Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft
File:                     CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json)
Hash identifier:          70yubhB2oDEqxGta403dVLdH+ku1FS+cf1uWn84Uu0k=
Subject key identifier:   46:BA:25:78:DA:01:30:DC:53:38:8A:65:A7:35:F2:94:33:60:8F:D4
Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50
Certificate issuer:       /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
Certificate serial:       41E08D1DDD097564D8E9CD026D93A08EBC44B560
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft
Manifest number:          03F7
Signing time:             Tue 28 Apr 2026 12:33:01 +0000
Manifest this update:     Tue 28 Apr 2026 12:28:01 +0000
Manifest next update:     Fri 01 May 2026 15:24:01 +0000
Files and hashes:         1: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: p2Xq5/VYbOTwjzQywO418W+YLBKjJs6gWl03kGOWuS4=)
                          2: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: Y98xnesbLah1vvSE2+/gg5FHaQHsC/OU6tNRJaPkb94=)
                          3: 3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (hash: kVYwlcJZR8W55NmkmDJoTC0oljnilr0TMye4DCdLuLs=)
                          4: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (hash: jZK9k98AlCB7IeKPrcNsRZGYReSOBY8W5eiR7hAaCNM=)
                          5: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: G4F23K8qwxwyWwNzus2Sh8ZRaXdpmK9jowgJ/MI7Q3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e0:8d:1d:dd:09:75:64:d8:e9:cd:02:6d:93:a0:8e:bc:44:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450
        Validity
            Not Before: Apr 28 12:28:01 2026 GMT
            Not After : May  1 15:24:01 2026 GMT
        Subject: CN=46BA2578DA0130DC53388A65A735F29433608FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d9:94:b1:b2:68:76:ad:21:49:80:96:78:08:
                    c7:73:bb:c1:2a:cc:db:41:2e:c4:42:f8:27:0f:19:
                    40:84:06:3b:a9:34:39:66:77:e8:37:2e:31:64:d9:
                    b3:33:32:bd:2e:70:07:15:8d:c1:24:95:50:89:99:
                    63:e2:63:a7:9f:3d:d7:f8:cc:d9:e1:19:9f:3a:d6:
                    d0:62:a9:cb:37:87:f0:66:fd:0c:ac:fd:5d:12:e1:
                    de:18:14:81:9d:62:f8:95:63:f3:49:74:74:51:dc:
                    38:38:43:d0:6b:c7:e3:be:41:c0:c1:47:00:33:21:
                    36:ac:7a:e5:09:8c:9b:cd:2e:3c:cf:48:91:bf:0b:
                    c5:50:ca:df:1d:77:7d:db:51:84:83:95:e1:90:29:
                    56:1d:c3:da:47:e3:7f:60:b9:f1:40:18:98:90:0c:
                    71:5d:7e:8f:b6:70:e4:69:43:74:c1:d1:21:5e:98:
                    37:72:3b:8f:4b:c9:61:ca:53:23:38:ad:e5:b6:8b:
                    bf:cf:89:6d:31:6c:71:97:1f:e6:8d:28:32:55:ab:
                    10:a5:d3:17:3f:8a:ff:21:cb:ee:d0:6a:e2:71:36:
                    eb:8d:85:d0:b7:5a:2f:5c:de:db:85:eb:73:96:44:
                    90:ee:aa:68:f6:44:ac:32:a5:ed:2e:32:ce:9c:08:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:25:78:DA:01:30:DC:53:38:8A:65:A7:35:F2:94:33:60:8F:D4
            X509v3 Authority Key Identifier:
                keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:53:b0:2c:6c:cb:4c:2b:2a:7d:f9:32:cf:8c:6a:a4:37:29:
         a2:95:ba:f1:4c:e9:00:cc:a7:85:fb:4c:1f:1a:71:a3:a2:ec:
         a8:65:fa:fc:91:0e:c4:50:6a:74:62:b5:58:fe:d9:78:64:11:
         2f:99:a1:0d:5f:3f:a5:64:64:f2:53:01:b2:c8:36:72:74:12:
         45:75:5d:62:7d:ca:ee:4b:6f:29:f2:c2:0d:be:77:34:ac:a4:
         8b:c8:03:52:f4:c5:48:13:08:78:5e:81:29:23:84:2f:55:61:
         80:e3:3f:70:1f:6c:1a:a6:b4:48:c5:2d:e4:79:ba:ff:0e:ae:
         53:ee:7b:a5:9a:ba:91:72:74:22:42:ab:31:a6:36:b2:2c:4d:
         a7:85:d2:b8:2d:bb:56:30:a9:b0:52:58:ac:91:f6:5c:1b:fc:
         64:0c:b9:a7:92:da:e8:97:9e:f8:2f:12:36:29:8e:c5:83:57:
         73:c6:b3:41:6d:65:4b:82:e9:8f:c1:02:21:52:64:07:4f:27:
         ea:2d:b5:a8:8f:2a:72:ae:29:ff:2f:c1:ce:2f:1c:b8:26:01:
         a3:1d:4b:03:0b:b0:c2:58:0f:ef:43:03:fc:7c:4d:c2:b5:74:
         7c:8e:c7:4f:8b:bd:2b:b3:d6:56:42:f6:bc:e4:eb:e1:69:f5:
         d5:64:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:21 2026 by rpki-client