Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
File:                     3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json)
Hash identifier:          +CrUY8D1MN3DJxXsynplMgO4s/Rw0UED3ZB8dM+l/ls=
Subject key identifier:   E9:A5:0E:B8:AB:5C:7E:D6:28:77:80:D0:D8:FF:AE:A6:F2:DA:86:B0
Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64
Certificate issuer:       /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164
Certificate serial:       2CF8B8887E9B6DE6BF655A05F0DE0E5A87B68647
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
Manifest number:          014E
Signing time:             Tue 28 Apr 2026 15:02:39 +0000
Manifest this update:     Tue 28 Apr 2026 14:57:39 +0000
Manifest next update:     Fri 01 May 2026 17:15:39 +0000
Files and hashes:         1: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: 1R2O/r6j/Z2JIvpI1gj24JgeK9sd0xzW94a+KDUM1Bk=)
                          2: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: 6Ozj0bnQCOOfsbCl5pz0EmWWOULaKdCGv4cZ3l8WpRo=)
                          3: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: kADPVhjKR2TSlyiLPxQ0miUTvXZPeeWVGY0lXhCRU+w=)
                          4: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: /XDSaVsrSjwe2U97ABDcqea/xKaB2R3seZrfdL8XTtc=)
                          5: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: flxUwmIBm5LywlVGg9yH6C9JGyBpXiBZMWw156cr79I=)
                          6: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: u43zTi9Bk1sJznU4k2t//pSN767UMyRsnCd0m+J61t0=)
                          7: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: t/PNdhAimXVY10CPtXNhPj7zhZ0aTYHgcrFrXGZksrU=)
                          8: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: cAXi7QLRcU3xQealltM+krJDl+01MknkHHhrGkik9hw=)
                          9: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: tg1QlxcjWekQYGPKe7Pcmqi3uQgs8saM6AMTi8z02LE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:b8:88:7e:9b:6d:e6:bf:65:5a:05:f0:de:0e:5a:87:b6:86:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164
        Validity
            Not Before: Apr 28 14:57:39 2026 GMT
            Not After : May  1 17:15:39 2026 GMT
        Subject: CN=E9A50EB8AB5C7ED6287780D0D8FFAEA6F2DA86B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:bd:d0:7c:a7:1d:28:7a:3b:8d:20:5a:20:
                    54:e3:85:72:54:69:13:9c:29:cf:84:37:a3:48:48:
                    a6:7e:50:58:20:81:47:a5:27:55:bd:35:3d:b7:e1:
                    f9:77:10:1f:7a:55:6e:db:12:ef:b8:4a:60:6a:27:
                    80:0e:97:07:2b:69:43:2f:b9:db:fc:a0:17:69:b6:
                    ce:c0:cc:4b:2d:f3:23:72:c4:e0:5b:d4:1a:bf:81:
                    55:64:31:c2:d0:47:98:88:ce:10:9c:9b:55:1b:5c:
                    0d:b4:72:87:a2:8f:f6:0d:2b:35:c3:fa:74:a8:fa:
                    fa:f7:69:41:be:77:01:8a:45:6b:f9:bf:cb:a6:58:
                    7b:5c:78:5d:de:f8:a4:fd:d9:c1:4a:f1:62:65:17:
                    4f:cd:a2:93:7f:6a:f7:01:08:67:70:fe:23:74:b0:
                    4f:e0:45:c1:9d:4e:c2:1d:a7:7b:62:9a:8c:fb:50:
                    98:67:94:01:89:8f:94:0a:6e:fc:a4:84:e5:55:4e:
                    22:b7:27:d5:d2:1a:f5:ee:7a:3c:ae:d5:0b:73:13:
                    0c:5f:0f:c0:00:c9:1b:86:e2:ba:61:75:cb:91:42:
                    61:d1:4f:9d:d7:53:45:f4:14:55:52:f3:a4:ae:60:
                    9c:ac:2d:75:43:9d:77:95:4e:37:68:d0:fc:e1:89:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A5:0E:B8:AB:5C:7E:D6:28:77:80:D0:D8:FF:AE:A6:F2:DA:86:B0
            X509v3 Authority Key Identifier:
                keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ba:d6:b1:79:0e:a8:3e:38:a2:19:4a:fb:7e:7c:f1:62:e4:
         82:d3:8b:1e:5a:c4:1c:33:75:bc:7a:bb:0f:93:31:65:d6:7c:
         bb:d0:79:3b:c4:5e:29:36:7d:17:1e:d9:56:30:fd:a5:91:38:
         e2:6b:27:a9:b3:36:b1:99:e5:28:46:0a:59:67:9d:dc:7b:ae:
         9b:d8:e5:09:27:ef:ad:1a:3c:49:b0:dc:8c:ae:8b:1d:65:17:
         43:52:12:97:45:b5:f3:52:51:74:e0:85:42:59:b0:18:41:07:
         d1:66:5b:49:8b:4d:f0:07:cd:f9:52:d6:45:e7:48:65:dc:ba:
         0c:2f:d9:29:92:42:20:c2:5d:48:55:04:dc:70:4b:a6:a1:20:
         10:42:51:fa:08:7c:f6:b2:d6:19:d3:62:1c:14:a3:cb:00:12:
         73:bb:4d:2a:aa:15:68:50:79:2c:8f:f0:08:69:2b:2e:09:e5:
         52:42:4d:86:2d:9b:11:cb:f8:08:50:b5:0a:59:8c:ac:0e:09:
         6c:6b:7b:d1:35:c9:ab:43:4d:4e:b2:13:83:24:b6:9d:d1:f3:
         c5:ed:7b:24:a8:17:28:c4:e2:ef:15:71:fe:12:d1:c4:a3:22:
         22:1e:2d:21:75:c1:aa:b3:c2:b0:67:6f:42:96:7b:2c:48:ce:
         d8:c8:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:58 2026 by rpki-client