Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
File:                     E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json)
Hash identifier:          Oanmw3OdY5gWwNae8JiCXc/1hEMsijjDJz3QOUqkles=
Subject key identifier:   8A:A9:26:86:4E:9B:9F:B1:6A:21:4F:6F:24:65:70:04:B6:6A:48:50
Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
Certificate issuer:       /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Certificate serial:       1A240375B2F264D3121CD840DAD4F81D48AF6C53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
Manifest number:          01F4
Signing time:             Mon 27 Apr 2026 09:12:51 +0000
Manifest this update:     Mon 27 Apr 2026 09:07:51 +0000
Manifest next update:     Thu 30 Apr 2026 18:24:51 +0000
Files and hashes:         1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: 2uHmChhKbhyu0tEtpD1wwXz8RfjEpeOtua/sJiPRMcs=)
                          2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: B5yJ9xoVUUkBKOWIFFCAU70s3XFhUz96BtRULEmOrv0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:24:03:75:b2:f2:64:d3:12:1c:d8:40:da:d4:f8:1d:48:af:6c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
        Validity
            Not Before: Apr 27 09:07:51 2026 GMT
            Not After : Apr 30 18:24:51 2026 GMT
        Subject: CN=8AA926864E9B9FB16A214F6F24657004B66A4850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:25:9a:eb:00:5b:6f:c6:86:92:1e:28:e0:23:
                    19:13:52:1b:b7:e3:6d:54:b3:9c:ac:7e:83:78:0e:
                    63:a0:69:d5:b1:35:d1:2c:51:de:26:8e:23:75:5c:
                    44:b2:36:eb:24:25:8f:4d:9a:3a:98:c0:8c:39:65:
                    35:f5:d8:63:04:46:62:15:13:a0:da:15:0f:7e:99:
                    0c:1b:0f:07:3e:3c:9b:fb:07:79:f2:3c:ce:81:62:
                    cc:b9:82:78:ac:8b:66:38:f4:28:3d:30:bd:1a:82:
                    1f:a2:82:ad:f9:ed:af:d6:a2:eb:ef:28:5d:d2:e2:
                    17:cd:03:1d:05:21:6a:98:b0:f7:4d:1f:0e:2f:82:
                    ea:f1:c0:6e:56:d8:9c:55:ad:c2:9a:de:4d:10:84:
                    b2:06:1b:1f:65:f8:a7:d7:4e:12:3e:bc:3d:6d:b3:
                    55:a9:b7:5e:a5:84:fe:d2:a6:cc:5c:70:68:e1:bd:
                    7f:7b:df:2c:f1:c2:94:a0:02:a6:06:f8:fa:f3:52:
                    20:61:84:50:c6:54:7e:80:9e:44:f8:d8:ff:6e:c5:
                    0b:7d:18:df:b7:73:80:7e:de:b3:6f:f0:b6:09:51:
                    77:f6:54:0c:88:b6:d3:71:17:ea:33:da:a2:9c:8e:
                    17:79:05:cf:42:13:f2:03:04:c5:84:5e:2d:e8:5d:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A9:26:86:4E:9B:9F:B1:6A:21:4F:6F:24:65:70:04:B6:6A:48:50
            X509v3 Authority Key Identifier:
                keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:56:a6:d1:bc:b0:17:12:de:e6:03:5b:4b:ff:ba:e2:1c:e6:
         e3:49:47:c5:e7:05:67:74:d0:de:42:1f:0c:4c:40:60:54:10:
         97:e1:2f:1f:b5:fa:24:22:25:8b:20:aa:66:ea:6d:99:53:61:
         ba:73:ce:21:c0:a4:aa:c6:8b:4c:db:96:0b:72:a0:72:76:64:
         f3:e3:41:f7:67:39:fb:93:1b:ec:5d:10:cc:a0:f5:4d:8d:8a:
         27:97:3b:f5:8c:b6:58:25:89:88:b0:95:89:1e:ac:ee:e5:45:
         40:90:e8:37:00:82:62:95:52:c0:54:67:dd:5d:e9:ff:4d:c1:
         14:2c:84:ba:ea:a8:d3:ab:2c:89:e4:b2:9e:ef:d3:ee:1e:af:
         1c:ab:8e:a5:07:7f:c6:5b:55:69:e7:c6:6d:9a:25:77:31:5f:
         74:1c:03:42:bc:0e:05:cd:2b:76:a2:cd:82:05:81:e6:e6:84:
         5f:fe:2e:fe:bc:86:c6:f0:93:c7:43:e0:9c:54:09:78:9c:a5:
         57:b4:5b:0d:dc:7a:f5:d7:81:27:94:52:a9:f6:88:06:e8:97:
         81:79:f4:27:5b:6a:dc:fa:57:08:5d:4a:1b:7f:d1:e9:97:ac:
         40:c9:a9:92:c3:71:6c:74:de:af:ba:92:14:04:03:3b:21:68:
         4b:89:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----