Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft
File:                     4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json)
Hash identifier:          KO6EQpz7wryUG9yXcxAYmhs8OdGXypQtb7VzJv0jqQc=
Subject key identifier:   E8:50:8F:0E:FC:21:73:A8:47:BB:B8:66:60:F3:24:DF:EB:65:35:5B
Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1
Certificate issuer:       /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1
Certificate serial:       6E69E76BAB55F8B6EDCC320BE844C3F56304A607
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft
Manifest number:          0253
Signing time:             Mon 27 Apr 2026 16:22:00 +0000
Manifest this update:     Mon 27 Apr 2026 16:17:00 +0000
Manifest next update:     Thu 30 Apr 2026 19:37:00 +0000
Files and hashes:         1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: LgRRVJRfV+/ns4q13d+YqlNlGcgqnMAnfg10KVI19ag=)
                          2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: szaBwiFiLCNAOiFGxB7TpxSKRfvDEsXy1Ap3myhNiAI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:69:e7:6b:ab:55:f8:b6:ed:cc:32:0b:e8:44:c3:f5:63:04:a6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1
        Validity
            Not Before: Apr 27 16:17:00 2026 GMT
            Not After : Apr 30 19:37:00 2026 GMT
        Subject: CN=E8508F0EFC2173A847BBB86660F324DFEB65355B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:21:65:d1:aa:70:b9:27:06:6f:51:84:a0:
                    66:24:1e:61:6a:4e:09:0e:cc:c4:65:c0:a4:0d:c7:
                    4d:0b:6e:0a:a3:69:bf:69:ca:4d:dc:1f:5e:8c:a7:
                    64:e5:dd:6e:2b:04:0c:a8:7a:09:00:19:dd:9f:26:
                    72:48:24:14:db:f9:bc:8d:7e:fc:11:44:25:fd:91:
                    e2:de:04:0d:84:81:d8:c4:c7:11:08:32:24:5e:29:
                    34:e2:4a:c0:3b:1c:61:2e:17:d6:81:bb:30:61:bc:
                    8e:50:ed:f3:3f:5e:24:de:7e:88:de:42:12:17:8a:
                    f0:fb:5d:13:ca:62:03:b0:6a:eb:da:91:0c:8a:50:
                    46:6c:b9:33:79:81:1a:65:5d:f0:6b:ae:19:d5:a1:
                    79:8a:c4:53:4b:d9:b4:a6:e2:f7:af:a5:80:76:b2:
                    f6:c2:97:4d:f6:3f:95:f2:c6:35:a3:43:dd:64:a9:
                    af:c3:34:07:77:6a:b4:6c:b0:fb:4f:86:22:bf:4e:
                    b2:0b:af:ef:2a:72:ca:e7:fc:70:dc:0b:da:c9:a4:
                    42:2b:e4:a3:b0:3a:76:22:d7:e6:ad:54:c1:08:66:
                    90:40:55:47:c6:30:84:a6:61:0f:e9:b1:39:36:76:
                    71:f0:f6:71:af:ee:34:b9:8f:e2:3c:2a:1a:bf:df:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:8F:0E:FC:21:73:A8:47:BB:B8:66:60:F3:24:DF:EB:65:35:5B
            X509v3 Authority Key Identifier:
                keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:96:f4:e9:dd:80:eb:01:f3:0c:20:04:ff:5c:2e:10:f8:
         69:54:b9:98:22:47:12:e7:19:f6:4c:14:81:00:96:5b:8d:9a:
         31:38:d7:d3:e3:f8:e3:6b:03:75:1e:20:05:5c:23:eb:a2:2d:
         33:d7:61:07:aa:fc:ec:fe:76:50:bb:23:cb:d3:3a:17:34:ec:
         6a:f3:1e:84:cd:8c:9c:a7:a6:47:c5:5d:23:e9:da:9a:c0:ac:
         67:7c:a3:cd:c3:89:ef:d1:d7:00:47:47:18:90:2f:21:59:47:
         4d:d5:be:4a:4f:c6:6b:cb:50:87:d0:07:13:47:fd:e7:72:ac:
         94:1e:1e:e7:8d:21:7e:7b:43:36:99:b3:48:9d:38:cb:88:03:
         91:62:7c:52:13:5b:77:d6:eb:34:67:59:e1:cd:ce:e6:c6:47:
         e2:b2:9c:d6:93:00:02:b3:33:a3:11:f7:d9:3a:a6:aa:e7:00:
         59:a5:cc:74:41:a2:00:44:61:91:d2:15:64:77:50:d3:f9:bb:
         87:9b:aa:97:6c:84:9d:d4:3c:96:67:52:26:07:a2:fb:3b:f7:
         36:18:5f:72:90:d8:16:c3:77:d4:71:d6:ba:dd:19:78:d2:c1:
         58:df:0f:2b:4e:48:13:48:20:10:65:92:ac:23:55:02:e4:22:
         65:aa:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:00 2026 by rpki-client