Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft
File:                     233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json)
Hash identifier:          D2DIWcDx+Hxobn1n+fja/U+U5Dtqxs6kzXc5R3MGcd4=
Subject key identifier:   00:58:F1:FF:C0:30:31:C3:FB:0F:93:6F:84:6E:ED:C0:27:95:86:A2
Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D
Certificate issuer:       /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D
Certificate serial:       39B0097EB32858BF03D03A3986F13EA4762C242B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft
Manifest number:          0570
Signing time:             Wed 29 Apr 2026 03:22:04 +0000
Manifest this update:     Wed 29 Apr 2026 03:17:04 +0000
Manifest next update:     Sat 02 May 2026 06:06:04 +0000
Files and hashes:         1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=)
                          2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: 50z0bMH0N2SoQKWppYqB8MejcYP1vymGxV+zhtibz9I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b0:09:7e:b3:28:58:bf:03:d0:3a:39:86:f1:3e:a4:76:2c:24:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D
        Validity
            Not Before: Apr 29 03:17:04 2026 GMT
            Not After : May  2 06:06:04 2026 GMT
        Subject: CN=0058F1FFC03031C3FB0F936F846EEDC0279586A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:25:a7:2a:a3:58:59:8e:b2:2f:1c:0d:c7:
                    4e:c1:cf:55:c7:83:f9:34:f0:a2:37:52:92:ce:b9:
                    37:b7:1e:58:43:18:62:0c:d8:34:6d:45:d3:00:ad:
                    e2:c5:a8:d4:81:6c:73:25:bb:66:2a:2e:1e:0c:d2:
                    2b:eb:53:d2:9c:48:ae:b3:5c:0e:d3:5d:51:ba:d9:
                    56:bf:af:27:ff:77:29:de:2d:3f:16:24:8d:44:2d:
                    17:1e:a3:d4:f9:05:86:f0:ea:fd:df:0f:64:1d:3b:
                    21:8a:32:90:e9:d8:0b:4f:53:3b:99:65:46:9b:12:
                    7a:2d:fb:98:86:16:fe:f1:27:cc:58:41:2b:61:c1:
                    e9:fd:6b:5d:74:43:c0:53:ce:07:1f:f6:18:9a:1f:
                    09:18:ac:51:e8:0c:50:a1:8c:ee:f7:42:da:40:03:
                    62:92:9c:72:9f:9b:1e:7f:93:03:53:84:a1:21:4f:
                    fd:7c:5f:fd:ca:10:75:98:47:e8:c0:47:5c:08:b1:
                    37:a8:17:36:80:9b:e9:26:81:41:1c:96:4c:af:ac:
                    45:9f:9e:b2:53:c7:af:b9:a2:09:74:de:9e:03:5d:
                    7d:8d:a6:9b:64:6e:37:39:a3:a4:fa:db:63:f9:1c:
                    1f:7f:ab:b0:c7:05:d6:52:d6:e9:66:a1:32:f4:52:
                    bb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:F1:FF:C0:30:31:C3:FB:0F:93:6F:84:6E:ED:C0:27:95:86:A2
            X509v3 Authority Key Identifier:
                keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:51:01:d4:9e:51:51:6a:0a:e3:85:02:a9:27:1d:41:57:a9:
         6b:d9:87:a8:94:4d:36:7e:6b:cc:8d:3d:3a:88:2c:97:fe:4e:
         c3:b0:68:22:a4:45:8c:3f:35:75:af:72:76:c6:27:b5:23:41:
         ce:2e:b7:4b:89:d0:00:8c:ac:e7:8d:9e:bb:3e:e2:3c:49:30:
         89:41:17:a9:37:eb:5a:1b:e9:f1:92:22:d2:a3:6e:ed:61:a8:
         a2:08:39:8c:7b:e1:1a:2d:7a:fe:71:2f:d6:4f:c2:b9:df:52:
         47:4c:be:2c:d9:21:0d:c1:3a:4a:50:f7:87:1f:32:a7:9a:d2:
         66:b7:ac:f1:15:df:3f:db:dd:a0:33:12:46:f4:bf:3b:24:55:
         db:20:38:34:cd:29:5c:63:10:08:d6:72:fe:86:02:44:85:25:
         8c:72:e4:e5:6e:bd:c6:d2:af:28:2b:6c:72:8e:8c:7f:15:63:
         74:e3:42:96:40:7d:0a:58:74:ff:47:32:49:f1:b6:0d:50:f6:
         ad:6d:51:6d:a6:a7:93:63:cb:32:fe:14:02:0a:62:9a:89:90:
         bd:28:d2:7d:ac:bb:5d:cf:2c:62:48:ef:57:ca:17:51:3c:5d:
         eb:3b:bb:4e:d3:4a:b4:59:2e:5f:a3:c4:8b:e4:91:8b:de:44:
         fa:9f:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:43:58 2026 by rpki-client