Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
File:                     1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json)
Hash identifier:          JKoircWlAvSAZ6tPJ8LwBNnnfnFPixrNnfBpYYEf3qA=
Subject key identifier:   C4:72:56:DB:1D:EE:90:0F:D5:07:E1:08:18:CF:88:92:63:D2:4A:73
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       4D640DD7AE3996CBD32141E226531B2F15508BE4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
Manifest number:          026C
Signing time:             Mon 27 Apr 2026 08:21:48 +0000
Manifest this update:     Mon 27 Apr 2026 08:16:48 +0000
Manifest next update:     Thu 30 Apr 2026 19:35:48 +0000
Files and hashes:         1: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: 3OBbHewWawWqfsZhQsBflUfa075kIfGtDz3DRgtjCTw=)
                          2: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: dgoYQWGc8XoioTXPbChMdivJ51xZvH2aNKeh0hKS/wU=)
                          3: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: VM1TTTBtFqXiHv5MQ1XeRw0drRLzWLiwHDKK5EhMyGk=)
                          4: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: FhNB6lvqrgsnyj+NwSVLGUciAJ8IZ9sjnpMtoRLaqRw=)
                          5: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: mPh7GdsHOCij5+t8LRe0pT3jX8ibPd0uc3fcqsjEKco=)
                          6: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: Ty7LXGWFu77417YzD9LySsWN2AIJ4KwCcp3kNzWJAIM=)
                          7: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: R+4ofBcwSyTe84XGWAH/VXGrbEs8rkXJ1xMlhzrX02U=)
                          8: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: D0b7YQ9CGnuoR/guzqV8sUGQy2lE5KoINh6LVHdhIG8=)
                          9: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: QNNmYJTNSrdS1CRBMsTuoKn+MxPJNFJ74f67kzDmJWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:64:0d:d7:ae:39:96:cb:d3:21:41:e2:26:53:1b:2f:15:50:8b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: Apr 27 08:16:48 2026 GMT
            Not After : Apr 30 19:35:48 2026 GMT
        Subject: CN=C47256DB1DEE900FD507E10818CF889263D24A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:02:29:05:74:cb:97:ae:7a:03:b3:64:09:
                    29:9b:74:00:a0:1c:19:85:d7:bf:e7:36:a5:ec:32:
                    21:c4:d0:85:d1:76:4f:01:87:99:9b:2e:f7:18:a8:
                    28:17:ec:a5:1b:f5:b9:15:7d:b3:23:41:a9:19:ef:
                    f6:0f:42:b5:6c:ce:06:47:e3:aa:8b:2f:32:84:f7:
                    01:69:c5:1d:f6:cc:94:00:88:d7:25:eb:fd:c9:3b:
                    8c:48:a8:0d:69:d7:29:72:eb:8b:ba:37:2a:59:55:
                    64:be:02:e9:6b:a1:d1:fd:bf:47:95:01:57:bd:9d:
                    56:87:c2:8d:cc:ee:68:01:b0:37:ef:9e:d6:38:cc:
                    12:9c:55:1d:0a:ab:6b:51:cc:86:7a:17:d8:3e:61:
                    d7:42:79:14:ae:95:c8:c2:7b:89:9b:12:70:c6:e4:
                    4a:0a:d1:ad:cf:bd:a6:a7:e3:a9:a0:05:52:8c:97:
                    e3:e4:ab:88:32:39:ca:e4:6e:37:25:49:20:0f:c1:
                    f1:1d:8a:43:46:79:21:9b:a4:67:23:24:9b:83:8f:
                    9f:17:0e:de:ad:86:36:5b:84:69:88:4e:09:86:c6:
                    35:00:26:8f:af:7a:a1:6b:22:02:66:3d:99:6e:12:
                    c6:68:fa:62:2f:eb:21:62:83:c0:b9:3d:1c:2f:40:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:72:56:DB:1D:EE:90:0F:D5:07:E1:08:18:CF:88:92:63:D2:4A:73
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:23:02:d1:af:f0:d7:47:20:4b:a8:0b:13:f8:f3:38:ec:8d:
         16:1d:a3:8f:f3:29:24:46:61:20:15:54:67:1f:5c:49:7a:12:
         11:f7:ce:d8:f9:b5:62:3b:ed:33:60:2b:74:a8:15:db:b0:6b:
         4e:90:51:0c:37:a6:cd:13:50:4d:e7:cd:4a:f0:99:ce:29:d7:
         cb:f2:86:5d:b1:b6:5e:91:94:06:99:88:e4:08:3e:8a:dc:82:
         5b:e9:fd:14:20:ff:d0:56:5b:a8:03:3c:a8:2e:55:48:e2:d6:
         34:59:93:0b:a1:3a:1a:6a:a7:01:56:0b:a5:51:5f:d4:56:90:
         5d:9d:4b:5d:30:59:c8:3a:90:0e:0e:a3:54:af:ba:98:fd:95:
         1e:0a:f8:fd:2b:cc:31:84:2a:45:ee:ce:67:09:da:ba:f9:99:
         3b:cf:27:6a:15:ec:48:d6:77:25:5d:70:43:95:da:8c:f5:7a:
         5e:2a:b0:ec:d1:38:d1:af:d7:46:4d:97:76:2a:29:8a:31:37:
         ee:46:50:d6:b0:0f:6d:30:9a:b5:a4:98:8e:41:cd:4f:d6:0a:
         b2:fc:55:3e:9e:23:13:0a:d3:63:54:fb:5e:af:62:a1:8c:26:
         c8:7d:d7:61:3f:45:1a:c1:48:fc:db:41:99:0d:5f:7f:08:31:
         79:cd:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:20:32 2026 by rpki-client