Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft
File:                     1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json)
Hash identifier:          KlV4ovRTBDFbzuCPbrM3+B0l3t9ec7vEQXyA2b+N2Jw=
Subject key identifier:   37:25:BB:E9:AF:D6:99:FD:46:79:8B:65:A0:C8:1F:16:BA:ED:DD:78
Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17
Certificate issuer:       /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17
Certificate serial:       335D8EB2535144C9BCA2622A3AD2FE6B5EB2A18F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft
Manifest number:          0220
Signing time:             Mon 27 Apr 2026 19:02:31 +0000
Manifest this update:     Mon 27 Apr 2026 18:57:31 +0000
Manifest next update:     Fri 01 May 2026 00:44:31 +0000
Files and hashes:         1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=)
                          2: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: 4ZFq4vf0h+zlLMjVUwOkFan12gQ72Lb04CGS7W6Z52g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5d:8e:b2:53:51:44:c9:bc:a2:62:2a:3a:d2:fe:6b:5e:b2:a1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17
        Validity
            Not Before: Apr 27 18:57:31 2026 GMT
            Not After : May  1 00:44:31 2026 GMT
        Subject: CN=3725BBE9AFD699FD46798B65A0C81F16BAEDDD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:93:b0:57:0d:16:ed:7b:94:d0:8a:83:2e:37:
                    a8:af:3d:47:a2:17:6e:02:ee:a8:42:c9:93:04:dc:
                    eb:40:e2:00:a5:a9:75:75:b9:1f:4a:b7:3d:67:1f:
                    56:53:54:b2:04:64:05:bc:a8:f9:a6:10:4a:a5:9a:
                    87:2b:a0:75:96:4c:63:f4:c2:22:b1:7b:c9:ac:02:
                    6d:95:3b:4c:41:80:35:95:2d:3b:e3:40:23:73:3f:
                    c6:0d:ed:8f:b7:1e:2a:68:ed:c9:13:6e:df:f6:bb:
                    b8:bb:95:08:41:97:7c:a8:f9:59:d3:37:66:5e:ca:
                    d6:f1:a0:b8:a8:50:69:4c:80:f6:63:89:f0:3f:22:
                    86:c4:19:82:d6:9e:d1:37:4a:b8:c4:b2:95:36:f6:
                    93:21:b1:a2:2a:be:c5:0c:01:98:7f:0f:97:ad:47:
                    95:fb:be:12:70:7c:c6:f7:d8:0c:f8:a0:9b:72:0d:
                    f0:4a:19:75:27:5e:33:32:62:f6:48:78:4a:93:a4:
                    e5:ab:4c:09:0e:7c:34:e3:08:c2:47:64:42:44:a4:
                    21:58:68:55:bf:ea:a6:52:cb:4b:86:0b:60:07:ba:
                    c9:f4:0e:b1:13:f2:c8:65:85:7d:d7:71:a3:70:1a:
                    96:f7:ce:5e:e5:f1:81:97:e1:d8:05:b2:6d:4c:b1:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:25:BB:E9:AF:D6:99:FD:46:79:8B:65:A0:C8:1F:16:BA:ED:DD:78
            X509v3 Authority Key Identifier:
                keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c3:c4:b7:10:1b:2e:dc:0a:56:4a:be:ed:b4:f7:3a:29:f0:
         8e:1a:31:2e:19:56:41:aa:c0:90:14:79:78:a4:5f:60:d4:82:
         63:bc:fc:e1:b7:08:73:7a:9f:80:35:98:c3:4f:e4:b5:eb:2e:
         bf:0c:54:35:66:6c:80:82:e7:1a:93:50:32:26:90:7e:96:37:
         e6:7b:9d:7a:97:15:e3:bd:40:4a:cb:22:72:25:9d:b0:a0:58:
         d7:e5:e8:a7:0b:12:b8:2c:ae:b0:cd:79:b1:f4:25:a4:ae:91:
         cd:e4:4b:83:49:d7:ba:49:b8:e6:70:50:a7:c9:94:29:9c:3c:
         dd:d5:12:69:d7:a4:69:e6:82:bc:d9:73:e6:d7:67:b4:b3:6b:
         5d:9c:2a:7f:40:0c:51:bb:30:74:55:68:c7:f0:99:81:f5:5a:
         55:7b:5d:da:17:8e:c9:2c:c5:35:48:0d:39:1f:16:49:ac:43:
         ca:25:1e:cb:70:56:43:10:4c:ff:e8:7b:0e:a6:65:2a:60:d0:
         4b:9d:4a:bc:10:bc:22:c9:5a:8f:15:c1:61:82:a5:91:d4:10:
         b1:24:b2:21:3b:79:68:dd:2a:be:33:ef:b9:4b:2c:0a:1b:e0:
         0f:ff:e2:98:ac:34:49:45:2f:18:f3:04:2c:7a:3b:6a:08:84:
         a6:bc:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:14 2026 by rpki-client