Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
File:                     EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json)
Hash identifier:          Tgvkroeax+kuUJeGOATuy+ZCwur1Xe/PgmYEbjql61I=
Subject key identifier:   AF:08:6D:6B:20:06:95:93:B3:74:63:AA:18:FD:3D:8F:F6:7B:DB:6D
Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68
Certificate issuer:       /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
Certificate serial:       78A573266EF2C7A53FDC76BE40FCC9661FE2A8A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
Manifest number:          023B
Signing time:             Mon 27 Apr 2026 07:00:55 +0000
Manifest this update:     Mon 27 Apr 2026 06:55:55 +0000
Manifest next update:     Thu 30 Apr 2026 12:12:55 +0000
Files and hashes:         1: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: arzaWAHnF7dnx2aMLlbsSZQxjA2OYzYrX41ME3F0awY=)
                          2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=)
                          3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=)
                          4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:73:26:6e:f2:c7:a5:3f:dc:76:be:40:fc:c9:66:1f:e2:a8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
        Validity
            Not Before: Apr 27 06:55:55 2026 GMT
            Not After : Apr 30 12:12:55 2026 GMT
        Subject: CN=AF086D6B20069593B37463AA18FD3D8FF67BDB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:53:e3:82:3e:37:00:a8:55:f6:46:5a:7e:
                    f4:dc:4b:5d:01:47:18:33:80:61:98:c6:0f:74:c5:
                    81:e6:b4:78:04:df:32:e3:99:23:fa:5e:d2:69:81:
                    94:67:44:82:0e:07:df:c9:17:90:96:0a:3d:62:4b:
                    1b:1c:2e:02:ec:c6:e7:67:f0:d9:89:fd:8b:0d:d9:
                    0b:df:9e:e8:f0:d1:e9:45:94:34:e7:6f:8a:a9:b5:
                    13:b7:33:ca:ef:4f:bf:08:ad:e1:01:4b:08:d7:f8:
                    40:f6:cf:24:fa:50:67:d8:1a:9e:fa:e7:41:db:8e:
                    bd:2b:d5:69:b0:11:e0:e2:b2:2e:75:0f:57:2d:38:
                    f1:50:db:34:f8:15:c1:a8:fc:42:28:7d:5c:23:27:
                    4a:25:4e:3d:9d:34:8d:cb:9b:ce:bd:25:c6:eb:7c:
                    49:74:12:89:52:fb:cc:81:76:bb:bd:5f:9a:88:0c:
                    8b:9a:34:17:2b:5d:8a:52:ec:10:d9:d5:fa:22:57:
                    9a:00:82:0f:56:4b:e7:e5:1a:cb:f0:3d:9b:b8:6a:
                    5e:36:f0:d0:0e:8b:66:4a:eb:1e:6f:8c:79:c9:1e:
                    6b:c0:1e:cc:a5:ff:79:e6:d8:1a:9f:fd:4a:42:4a:
                    75:49:21:c8:09:df:a9:8a:36:71:06:5e:19:75:bf:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:08:6D:6B:20:06:95:93:B3:74:63:AA:18:FD:3D:8F:F6:7B:DB:6D
            X509v3 Authority Key Identifier:
                keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a9:b0:86:c3:09:cb:87:56:66:43:43:a7:4e:2a:47:81:23:
         2c:e0:a9:b8:c2:b4:b8:19:df:86:05:d0:cb:ae:14:f7:2e:ff:
         f9:9c:e5:16:04:ad:be:07:11:f0:0c:b6:04:9f:a7:3a:19:e4:
         41:04:c3:59:4a:c6:1b:a7:84:87:ef:57:42:ed:c7:06:57:1c:
         07:2c:bd:34:20:04:35:6a:8c:a4:f3:33:8b:74:a0:50:64:bc:
         d8:81:23:fe:4e:43:14:79:2e:43:83:b7:92:f1:f7:79:94:6e:
         33:b7:bf:9d:68:5c:70:a5:4f:78:ae:37:cf:bc:93:8f:e0:a2:
         a7:70:61:2a:08:34:76:bd:fc:1e:c7:05:86:fc:ea:b7:c2:57:
         1f:cf:e4:af:96:4b:d5:8c:d2:b1:e6:fd:5e:ce:ce:21:00:a2:
         e0:4a:2a:92:8a:d2:6b:6a:93:e2:65:44:a1:53:7a:91:e8:48:
         53:ac:6e:07:ba:d7:c3:06:58:fb:68:6b:2f:30:1b:61:27:f6:
         af:09:25:63:10:80:c1:dd:e7:69:ab:06:e3:f4:5a:5a:0b:da:
         85:f4:d5:06:fd:0a:ba:0f:f1:f3:45:21:08:d1:89:ea:0f:27:
         e8:57:d8:0d:96:87:df:fc:2b:f2:e7:7f:a5:77:54:eb:5a:87:
         1e:3a:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:29 2026 by rpki-client