d:da:ce:40:78:d3:0b:a5:60:23:78:b0:9d:aa:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B3:5C:8E:AD:CB:C1:71:E5:49:77:A7:31:C9:2A:21:0F:84:14:A6
            X509v3 Authority Key Identifier:
                keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:85:cd:c5:2d:30:3f:5d:3c:3c:e3:72:a2:c8:3a:bf:ae:
         f6:6d:c0:1d:f9:36:0a:fd:cc:4f:ed:ae:a9:1d:61:b7:07:14:
         1b:f9:6a:61:98:81:2a:4a:4e:fa:4c:2f:ce:f3:1c:33:ae:ec:
         ec:83:18:8b:8c:18:48:2a:1e:fb:02:c5:05:28:29:8d:67:71:
         92:66:4f:93:52:18:47:64:2c:43:74:ec:49:de:8f:71:1d:d7:
         d5:4b:71:92:41:ce:cf:2b:23:20:cc:f7:5c:4a:81:6d:b8:2d:
         4b:6d:25:60:12:28:59:df:ff:87:08:ec:c7:05:7d:0a:ef:4a:
         00:5e:11:ac:61:82:2d:32:46:08:0e:fd:a6:9c:97:c2:5c:86:
         b3:29:3d:92:7c:80:e1:b8:e8:01:0f:f0:2a:c1:82:51:db:e8:
         d3:ee:a9:94:40:27:cc:81:37:f6:b3:50:12:ab:a0:90:0e:b0:
         fa:4a:d4:01:f5:cd:c5:49:b4:a1:ac:e5:7e:a2:b2:00:23:49:
         71:ba:9c:18:9b:e8:5b:da:22:5f:b9:e1:8b:e7:f5:92:91:a7:
         33:7b:40:8f:17:9b:48:6c:5e:ff:ee:c6:27:2a:62:0f:73:e4:
         79:7d:40:37:09:e5:05:38:3f:d2:8c:86:0b:f0:9b:1c:c2:47:
         4c:5a:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:44 2026 by rpki-client