Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft
File:                     3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json)
Hash identifier:          L0mc8OfzED2KsLDHo6Vazg5IT0Vgv7o/nnsF9Nnezi4=
Subject key identifier:   35:ED:3B:CD:8B:E2:D7:1C:F4:C2:DE:CD:31:CC:FD:96:64:2E:12:AB
Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65
Certificate issuer:       /CN=3FFB3838E6BD431731306308CFEC299A86723365
Certificate serial:       31F41FADF27DD1FABCD592FCAFECFB5A7B2CCE9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft
Manifest number:          01FD
Signing time:             Mon 27 Apr 2026 17:51:49 +0000
Manifest this update:     Mon 27 Apr 2026 17:46:49 +0000
Manifest next update:     Thu 30 Apr 2026 23:40:49 +0000
Files and hashes:         1: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: gDJkwQ9gyZKkFYwdRFTy7wrHGMBa5YbgBo4hYHB8PGU=)
                          2: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: Fqn9pPcHWwZKysUIYt5AzoYTYKUkmk/oFAlI41zCFg0=)
                          3: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: In7/y6k0tKU1onXjk4QJUAhlh710hxTg1r3tOp5IDjs=)
                          4: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: V1qL9KpXi+aM0YLlOgcpxWGtKpt9u3OXh+uh8SzOfxo=)
                          5: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: CV24SqbvkbSixkw/z0Fm5hevRc2j9on8+yOAVNVWp6c=)
                          6: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: nXiuWST/aMKh15UhoQa2s8wyM+lU394GFthzd/iYy8E=)
                          7: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: 89uLp70du3ndPcZNl1H5Nk2O6ZHn9JMvGjuVHTSWLsE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:1f:ad:f2:7d:d1:fa:bc:d5:92:fc:af:ec:fb:5a:7b:2c:ce:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365
        Validity
            Not Before: Apr 27 17:46:49 2026 GMT
            Not After : Apr 30 23:40:49 2026 GMT
        Subject: CN=35ED3BCD8BE2D71CF4C2DECD31CCFD96642E12AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:17:c3:b6:69:a6:8d:73:d0:10:84:7e:d7:
                    a4:9e:ba:81:9b:6c:f1:55:f2:19:8c:ed:cc:6f:de:
                    40:93:c0:a6:54:8e:d9:16:a7:c3:04:e5:46:94:1c:
                    01:9a:e9:0c:40:49:3c:dc:ff:db:21:ee:1d:19:25:
                    44:70:b4:8a:41:94:69:92:6d:4a:1c:f5:e5:0f:43:
                    82:6e:06:a8:7b:f6:f8:dd:c7:b0:ae:0c:1f:48:81:
                    d5:56:a8:5c:f7:1a:3e:2d:09:7b:eb:6e:be:35:e8:
                    b9:84:dd:a0:d0:aa:af:c9:a5:d7:91:9d:6e:79:b9:
                    07:9c:49:96:0b:bf:c9:55:2b:be:51:71:b6:5b:a6:
                    1e:f9:97:db:44:48:65:34:87:a8:be:ab:8d:d8:6c:
                    92:14:d5:66:1f:49:4c:18:ce:08:53:2a:b1:51:b4:
                    b9:46:47:9b:60:9e:4c:55:96:5b:38:2d:de:10:ea:
                    16:db:7e:94:d6:56:75:44:cf:a7:aa:2a:e7:cc:8d:
                    4b:78:51:b6:ab:e2:08:c5:10:fa:86:90:b2:d5:b6:
                    bd:bf:50:4f:6b:67:24:04:e7:65:57:b9:95:8b:a6:
                    34:25:f4:0c:d1:7b:ea:ea:7f:20:f8:8f:43:b8:8b:
                    2e:2b:ac:b2:f4:c9:87:42:e8:98:92:1d:96:eb:de:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:ED:3B:CD:8B:E2:D7:1C:F4:C2:DE:CD:31:CC:FD:96:64:2E:12:AB
            X509v3 Authority Key Identifier:
                keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:83:35:1c:4a:2e:f0:63:32:f7:20:2d:27:ef:b6:7b:16:a8:
         43:fe:9e:08:a5:d3:6a:7c:e7:42:4c:6f:9f:58:43:b6:e6:2d:
         81:b1:5d:39:12:b5:84:82:02:d7:00:fc:c4:4a:3a:cd:29:d2:
         db:0a:ce:e2:0c:e2:a9:9d:67:88:7f:f6:e2:ff:a7:c8:3f:60:
         4c:49:2d:3f:6e:18:fc:10:c8:d4:d7:47:5c:16:b0:f8:18:0e:
         65:83:77:b7:79:b1:5b:48:a3:3e:b2:a6:c0:2b:4d:f7:69:97:
         84:6f:dc:cc:28:c9:bc:68:22:a3:02:34:7a:9f:99:a5:9e:50:
         eb:15:1d:af:12:9c:97:b3:88:62:1f:c1:20:c1:ec:d8:50:56:
         93:35:20:b8:40:8b:a3:bc:ea:30:6e:8b:8c:50:4f:72:fb:49:
         aa:68:fa:bd:ad:04:0c:b9:27:9e:dc:39:99:87:f0:69:dc:c2:
         2e:ff:55:51:f6:f5:23:47:9a:9a:ad:25:20:c6:74:52:f9:56:
         e6:74:3d:43:9f:ff:d6:24:e9:eb:eb:a9:ac:b7:02:a4:5e:5e:
         c9:d0:5a:b0:44:14:75:e7:a9:6b:d5:cd:d2:a8:1c:d6:bc:70:
         e8:3e:a3:f1:e3:99:c8:28:ea:e2:d7:07:38:5d:e4:19:b0:58:
         17:d2:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:11:49 2026 by rpki-client