Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft
File:                     9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json)
Hash identifier:          2CkF2TmntOQc3ewinzwsh3ewlCIZCm/xjyE8n7iVXw0=
Subject key identifier:   A8:28:A0:3C:0A:C4:F7:D3:7C:4A:18:67:15:85:8A:D5:3F:1D:60:02
Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B
Certificate issuer:       /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
Certificate serial:       10DC6F260F21507C356AA4A1DE0EE7406628DC42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft
Manifest number:          04C1
Signing time:             Tue 28 Apr 2026 06:21:16 +0000
Manifest this update:     Tue 28 Apr 2026 06:16:16 +0000
Manifest next update:     Fri 01 May 2026 10:06:16 +0000
Files and hashes:         1: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: c9qexKktpywi+AB77WGuaW8QgcTnoQ9PnpGe5xh61Wk=)
                          2: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Kqdd8Wmr9jwjNlcY6AEQYUpNe2FDPNKZ6aXCyRLddjw=)
                          3: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: AVL+dQA9MipPaxVIeJbGk8qimnAmyuom1Scld/9M2rM=)
                          4: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: xjNgDeRMgF2rvQrnjQijkWjQJOO6HqOFcQsiUsDKJMg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dc:6f:26:0f:21:50:7c:35:6a:a4:a1:de:0e:e7:40:66:28:dc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B
        Validity
            Not Before: Apr 28 06:16:16 2026 GMT
            Not After : May  1 10:06:16 2026 GMT
        Subject: CN=A828A03C0AC4F7D37C4A186715858AD53F1D6002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:e4:c5:73:1f:6e:e3:9a:f0:c9:54:c3:ec:
                    35:89:dc:ae:8c:fc:73:3b:8d:b8:1e:1e:ce:f2:27:
                    62:9a:83:a6:13:22:fd:32:66:57:94:a2:ad:47:53:
                    34:32:34:81:e5:10:8c:91:b0:56:96:61:9e:31:2c:
                    76:f6:89:a3:b2:b5:93:da:3e:0e:44:7f:9a:a9:a5:
                    4a:92:eb:f6:38:9d:8a:24:9e:2d:59:66:67:14:3d:
                    6f:7b:07:06:48:b2:46:01:82:78:59:9b:07:cb:d1:
                    50:5d:d2:05:8e:3b:ad:48:71:f3:70:75:ae:b0:f0:
                    91:4c:3d:e4:45:18:11:50:e1:89:ac:99:5b:df:d7:
                    96:a4:94:98:f3:92:96:53:a5:8d:90:68:49:8f:3c:
                    ce:4b:b1:66:25:6f:fc:69:b1:4b:52:31:27:d4:a6:
                    0f:b2:90:3f:58:9a:0e:c8:40:4d:76:ba:6f:5f:54:
                    66:e3:93:a9:92:01:0a:1b:a9:38:fd:83:19:00:f0:
                    cc:56:4c:b9:95:6c:e5:51:84:37:84:65:df:a9:32:
                    83:6f:d9:83:14:ff:8c:c6:a2:2a:ea:37:af:15:0c:
                    72:99:fe:68:bc:a1:71:89:59:72:f4:ec:de:f8:4a:
                    95:eb:26:35:b9:13:b0:ab:04:cc:f3:80:c3:82:16:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:A0:3C:0A:C4:F7:D3:7C:4A:18:67:15:85:8A:D5:3F:1D:60:02
            X509v3 Authority Key Identifier:
                keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:40:8b:6c:39:97:96:05:da:a7:4f:72:e6:ce:76:9d:1e:
         d6:85:8e:ea:2b:06:43:03:c4:da:06:a7:2e:4a:71:8d:8d:18:
         6b:45:66:71:1a:7b:89:b6:86:46:e2:24:ad:7d:b1:94:00:66:
         88:b1:82:fb:12:04:5e:20:38:9d:84:9d:21:55:ce:d5:cc:e1:
         7b:22:58:b2:77:a2:e8:75:55:a5:29:90:29:14:11:76:67:6e:
         16:e5:bd:fd:02:1b:2a:33:75:8f:b3:ee:51:96:10:a7:3d:c9:
         7c:ea:63:50:ad:0a:e0:a1:f0:c5:f0:ca:51:07:e3:54:c9:f6:
         23:f4:7c:64:d7:8e:75:31:32:93:8c:95:06:76:5b:45:88:e0:
         71:5a:4c:e7:74:a0:3a:a6:be:84:88:45:d0:ea:15:81:3e:36:
         02:ed:04:9e:a0:e6:9c:40:e8:48:57:bb:c1:eb:59:0d:2a:5c:
         46:68:e3:9a:39:cd:ab:68:8d:1f:a6:f9:76:59:7a:a4:38:5f:
         7b:5a:f2:9c:10:8b:a4:e6:3b:8a:22:a2:68:09:51:07:25:b9:
         10:ce:28:0d:ef:14:fe:b2:46:13:36:25:fe:ca:dd:c9:ba:09:
         51:c5:ed:cb:aa:84:09:e0:12:86:21:db:9d:de:fd:f1:9f:7f:
         7c:78:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:43 2026 by rpki-client