Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
File:                     8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json)
Hash identifier:          6EPRIv4tVjtiRKQXex89CA+BFQCvju7ghzZoLH2RRRs=
Subject key identifier:   2D:A4:0C:E5:49:0B:27:02:4F:2C:DC:00:9D:0E:6C:E9:E8:B7:EA:C1
Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17
Certificate issuer:       /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
Certificate serial:       701B6F9492EA9C6C59E5564704B798C62AACFED4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
Manifest number:          0570
Signing time:             Tue 28 Apr 2026 14:41:59 +0000
Manifest this update:     Tue 28 Apr 2026 14:36:59 +0000
Manifest next update:     Fri 01 May 2026 23:18:59 +0000
Files and hashes:         1: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=)
                          2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=)
                          3: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: jsCeaJ0Rc9mmvJ22iUX9HOY+nh1Xej6QqhnMArwSHms=)
                          4: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1b:6f:94:92:ea:9c:6c:59:e5:56:47:04:b7:98:c6:2a:ac:fe:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
        Validity
            Not Before: Apr 28 14:36:59 2026 GMT
            Not After : May  1 23:18:59 2026 GMT
        Subject: CN=2DA40CE5490B27024F2CDC009D0E6CE9E8B7EAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:27:e5:ac:ad:96:1a:3c:bd:86:b0:49:c7:
                    96:33:8e:90:3a:8e:6a:af:cd:b9:ec:7b:d6:10:b5:
                    0e:be:9d:a1:28:d9:7b:68:eb:5e:8e:95:a6:7a:52:
                    4b:91:0c:10:0b:63:c2:d5:66:8a:60:97:fa:7a:ec:
                    9d:7e:6d:0e:b2:0c:53:f2:26:2e:0b:5f:2c:7d:15:
                    9e:f9:28:92:2b:0d:df:c7:8f:fd:b4:2c:2d:8f:59:
                    cc:0c:60:24:db:5d:a2:b6:b3:39:0c:aa:17:39:18:
                    e5:f7:79:79:3f:4d:25:f9:ca:0a:e2:73:2f:9d:a2:
                    e0:c6:3d:57:90:ae:02:7f:05:fc:df:f6:69:33:fb:
                    57:f9:82:a7:cb:d7:1e:f9:25:61:32:38:06:bd:8d:
                    af:07:35:20:33:0d:54:ea:e9:92:16:2d:8e:f7:25:
                    90:ed:52:0c:f7:67:cc:34:b8:ec:9b:00:51:d9:56:
                    d3:41:21:16:cb:a6:4c:68:e4:f0:d0:76:03:33:01:
                    cb:fa:97:87:f1:35:ce:b8:22:d9:e3:dc:98:2c:44:
                    65:0b:83:64:d6:1a:cd:b9:b1:6d:08:4b:86:9d:a1:
                    e0:17:67:63:45:51:c7:ae:8d:4e:c5:46:0c:23:8d:
                    9b:e0:ce:f9:0d:cd:ec:7f:68:91:13:08:fb:80:66:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:0C:E5:49:0B:27:02:4F:2C:DC:00:9D:0E:6C:E9:E8:B7:EA:C1
            X509v3 Authority Key Identifier:
                keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:14:66:e4:08:1c:ad:87:ef:e3:e0:ff:a2:b2:4b:3f:a5:73:
         01:e6:3b:80:59:00:49:93:55:f0:3a:54:b6:e7:1f:98:bf:a9:
         22:04:29:07:ac:7d:f4:7a:b7:a2:99:af:b4:3c:37:e1:98:ef:
         02:47:87:2e:80:c4:d9:c8:3c:6a:c7:57:22:a6:3a:d9:61:be:
         6c:23:39:01:05:dd:d3:85:6d:e1:8d:b4:12:0d:40:85:42:0e:
         8e:e9:c3:05:00:a7:1a:12:e3:2b:61:06:ac:81:2b:0c:6e:6e:
         a3:fd:08:9c:c7:92:52:0c:40:4e:e7:43:72:ce:c9:77:e0:f0:
         75:96:86:05:a7:71:16:f5:dd:89:10:17:71:a5:80:06:d4:cb:
         4f:b6:50:20:4b:63:59:33:75:1c:1b:7f:fc:8e:e1:f3:c1:b9:
         8c:6c:74:3a:71:b7:7a:b5:06:5e:83:2b:d1:9e:8b:bc:57:39:
         d8:29:03:8d:2f:09:38:60:5e:25:61:86:f8:85:b1:8b:ad:77:
         c3:af:07:46:85:a3:d5:b8:5d:25:fa:41:93:a2:12:c3:90:0e:
         b6:a7:a7:aa:37:92:3b:49:4c:2a:db:4f:2b:94:0f:9e:75:f3:
         b9:90:53:92:4d:04:da:b9:0a:4e:4e:3e:c9:fe:b0:e5:cb:f5:
         9e:46:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:41 2026 by rpki-client