Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
File:                     428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json)
Hash identifier:          WeUJfZnsmYhWf4//JH9/Uqs+jTIroZgAbncQyRzOGjA=
Subject key identifier:   82:29:D8:7C:12:E7:93:FA:04:52:BB:11:70:D9:AF:BE:0D:B6:2F:68
Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA
Certificate issuer:       /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA
Certificate serial:       3896AD2CE13523D45020666A8945CAA6DC11639D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft
Manifest number:          0242
Signing time:             Tue 28 Apr 2026 00:21:33 +0000
Manifest this update:     Tue 28 Apr 2026 00:16:33 +0000
Manifest next update:     Fri 01 May 2026 08:46:33 +0000
Files and hashes:         1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: qgQtWf0xurILm1CYkhaGGDAZkM+qKUpFoRWj7NTAGPI=)
                          2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:96:ad:2c:e1:35:23:d4:50:20:66:6a:89:45:ca:a6:dc:11:63:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA
        Validity
            Not Before: Apr 28 00:16:33 2026 GMT
            Not After : May  1 08:46:33 2026 GMT
        Subject: CN=8229D87C12E793FA0452BB1170D9AFBE0DB62F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:90:56:7b:1f:fd:9e:84:f3:15:80:cb:b7:
                    db:42:88:aa:ec:1d:da:54:ad:a7:ac:40:81:74:1e:
                    c5:e2:b6:b1:78:86:a5:53:f4:d2:cc:4b:98:55:c4:
                    3c:31:26:6f:0f:da:1f:7a:6d:74:fd:da:03:63:8b:
                    7e:f7:7a:ed:0d:fb:1e:7b:4c:7b:38:a9:fe:95:01:
                    8e:95:58:02:22:f6:ad:a8:2b:06:91:c6:37:b5:9a:
                    da:82:f6:47:e2:38:ff:ae:a7:48:65:0c:c7:88:4b:
                    04:78:a7:66:40:6c:0d:7d:cc:00:86:b1:d0:8c:32:
                    53:e7:d1:84:73:9a:eb:d6:e1:f2:ce:99:a8:d6:be:
                    8a:85:4c:59:e5:17:f4:fc:e3:83:8a:e6:9a:a3:07:
                    a0:e2:76:c2:e0:66:43:65:3d:a2:d6:a4:76:a2:ea:
                    3b:e9:c2:2c:c1:2d:42:88:0e:e1:8e:77:8f:4e:f7:
                    42:4a:af:19:8c:cb:cf:b1:77:9d:ce:a8:5d:d2:53:
                    a1:f2:5a:6c:d6:d8:ec:8a:4f:77:5a:14:4f:1a:1f:
                    b5:10:c3:f8:cf:24:5c:e8:4e:89:06:e2:3f:dd:23:
                    01:bc:47:d2:85:c8:05:31:08:ee:5e:e1:2c:7e:b7:
                    5a:85:18:88:32:a3:93:f3:c7:8c:7b:cd:9d:1f:f1:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:29:D8:7C:12:E7:93:FA:04:52:BB:11:70:D9:AF:BE:0D:B6:2F:68
            X509v3 Authority Key Identifier:
                keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e2:06:52:0c:f3:42:97:86:2f:e0:97:3f:d7:89:f0:28:5d:
         e6:3c:39:e3:eb:73:27:b6:41:23:50:5a:7d:6c:e0:94:21:ea:
         32:03:17:01:1a:b8:1b:73:2c:21:5f:bb:28:d2:6f:54:76:8d:
         d8:d5:e3:41:8b:2e:1f:31:d8:cc:e2:63:2f:30:ef:60:c0:a2:
         a1:32:af:9d:4d:f8:7e:a4:eb:34:30:74:f5:f5:3b:10:d9:e3:
         58:c9:a2:b5:fe:f3:91:8d:ab:e4:2c:13:01:c9:6f:10:13:4f:
         94:6e:58:91:02:ee:25:90:02:1e:01:7a:20:aa:06:6f:e8:12:
         73:4e:91:ec:3f:81:9a:8b:ba:19:f2:c5:15:7e:cc:c6:8b:de:
         02:b2:e6:2d:56:38:ac:40:de:87:bd:0c:0a:09:18:8d:8d:12:
         79:b3:b3:8b:ea:58:12:06:44:bc:f9:26:ad:85:3a:5c:6e:e5:
         4b:6b:62:a5:73:e3:82:f4:05:89:bb:67:ec:6f:8c:c5:c5:a7:
         a2:d5:74:1a:0c:b2:f1:ad:3e:84:22:9a:48:df:11:a0:66:ae:
         ad:89:39:a7:d2:7b:60:b5:51:a7:44:40:0b:a1:52:74:db:50:
         67:18:53:e8:21:a0:a9:3f:af:1f:23:cd:56:73:b7:8a:88:8d:
         c6:7e:7b:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOJatLOE1I9RQIGZqiUXKptwRY50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3
RkIwQ0VDQTAeFw0yNjA0MjgwMDE2MzNaFw0yNjA1MDEwODQ2MzNaMDMxMTAvBgNV
BAMTKDgyMjlEODdDMTJFNzkzRkEwNDUyQkIxMTcwRDlBRkJFMERCNjJGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoJBWex/9noTzFYDLt9tCiKrs
HdpUraesQIF0HsXitrF4hqVT9NLMS5hVxDwxJm8P2h96bXT92gNji373eu0N+x57
THs4qf6VAY6VWAIi9q2oKwaRxje1mtqC9kfiOP+up0hlDMeISwR4p2ZAbA19zACG
sdCMMlPn0YRzmuvW4fLOmajWvoqFTFnlF/T844OK5pqjB6DidsLgZkNlPaLWpHai
6jvpwizBLUKIDuGOd49O90JKrxmMy8+xd53OqF3SU6HyWmzW2OyKT3daFE8aH7UQ
w/jPJFzoTokG4j/dIwG8R9KFyAUxCO5e4Sx+t1qFGIgyo5Pzx4x7zZ0f8ewFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUginYfBLnk/oEUrsRcNmvvg22L2gwHwYDVR0j
BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4
QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw
Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh
NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2
MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMniBlIM80KXhi/glz/XifAoXeY8OePrcye2
QSNQWn1s4JQh6jIDFwEauBtzLCFfuyjSb1R2jdjV40GLLh8x2MziYy8w72DAoqEy
r51N+H6k6zQwdPX1OxDZ41jJorX+85GNq+QsEwHJbxATT5RuWJEC7iWQAh4BeiCq
Bm/oEnNOkew/gZqLuhnyxRV+zMaL3gKy5i1WOKxA3oe9DAoJGI2NEnmzs4vqWBIG
RLz5Jq2FOlxu5UtrYqVz44L0BYm7Z+xvjMXFp6LVdBoMsvGtPoQimkjfEaBmrq2J
OafSe2C1UadEQAuhUnTbUGcYU+ghoKk/rx8jzVZzt4qIjcZ+e8c=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:12 2026 by rpki-client