Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft
File:                     D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json)
Hash identifier:          qB09imtnjGhLP+4nJ0UzrhgOLVXqe7uYaiihG9VDtRg=
Subject key identifier:   7A:CD:09:7D:D3:5B:A4:63:CE:DF:D5:51:71:70:23:44:F5:03:AD:8D
Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71
Certificate issuer:       /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271
Certificate serial:       22F75692E5805AB383ECFFF0176A062A6F4DD86D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft
Manifest number:          0380
Signing time:             Tue 28 Apr 2026 00:40:42 +0000
Manifest this update:     Tue 28 Apr 2026 00:35:42 +0000
Manifest next update:     Fri 01 May 2026 10:24:42 +0000
Files and hashes:         1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: 36C1EGLe2Hvn7Ciza9qwQll64rPGTSxo1DWHI6HlMiM=)
                          2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: ZHafjJKgXW9RsmPF8VNVEw6T28/f2O0/FZCCLymCOMc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f7:56:92:e5:80:5a:b3:83:ec:ff:f0:17:6a:06:2a:6f:4d:d8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271
        Validity
            Not Before: Apr 28 00:35:42 2026 GMT
            Not After : May  1 10:24:42 2026 GMT
        Subject: CN=7ACD097DD35BA463CEDFD55171702344F503AD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:76:9c:3f:ac:e4:4c:50:49:f5:74:92:58:
                    52:8d:e6:d0:aa:f3:a7:9b:f8:4c:ce:c6:70:d4:49:
                    a6:b7:56:2c:a3:d0:b0:1b:f0:d9:5c:1a:f5:4f:2d:
                    82:b3:e5:db:b0:35:9d:a6:f9:be:7f:0e:1c:db:6b:
                    d0:f6:ae:6a:9a:06:a3:d9:a3:d3:ee:83:13:50:99:
                    e9:5a:cd:d8:7c:85:bc:c1:19:16:6e:3c:45:26:39:
                    61:37:6a:6c:cf:62:31:44:40:dd:e4:bc:7e:9c:9c:
                    dc:ef:e9:e2:2d:50:0f:7a:c7:b2:a4:96:57:c5:37:
                    17:67:ce:e5:06:fb:c3:ec:e1:b6:52:3f:ff:9d:13:
                    94:f0:3e:a4:dd:b6:73:0e:ec:d0:dc:ac:0d:fe:a8:
                    35:35:96:0b:50:41:c8:52:54:57:bc:a8:3a:eb:fa:
                    e7:98:a6:01:87:5d:14:e2:c4:aa:21:fa:ef:93:72:
                    81:f5:f2:b1:14:57:68:ba:bf:b9:e4:7a:c0:39:b2:
                    59:7d:a0:8c:0b:a1:16:70:65:dd:37:17:c7:8a:68:
                    2c:c8:7e:fa:4c:8e:27:07:9c:ff:09:77:c7:bc:b3:
                    22:1f:d4:e3:9c:57:b5:39:fc:3c:bd:8b:fd:56:6d:
                    f5:cb:da:9f:54:1d:83:4e:52:39:52:b8:be:0a:93:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CD:09:7D:D3:5B:A4:63:CE:DF:D5:51:71:70:23:44:F5:03:AD:8D
            X509v3 Authority Key Identifier:
                keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:6c:40:ee:af:44:b2:9a:98:b5:1f:90:4d:f0:a4:f4:76:
         8a:bf:90:ae:f2:27:cf:2a:cc:f8:3a:68:7d:10:22:45:11:84:
         9d:d3:dc:0b:1f:5a:d9:7e:9f:bc:32:b6:8b:c4:ac:b8:b3:d7:
         93:9d:19:e7:92:a4:f7:13:fb:24:a2:e4:13:5e:29:69:48:05:
         a9:e1:98:6b:5d:d9:4a:f3:ee:bf:90:0c:87:ff:dc:82:6b:c1:
         e5:49:e7:d3:60:dd:3d:f6:9b:14:2e:8b:42:f4:bc:08:90:af:
         b6:4a:13:b9:3d:3a:c1:91:60:65:2f:69:8e:f6:a0:7f:ea:d8:
         9a:04:68:96:6e:05:f5:b1:eb:69:3c:d0:1d:5d:94:0d:16:9f:
         31:64:ae:41:1d:04:04:2d:57:4b:38:5f:b1:18:fd:07:64:62:
         78:a1:ba:d9:1c:57:5d:78:e8:18:86:d5:c5:5e:a9:39:aa:42:
         9e:b9:94:c3:68:be:f2:66:85:2e:1d:fe:b2:92:97:c1:b9:06:
         ce:b9:b9:a8:cf:d5:54:8c:fb:4f:89:55:25:61:ae:8d:bf:28:
         0c:99:9b:96:56:65:a2:27:fe:e7:96:63:f3:58:92:64:e2:b3:
         f9:68:17:3a:f0:8b:74:83:0b:df:88:31:0c:37:86:66:ee:9f:
         a0:db:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:08 2026 by rpki-client