Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
File:                     D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json)
Hash identifier:          CCC+rhdFZx2ka3J0afh4b4pxyvSFeAeacRk8WZNZtPg=
Subject key identifier:   8A:2F:B0:AE:A3:32:A7:B1:AE:5A:1B:DC:1A:5F:BE:6A:6D:49:56:BF
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Certificate issuer:       /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial:       6086383CCB807D73C35838B3FB4BB1233C296125
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
Manifest number:          057F
Signing time:             Wed 29 Apr 2026 00:41:34 +0000
Manifest this update:     Wed 29 Apr 2026 00:36:34 +0000
Manifest next update:     Sat 02 May 2026 06:23:34 +0000
Files and hashes:         1: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: OjdsG/TdDn+RUWERJayMK04SkHQ7zRmm5hb518X40Eo=)
                          2: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: FAtVlldec4RoFv3q2j7FVnmrtGRtRRfXUz6I4U8sRwI=)
                          3: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: lSVDZjilaP45k2Vb5JQWpzf4Bx67KvWLXMqBHy1ZoQA=)
                          4: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: lX6yK5ZXngZW7ELU3wR8WQZxB1PZNhMXdAdxnRkfpzY=)
                          5: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: TiFQ5+3RDDZw3hEMovau4FHuHmfphOknHBNZEgIPquo=)
                          6: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: ZZmhtd+kvnB+qiIIirmPZ+PBFZw13KvG2RKerxPSCqA=)
                          7: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: rMaF7Q5MH66fB43sjFU7KFf+jSsxMN2DLHihs4pTcNE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:86:38:3c:cb:80:7d:73:c3:58:38:b3:fb:4b:b1:23:3c:29:61:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
        Validity
            Not Before: Apr 29 00:36:34 2026 GMT
            Not After : May  2 06:23:34 2026 GMT
        Subject: CN=8A2FB0AEA332A7B1AE5A1BDC1A5FBE6A6D4956BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:98:fb:5f:97:4a:f1:45:1e:71:a7:e1:45:12:
                    d4:f2:6e:b1:5d:13:56:53:06:4a:3a:ee:c6:c7:a5:
                    1a:72:c7:03:28:88:6b:d8:31:95:62:84:a5:6e:55:
                    7a:44:09:2d:29:ec:c5:92:40:c7:8b:93:f7:ba:2c:
                    70:01:cd:36:fb:1d:73:ab:19:53:f0:25:fb:8f:e7:
                    1f:37:bb:5b:e8:1c:80:5a:9b:b4:0e:15:7e:1d:45:
                    4f:fb:1e:c2:f6:02:2f:b6:1d:1a:ab:cc:ba:87:c6:
                    1d:75:05:9b:57:27:b8:44:28:e1:06:ea:54:5c:9f:
                    f0:f8:ef:bb:e0:6f:b9:9b:8a:4d:30:82:fa:6a:c7:
                    51:0e:0c:80:f0:cb:04:e8:e5:16:14:ac:9f:93:9a:
                    f7:84:97:36:f5:fd:e3:af:7a:e7:ba:8e:2f:72:3b:
                    77:be:95:71:bd:55:aa:ef:28:fc:ef:10:4c:92:b4:
                    8d:6b:bd:70:55:7f:54:6a:06:dc:af:69:1c:2b:11:
                    f0:c7:3d:d6:00:ee:16:50:ae:f0:70:d3:1f:9e:0e:
                    01:90:a0:ed:11:7e:7c:ab:c3:be:5e:d7:03:85:36:
                    ae:88:6d:1c:0e:d1:cd:f9:a2:be:89:2c:d6:ba:d1:
                    cf:35:6d:2f:f6:53:bc:ad:1e:01:42:1a:43:67:36:
                    f6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:B0:AE:A3:32:A7:B1:AE:5A:1B:DC:1A:5F:BE:6A:6D:49:56:BF
            X509v3 Authority Key Identifier:
                keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:58:07:ab:b6:00:eb:f1:1a:92:1f:de:a4:07:50:f3:bd:
         78:f4:fc:30:49:4a:b2:40:7c:d4:45:df:58:c3:d1:5e:a5:25:
         e9:9d:13:89:ed:9f:f0:44:a2:c3:64:e9:15:ff:a8:c7:30:60:
         cc:f9:0a:b1:f3:ec:86:37:55:0b:4c:6c:25:9d:bf:33:3b:93:
         3c:9f:48:6c:3f:d5:42:25:71:92:db:80:67:e9:db:73:44:49:
         5b:c7:0b:c5:7a:70:00:99:e3:46:05:e1:29:a4:cb:29:ac:09:
         c8:70:0a:0b:eb:51:a0:41:2a:81:89:3d:4c:e1:4e:08:07:d8:
         a8:bc:35:46:aa:c5:2d:40:bf:97:d0:d7:3a:35:b5:91:d2:93:
         eb:ea:4d:dd:cf:e0:8b:a0:26:98:6e:57:2d:4a:8f:50:99:b7:
         32:fc:c2:0c:82:52:a2:15:70:fa:37:0f:0e:8f:71:18:2e:04:
         cc:4d:6f:6c:af:a7:fb:5a:8c:2d:4a:02:37:21:df:ee:f3:8b:
         78:b7:3a:29:5f:a3:bb:c9:9f:9d:36:14:27:a9:66:1a:b5:58:
         b0:e4:e3:49:e7:36:c1:40:b9:d4:3e:c8:64:ba:78:fd:c3:a4:
         e3:6a:91:de:07:9a:48:da:6b:5a:6a:b9:3e:8f:92:6e:f9:b4:
         c8:3a:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:19 2026 by rpki-client