Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
File:                     E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json)
Hash identifier:          weXIw58LUtWCG7qYcQ6GkkwbwWuubB9xjL2s8+RMSzk=
Subject key identifier:   A8:F5:19:F3:75:88:3F:BD:0E:50:20:38:4E:21:BB:17:76:70:6D:41
Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
Certificate issuer:       /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
Certificate serial:       7140675F8B21FFAB34C9FD00DD078032F3CA4191
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
Manifest number:          0291
Signing time:             Mon 27 Apr 2026 04:21:07 +0000
Manifest this update:     Mon 27 Apr 2026 04:16:07 +0000
Manifest next update:     Thu 30 Apr 2026 10:54:07 +0000
Files and hashes:         1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: Z+/e2LCJYqLhlMKq5hm/4YXDEmX1kHy6g3tidQjRrMM=)
                          2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: C86D7uEekeGvTmXVujqb0bxFjg5sWER8alGR0xcQrmY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:67:5f:8b:21:ff:ab:34:c9:fd:00:dd:07:80:32:f3:ca:41:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
        Validity
            Not Before: Apr 27 04:16:07 2026 GMT
            Not After : Apr 30 10:54:07 2026 GMT
        Subject: CN=A8F519F375883FBD0E5020384E21BB1776706D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:73:70:a8:cc:05:8b:8b:58:06:80:c1:b7:
                    52:ea:d4:c7:6d:6f:8c:fe:6e:dc:d0:82:f9:b0:17:
                    69:13:3b:72:3d:ad:fe:e8:42:fc:71:d4:5f:2e:73:
                    f6:2b:c8:e3:e1:a2:45:9e:0a:40:dc:ed:b8:4a:55:
                    4f:f8:d1:f0:dd:a0:74:6c:ab:25:2f:ad:73:1d:da:
                    45:30:2a:b2:ec:59:ff:8a:63:9c:cc:0f:1f:0f:1a:
                    75:0e:b1:c3:ae:6f:2f:6c:72:4b:31:fd:51:f4:7e:
                    5d:48:3a:14:33:2c:65:2e:ed:c6:c8:34:c6:44:53:
                    6f:83:39:8e:9a:90:d9:ac:98:03:94:91:4b:16:fd:
                    0c:3d:e0:d7:76:0f:3e:04:9e:83:ac:c3:02:32:c5:
                    70:83:fb:74:97:86:ac:63:6a:4a:ef:e8:67:b6:73:
                    d1:85:2c:42:3c:4e:27:b8:63:12:47:77:a2:ee:9d:
                    b2:a2:65:1c:a2:97:00:38:e3:01:ec:7b:53:bb:dc:
                    aa:16:8f:88:1a:6b:70:3e:ce:a8:c3:30:ec:e9:22:
                    51:f1:1d:44:68:db:fe:54:e5:90:84:5c:fe:0d:8d:
                    7c:da:7d:6b:6c:09:b7:5c:26:a7:97:28:fb:65:6a:
                    7e:0b:9b:f9:f5:af:a7:7d:2a:81:5e:ae:2b:b0:70:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F5:19:F3:75:88:3F:BD:0E:50:20:38:4E:21:BB:17:76:70:6D:41
            X509v3 Authority Key Identifier:
                keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:42:1b:bd:b5:43:d3:d0:3c:88:4d:3b:ca:f9:6b:7c:09:54:
         49:56:be:6a:71:8f:4e:18:d7:5e:ac:f9:4c:bc:5b:4e:48:b8:
         50:a1:a7:d1:77:37:9f:a3:b2:0e:88:54:22:29:db:d3:e2:ba:
         74:69:e3:da:f1:99:17:b8:4a:ca:01:db:d8:72:36:10:d6:a9:
         52:38:51:c9:3c:71:b8:ba:af:b3:75:19:f1:da:8b:05:06:0b:
         ce:4d:a6:d9:3e:79:95:7c:49:2b:b0:4d:98:70:68:16:b8:1d:
         ce:68:07:79:4a:0b:0c:86:24:25:93:d3:6a:2f:3c:e5:5a:e5:
         4f:57:84:fd:2b:f7:4f:07:fc:f2:21:12:23:b0:aa:f9:b9:57:
         ab:f2:3e:0a:cd:60:18:b4:7c:c8:ef:a3:84:3b:ca:02:e0:2c:
         5d:8b:56:77:0a:25:c9:17:7d:cd:63:41:11:07:05:45:68:f9:
         ee:b2:9c:e2:eb:e7:b8:e4:2b:1b:de:78:d7:5e:ef:aa:4a:30:
         be:a2:be:19:e8:95:b1:00:95:d5:38:8a:b4:64:d9:fa:ae:02:
         b2:e3:f9:87:ca:05:9e:1a:29:17:bf:ee:97:a7:27:e6:5b:55:
         34:00:d5:ed:33:62:9e:c4:ad:2d:ab:16:83:b9:69:a6:09:93:
         ae:3f:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----