Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft
File:                     4C44F6F543BDBB858D3656D41A36660407672BDE.mft (raw, json)
Hash identifier:          PpGRUmib1Ct7gOEKbarmgsq5o7mY8P5mAXV0N/+nFWU=
Subject key identifier:   45:67:20:EF:E5:31:76:98:62:6F:EC:8B:DF:94:81:4C:3B:AA:B0:5A
Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
Certificate issuer:       /CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Certificate serial:       063FC7447C00439807BD7867AEE1C68300801CCB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft
Manifest number:          02BE
Signing time:             Mon 27 Apr 2026 11:11:06 +0000
Manifest this update:     Mon 27 Apr 2026 11:06:06 +0000
Manifest next update:     Thu 30 Apr 2026 15:16:06 +0000
Files and hashes:         1: 4C44F6F543BDBB858D3656D41A36660407672BDE.crl (hash: ajH8l68djsXzvUgayuDcKdvD0kZ5hmAaxnxHaGLQQhc=)
                          2: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: vJ0JThPWN5z9ya3yGVitmhJSsuKICvURyRQCb1oSUaA=)
                          3: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: VWdyOYYTifudfSUwEVWa9ANGPIHpQabnls++DgVxljE=)
                          4: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: BmTBKF81iqbHECVQY3Ck/WKC+nTPpzrh6SVPoZTsvD4=)
                          5: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: TW2RLqGqp5GMVEosRG1Cl0owKGLEGJyPDYB2l9dTN4E=)
                          6: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: LV0F6O0JrtgL58ARC8h1flo+UOdpKwAYXIa3PEvRfFg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3f:c7:44:7c:00:43:98:07:bd:78:67:ae:e1:c6:83:00:80:1c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE
        Validity
            Not Before: Apr 27 11:06:06 2026 GMT
            Not After : Apr 30 15:16:06 2026 GMT
        Subject: CN=456720EFE5317698626FEC8BDF94814C3BAAB05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:c5:73:8b:72:f5:98:7d:0b:05:ba:94:c4:
                    00:7f:e0:82:5c:d0:6f:06:54:eb:7b:31:0a:8c:a0:
                    d5:77:71:23:d1:ae:83:8c:0c:9f:46:be:10:c8:48:
                    b8:55:68:e6:51:6e:9d:1d:d8:9c:0e:07:2f:4f:ac:
                    17:e1:63:00:81:70:ed:68:4b:0d:bd:08:bc:12:33:
                    3f:58:61:0d:49:b2:4c:ad:b9:f0:0f:61:07:26:bc:
                    a0:fe:4d:a2:f8:b0:9d:a4:aa:e9:8b:7c:0a:72:25:
                    b9:b6:68:23:2c:b5:65:94:70:31:1c:7b:11:ce:b2:
                    ae:d3:d3:0e:28:bc:0d:b9:9e:ac:a7:18:f6:e0:5c:
                    ba:67:19:d8:82:55:35:98:c6:81:48:3e:83:1f:3f:
                    1f:d1:31:27:08:7f:74:ed:83:8b:55:c8:e8:0e:fb:
                    7a:99:87:c3:dc:d0:ac:3a:17:ec:f5:74:90:98:2e:
                    c3:50:32:5b:d4:0d:50:b5:81:88:3c:60:eb:07:d4:
                    82:d4:5a:50:74:de:48:eb:c2:8d:93:58:05:47:31:
                    3d:22:0a:90:44:64:ed:3d:c1:b6:e0:3c:0e:d8:72:
                    d0:11:8c:7f:c7:57:41:db:75:be:ae:23:67:45:06:
                    b3:9a:88:82:80:ce:8c:1d:76:1f:19:63:2e:31:b8:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:67:20:EF:E5:31:76:98:62:6F:EC:8B:DF:94:81:4C:3B:AA:B0:5A
            X509v3 Authority Key Identifier:
                keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:1f:3c:c7:1d:dd:79:5c:bd:fa:81:ed:2d:a7:f1:40:b4:
         26:eb:b0:f5:18:46:30:fa:87:f3:30:28:29:29:2c:49:59:78:
         74:56:27:7e:3f:5f:51:4e:40:35:68:2e:57:cd:a4:8a:c4:6b:
         43:47:c6:04:87:2a:5e:48:45:9f:e0:25:ab:f8:4e:43:b2:3a:
         37:6a:5b:9c:d3:47:e5:47:2b:d6:ca:da:43:c6:96:ed:29:4a:
         52:05:e0:30:67:55:bf:da:bc:db:bb:9f:9b:a8:aa:e9:a7:c8:
         15:e8:af:73:c4:6b:8f:14:c8:37:09:c3:b7:47:44:b1:91:a6:
         6b:e9:ca:93:2a:29:72:b7:a3:2e:c3:36:33:c6:2e:11:6c:52:
         8a:5e:30:51:d8:e0:ea:6d:c0:4f:b1:5b:56:6e:b4:ce:ef:c6:
         79:c4:15:2a:2b:35:86:b3:b2:05:45:52:c9:ae:dc:9d:19:26:
         23:09:9d:fb:80:83:06:ef:bb:92:f4:f9:35:a0:6f:11:45:0b:
         c3:cb:f5:c8:20:a1:36:99:a4:30:fe:54:7d:09:8e:4f:bb:31:
         bf:27:7f:14:56:0b:aa:8c:3d:a8:b0:21:dc:9c:f8:8d:87:33:
         98:a0:8c:12:e5:a9:89:2b:1a:a8:5a:bf:db:a6:88:97:df:50:
         59:f1:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----