Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
File:                     342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json)
Hash identifier:          rGdHdHX/pWNL4zzWZpAbg9fZW3u6h92JqxrmwQAww28=
Subject key identifier:   71:AE:34:7C:93:A0:1D:76:B3:12:77:66:89:C2:AA:48:8E:ED:5E:DE
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Certificate issuer:       /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial:       2F32C9F80F872B213D155F30EA7E46D2A94C96BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
Manifest number:          028F
Signing time:             Tue 28 Apr 2026 07:21:26 +0000
Manifest this update:     Tue 28 Apr 2026 07:16:26 +0000
Manifest next update:     Fri 01 May 2026 10:46:26 +0000
Files and hashes:         1: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: BvasBM/kpfQ5GntvxmFTSK1NqGzRBF/X+5pKH5ro1ww=)
                          2: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: 9ueNsf48SUY+xtp4ywCcHlMUOqR56TvW5HOOZ8L51Fc=)
                          3: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: 9Zpz6FM8PImwP0neXcp+e+8rfrjkS4ue8zcbL2CjFhA=)
                          4: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: zMwyOvKI7PDYDvCwEdsbMlbQJxZu4rIeVzFaiSBkWrY=)
                          5: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: jI6xGCeDEKtQmkpsdZJ7euIbpOvVUQoL5bSIzmAmW1k=)
                          6: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: NJFnHAFO88iatxQ6aCSdcixd8IusfJNuQ6mV9KsCKbc=)
                          7: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: 8kry/vbTmmdldwNdv+aRUGdPu4fFxMoY89eizA4lQng=)
                          8: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: HcJjpUwylF6fFKKtCh3c6Xs1NRQQ95S2fJosZvNC27k=)
                          9: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: lTdkVkKqUtQFtMqIupmeqBJrJuJ+6grX5DR5fDrqt1U=)
                          10: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: sm8ctC1nFwJjsiux1Ovb+ZC5TPcE4dwi+eguSr14wtc=)
                          11: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: nQKjRqBVY/SNeQpmHdkLQkw036g1ne/TWLqELDyFUAc=)
                          12: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: P7Ghx0KbylwHThW9kRrkdW1jGbCoZDWXir9JxXwc5fo=)
                          13: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: e9Ml1aReigps0C8IXTds7h8kbl2BCqJjuuAxwg4eM6k=)
                          14: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: MR5apkRFfEqJsMkq5oipA9pEvq1JhLUYoPwVR2eYhw4=)
                          15: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: anxkFSSpsHLpAZ7weFwqKF8pw0dmQwyajVcV6ROmBTQ=)
                          16: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: 71O8QhOgtK5lj8OhNfzCgNN7oN79yv/kS8Fv5WlXK+A=)
                          17: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: M6El4ufXpfngPbTiEC5xFzYu2sWsxSJRNm8EHyO3TUY=)
                          18: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: sn0mLTR0/CBJgQzW7gfyPcDSVQL0O+tlFOgC+9AUi18=)
                          19: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: wV5YO+a5mccFp6U0Kyct7PNa14w9mgA9nKeiRT3umC8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:32:c9:f8:0f:87:2b:21:3d:15:5f:30:ea:7e:46:d2:a9:4c:96:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
        Validity
            Not Before: Apr 28 07:16:26 2026 GMT
            Not After : May  1 10:46:26 2026 GMT
        Subject: CN=71AE347C93A01D76B312776689C2AA488EED5EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:23:8c:32:d7:88:1c:73:3e:ea:44:8f:4c:
                    7c:48:8a:93:3d:40:00:6a:c1:00:e1:47:97:d5:c1:
                    90:6d:32:0e:b7:f7:48:74:cf:c2:b5:b8:58:fc:42:
                    dd:d8:58:77:13:ce:a8:22:6d:e9:6b:2b:3e:53:fe:
                    ca:58:d4:2f:7a:b3:4f:e6:82:db:13:4b:b3:24:3e:
                    0a:c4:4d:da:a3:90:0c:c8:39:16:4a:db:66:9c:a9:
                    9b:e5:50:de:e8:74:bd:cf:af:43:c5:8a:05:93:82:
                    38:70:dd:29:24:7e:97:24:f5:1e:ca:93:0e:fb:f7:
                    fe:2a:a6:8e:d0:a5:21:f4:27:6e:89:e2:76:a3:77:
                    a1:83:1b:6c:5a:f9:0b:cf:b7:b7:bc:40:75:71:68:
                    41:c3:48:61:5d:36:96:3e:60:48:28:1e:e4:10:d6:
                    f1:b0:32:4d:94:08:20:e3:46:b3:f8:79:69:19:10:
                    eb:bd:4c:ce:c8:49:17:5e:e2:1f:58:6e:2f:7f:57:
                    41:9a:e5:06:9b:9c:c4:2a:43:eb:b3:6e:a7:49:7f:
                    35:f8:4b:79:71:50:83:d9:e4:77:6a:92:34:1e:3c:
                    c3:a1:08:98:8e:3b:75:23:f8:b8:dc:44:3a:ea:64:
                    f4:2a:26:78:43:57:b6:53:24:fe:0b:3b:c8:0a:20:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:34:7C:93:A0:1D:76:B3:12:77:66:89:C2:AA:48:8E:ED:5E:DE
            X509v3 Authority Key Identifier:
                keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:d0:2a:db:e4:0f:d3:95:55:95:0c:e6:5b:02:72:f7:9c:
         19:64:71:bd:d2:90:5c:6e:80:27:03:13:69:5d:0b:f5:e6:24:
         b1:7e:05:b2:de:70:34:97:33:52:5a:a2:4a:7b:32:15:0e:9a:
         4f:55:3a:09:e2:a6:7a:db:72:c1:ec:8e:dc:0f:d4:05:89:eb:
         40:cc:1f:93:32:9c:8f:23:e2:b7:4a:30:85:62:71:aa:73:a5:
         d9:74:3f:1d:ad:fe:a7:03:80:31:54:7d:7b:2d:8f:11:a1:99:
         3e:4d:04:cd:9b:ee:60:c5:78:7a:84:28:bf:9b:03:88:10:b6:
         95:ae:fb:aa:35:7c:88:4e:90:ba:74:88:52:42:a2:ed:1d:ff:
         ce:b7:62:11:6c:79:f2:55:93:88:0b:32:9d:90:d6:a4:dd:2c:
         64:da:b8:2d:eb:4f:70:60:f1:84:bd:f5:ee:bf:bd:96:58:f1:
         c9:54:ee:af:b3:48:6c:77:93:88:f5:75:8f:e8:85:7f:f1:00:
         d2:e3:6b:56:67:a3:48:cf:b8:d3:a8:cd:8b:4c:17:e4:ce:62:
         8c:a4:28:2a:9d:f6:f0:7c:4e:f8:1f:a2:7b:b7:00:7c:2c:44:
         eb:8d:fb:77:45:7a:96:f0:8a:f0:44:14:75:d5:0f:b8:8c:20:
         c5:38:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:59:05 2026 by rpki-client