Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
File:                     7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json)
Hash identifier:          2FCJ0rjefKLn2YVHz65MTeMDMFU2WR4fHlmrGNaQhqI=
Subject key identifier:   D1:2E:59:3A:EE:F2:91:7D:B8:73:2A:2A:6C:3D:1D:EC:D5:25:A3:79
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Certificate issuer:       /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial:       2AE8B85D034CA00FF3585AC799DF0E7808F2222C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
Manifest number:          0185
Signing time:             Tue 28 Apr 2026 05:51:51 +0000
Manifest this update:     Tue 28 Apr 2026 05:46:51 +0000
Manifest next update:     Fri 01 May 2026 05:54:51 +0000
Files and hashes:         1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: 5qogUtrKvBS4cdtk0h13pV39P3K55ce+ULt4DlMezIM=)
                          2: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: qQqB2dTLr4xmCPqrovkLKFh60qxbylHoj3Xk9uQwJdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e8:b8:5d:03:4c:a0:0f:f3:58:5a:c7:99:df:0e:78:08:f2:22:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
        Validity
            Not Before: Apr 28 05:46:51 2026 GMT
            Not After : May  1 05:54:51 2026 GMT
        Subject: CN=D12E593AEEF2917DB8732A2A6C3D1DECD525A379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:7b:81:b3:7a:b1:47:d8:b3:43:ee:da:20:
                    12:79:90:cc:db:91:13:27:93:30:e9:66:36:8d:d3:
                    d6:3a:27:cf:f1:fc:5b:56:c3:07:cf:d7:df:ca:49:
                    b8:e9:9b:af:a0:88:ba:66:ee:26:30:c8:51:76:ee:
                    c9:0e:84:f1:46:02:c5:c7:6e:a6:7d:f6:96:16:e2:
                    51:04:66:b7:90:6d:44:04:e0:06:12:01:74:90:c1:
                    eb:f7:a9:a5:18:28:48:8d:9d:ed:92:b2:5f:3a:9f:
                    af:0f:78:55:6c:a1:0f:8b:cb:17:2c:f3:79:f7:01:
                    7c:21:37:72:50:90:4e:3a:09:1c:76:ef:ee:27:e9:
                    fd:1c:5b:65:05:a1:38:32:47:a7:f5:00:9a:30:3a:
                    0f:70:c8:9d:25:3d:78:49:58:33:f5:a9:c2:c5:50:
                    36:43:a8:74:10:ae:32:65:66:76:c4:35:e5:be:e1:
                    20:2b:3a:17:a8:23:a4:7c:76:f2:99:75:be:fc:89:
                    34:04:5e:2e:e7:77:34:80:c2:6b:f4:19:73:78:c6:
                    e0:ed:bb:21:0d:78:d9:55:dc:e4:ae:22:fc:95:9e:
                    13:f5:ea:97:23:68:59:5a:2a:cc:b3:99:50:ff:b2:
                    71:13:1d:4f:ca:50:c7:61:fd:e6:5e:e7:a4:2a:1a:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:59:3A:EE:F2:91:7D:B8:73:2A:2A:6C:3D:1D:EC:D5:25:A3:79
            X509v3 Authority Key Identifier:
                keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:88:d1:4b:6c:61:6f:a8:83:fb:53:26:71:4d:88:e2:1a:de:
         5b:ea:cf:96:11:48:ae:7d:21:90:3c:05:bc:a0:30:99:f2:b3:
         d5:55:67:00:e8:27:60:3a:54:cd:d8:a4:5b:66:2b:10:20:26:
         08:bb:0a:aa:1f:a4:9e:9d:27:f1:18:6a:96:aa:c4:94:06:35:
         c0:e8:98:42:e4:a5:e4:a3:af:37:a2:85:5c:c0:eb:59:9e:69:
         7f:92:77:c8:41:bd:f4:71:bf:91:c3:1c:04:ed:42:9c:4a:40:
         56:66:5b:8c:16:29:84:dd:a2:d5:9a:c6:c1:7d:98:b7:7e:6f:
         df:7c:2b:c1:89:70:6a:f1:d5:18:4d:2e:61:3c:ec:cd:1a:78:
         41:90:43:ec:79:e1:30:cd:f3:8f:a9:76:61:9e:8a:55:21:b9:
         c7:b6:1f:a6:00:1b:9b:1e:80:22:46:da:5f:7d:e0:b6:2a:e4:
         37:b9:e4:0e:25:f7:d0:d0:0b:49:9a:1e:54:a0:f2:29:1c:7c:
         52:53:03:40:68:d3:5e:e6:bf:56:4b:be:32:f6:c3:e8:e5:5f:
         ed:31:5f:0d:c9:73:dc:08:82:d3:0c:3b:de:a5:95:9b:2d:15:
         e6:0c:9a:52:6a:be:8a:7f:d2:f8:76:0c:44:48:98:54:2a:eb:
         37:69:dc:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKui4XQNMoA/zWFrHmd8OeAjyIiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG
NUU0OUUxQTAeFw0yNjA0MjgwNTQ2NTFaFw0yNjA1MDEwNTU0NTFaMDMxMTAvBgNV
BAMTKEQxMkU1OTNBRUVGMjkxN0RCODczMkEyQTZDM0QxREVDRDUyNUEzNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36nuBs3qxR9izQ+7aIBJ5kMzb
kRMnkzDpZjaN09Y6J8/x/FtWwwfP19/KSbjpm6+giLpm7iYwyFF27skOhPFGAsXH
bqZ99pYW4lEEZreQbUQE4AYSAXSQwev3qaUYKEiNne2Ssl86n68PeFVsoQ+Lyxcs
83n3AXwhN3JQkE46CRx27+4n6f0cW2UFoTgyR6f1AJowOg9wyJ0lPXhJWDP1qcLF
UDZDqHQQrjJlZnbENeW+4SArOheoI6R8dvKZdb78iTQEXi7ndzSAwmv0GXN4xuDt
uyENeNlV3OSuIvyVnhP16pcjaFlaKsyzmVD/snETHU/KUMdh/eZe56QqGlvfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0S5ZOu7ykX24cyoqbD0d7NUlo3kwHwYDVR0j
BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5
MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0
OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk
M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5
MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABmI0UtsYW+og/tTJnFNiOIa3lvqz5YRSK59
IZA8BbygMJnys9VVZwDoJ2A6VM3YpFtmKxAgJgi7CqofpJ6dJ/EYapaqxJQGNcDo
mELkpeSjrzeihVzA61meaX+Sd8hBvfRxv5HDHATtQpxKQFZmW4wWKYTdotWaxsF9
mLd+b998K8GJcGrx1RhNLmE87M0aeEGQQ+x54TDN84+pdmGeilUhuce2H6YAG5se
gCJG2l994LYq5De55A4l99DQC0maHlSg8ikcfFJTA0Bo017mv1ZLvjL2w+jlX+0x
Xw3Jc9wIgtMMO96llZstFeYMmlJqvop/0vh2DERImFQq6zdp3CI=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:54 2026 by rpki-client