Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
File:                     C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json)
Hash identifier:          lrv5F6WMvW0WVqoyN1mBXKfZlaQaSNyHtbZE/mw5FK0=
Subject key identifier:   89:15:C8:B9:C0:0A:17:36:29:05:4D:07:06:73:E8:78:6B:CC:B5:23
Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF
Certificate issuer:       /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
Certificate serial:       24AA9D6760D97FED835818CE413BAEDF517DEFEB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
Manifest number:          0452
Signing time:             Tue 28 Apr 2026 21:42:20 +0000
Manifest this update:     Tue 28 Apr 2026 21:37:20 +0000
Manifest next update:     Sat 02 May 2026 04:20:20 +0000
Files and hashes:         1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: KEVbtECiIfajDNBVAaF0oCOXEMANkeaE944W3kw292w=)
                          2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: mHrQdAWzgukpq1uhfthGMPrahr33iPxszxBReLubhDU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:9d:67:60:d9:7f:ed:83:58:18:ce:41:3b:ae:df:51:7d:ef:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
        Validity
            Not Before: Apr 28 21:37:20 2026 GMT
            Not After : May  2 04:20:20 2026 GMT
        Subject: CN=8915C8B9C00A173629054D070673E8786BCCB523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:57:12:2c:8b:d7:82:c4:60:9e:3b:c0:d0:
                    0d:f7:e8:f6:79:ab:7c:e0:8b:3a:0c:8a:81:f9:e9:
                    17:62:08:57:fe:8b:39:fc:9e:5c:4d:65:08:2e:1b:
                    70:89:c4:f1:0a:b4:82:3b:94:e0:cb:47:ec:17:1a:
                    70:3a:d2:d1:11:5a:93:5e:22:61:f9:1f:10:5d:95:
                    b9:49:6c:29:59:c1:d1:41:a7:ef:7f:3b:55:37:fb:
                    6b:4b:7c:15:7d:ec:4f:8b:03:b5:2a:7a:bb:22:0f:
                    02:6e:e6:c3:23:e6:24:b8:33:64:40:d7:61:8d:c8:
                    58:13:f9:6a:f8:b5:2d:68:4a:9d:8a:ed:3b:5b:3f:
                    a0:12:40:22:d9:52:9b:4b:05:15:34:0b:b7:fe:ad:
                    c3:2a:d6:ad:eb:53:53:9f:af:d9:a2:a1:39:e7:c2:
                    09:3f:62:cf:99:65:82:4b:e3:85:06:0a:1f:70:8f:
                    03:f7:d1:3c:60:c2:e0:b8:1b:ac:fa:17:3e:a1:68:
                    f2:be:8b:80:8f:24:1e:1b:12:2e:24:99:61:bf:b7:
                    1c:56:c6:85:fb:13:cd:54:3a:b9:8b:7b:fb:c0:19:
                    2d:e3:d7:b2:b8:d6:84:a2:13:b5:e3:8a:cc:ec:f1:
                    ee:50:e5:d4:b1:e5:8b:f2:d9:e3:e1:c2:06:e0:54:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:15:C8:B9:C0:0A:17:36:29:05:4D:07:06:73:E8:78:6B:CC:B5:23
            X509v3 Authority Key Identifier:
                keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fc:2d:43:0b:5b:78:0c:65:57:78:90:b0:f6:65:0d:74:e6:
         ca:37:c0:a7:43:05:18:2d:b3:a3:47:8f:a2:80:0a:f2:3e:d4:
         68:34:ab:4f:67:85:b6:6d:5f:78:d5:4e:d9:8a:55:ee:bd:35:
         40:48:b8:dd:99:df:51:1f:b6:19:66:57:e1:08:70:c0:8c:a7:
         0c:55:e6:cd:00:53:a7:2b:d6:0a:95:75:1c:37:b2:f9:e0:f8:
         81:35:f7:1f:3b:c0:9c:ae:c1:4b:4d:80:aa:74:5d:27:93:88:
         4b:75:a8:45:3d:09:54:c5:89:71:c7:55:97:21:bd:e5:4d:b4:
         c6:ed:bf:7e:3b:51:9c:d8:cf:79:66:a5:a5:ca:24:d7:7b:f9:
         8e:4d:00:04:07:83:54:ec:68:6c:14:b9:a7:78:df:0c:c0:02:
         fa:cf:c4:1b:a9:c2:0b:80:b1:78:bc:be:c0:c5:ba:16:06:c3:
         ac:43:9d:d2:37:96:86:30:fa:8b:86:e1:8e:15:9c:66:9d:7f:
         a9:b6:fd:26:ae:31:00:90:d5:ee:61:15:d3:5b:77:01:f8:4f:
         06:76:5e:be:3f:dc:d2:99:4e:27:8e:78:d4:35:1f:92:7f:6b:
         03:fe:0c:64:c4:8e:45:4a:c6:51:86:0b:91:55:b6:13:36:24:
         39:2d:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:18 2026 by rpki-client