Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft
File:                     1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json)
Hash identifier:          Brn/rvL6Zh+N+H8fkktPAQc+ZkeSdxtjilY/1a9un4M=
Subject key identifier:   1E:E6:02:15:7A:73:EE:73:4D:D4:49:9B:90:A0:14:FB:C7:5D:DC:F0
Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8
Certificate issuer:       /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8
Certificate serial:       58EA786404934F7FC0A5965476F2D3FF35740788
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft
Manifest number:          EA
Signing time:             Mon 27 Apr 2026 19:02:33 +0000
Manifest this update:     Mon 27 Apr 2026 18:57:33 +0000
Manifest next update:     Fri 01 May 2026 01:18:33 +0000
Files and hashes:         1: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (hash: RD/RO/ie3tKJhpXhiY1wvpRhxWsn6xjmVmvMhdZr4lk=)
                          2: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: eyKVqxooc3TAGiXmLnd8fFBCsIdu4PICiXyXT8Mjh6M=)
                          3: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (hash: PHcAVEeTYthOcGmorVA2c1r7wtqCpaWxCrN7FWMDJio=)
                          4: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: 317I9ktXDq14ixAQFGGpCJKGDnaVkok9RX7edQR8L4U=)
                          5: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: mxAwK/MKmBpPTXvB+y7TO9Vx/LAA3W9mHnGSKrGKpTI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ea:78:64:04:93:4f:7f:c0:a5:96:54:76:f2:d3:ff:35:74:07:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8
        Validity
            Not Before: Apr 27 18:57:33 2026 GMT
            Not After : May  1 01:18:33 2026 GMT
        Subject: CN=1EE602157A73EE734DD4499B90A014FBC75DDCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:97:e6:35:e6:5e:9b:bf:32:ee:48:75:0c:
                    fc:79:33:2f:3f:f8:84:d0:81:ad:4c:d0:aa:5d:db:
                    8b:c1:8d:65:2b:6b:56:95:81:23:39:fe:20:e7:7a:
                    7c:09:b2:b4:51:2c:81:f2:db:2b:79:57:57:58:f2:
                    04:c9:97:f3:65:e2:77:ef:fb:a9:6e:fb:5f:3b:0c:
                    47:a7:4b:a2:6c:ee:34:a7:7c:5d:55:02:a3:02:7c:
                    e5:a7:7b:c1:0e:6f:61:99:02:74:45:3e:2b:11:f4:
                    58:86:a7:8b:6b:2b:a6:04:8f:83:00:3d:7e:71:8d:
                    1a:a5:43:1e:09:d0:f8:35:19:16:16:e8:5b:70:d2:
                    b0:2a:4b:1b:4f:88:33:d2:85:84:30:c0:b9:d9:71:
                    79:d9:e8:e0:96:22:72:8d:0a:38:eb:00:af:dc:d9:
                    c0:4c:a8:d0:5d:69:97:26:3c:42:43:85:db:49:18:
                    dd:b5:fb:52:e0:6c:9e:9b:43:e6:42:c5:c5:1f:da:
                    9f:d3:4a:84:4e:dd:64:f3:87:62:88:20:3c:b7:fe:
                    a8:34:4f:2c:02:92:5a:e6:c0:b9:4a:a9:6d:45:3c:
                    11:b9:a2:99:31:45:09:3b:0a:da:93:57:88:53:41:
                    d2:1a:1c:fd:7c:58:79:a2:23:3a:31:22:3f:c4:27:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E6:02:15:7A:73:EE:73:4D:D4:49:9B:90:A0:14:FB:C7:5D:DC:F0
            X509v3 Authority Key Identifier:
                keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:81:b9:bd:7c:07:9e:4e:d3:33:89:21:ee:b2:04:22:12:cb:
         d9:55:3f:47:dc:3f:6f:bc:29:ee:7a:c2:98:73:39:4f:bd:c2:
         5f:f6:78:76:9f:85:06:4d:28:7d:d8:02:ca:e0:3b:61:87:d3:
         46:39:d9:1d:4d:dd:5b:e7:38:e3:a3:07:36:fb:ac:da:fb:b9:
         70:b7:ce:58:5f:44:be:74:1c:77:f3:e1:65:92:61:4b:69:97:
         7c:0f:b9:43:6b:af:61:fb:d2:60:b7:c2:55:5d:2f:af:46:c7:
         40:a4:b8:9b:c6:77:e9:7c:92:bc:e8:da:82:51:45:fd:88:53:
         a4:be:60:18:ac:02:77:26:bd:0d:c3:c0:31:c6:12:12:97:4e:
         b7:92:f5:df:9d:16:5c:43:36:44:70:b2:3d:04:81:05:56:f5:
         0f:07:17:f8:60:d7:4f:69:3d:6f:00:ee:9c:df:b5:57:4d:d8:
         30:15:df:e5:31:d2:6e:30:a0:0f:1e:a9:de:7f:fc:16:9e:65:
         20:2a:ef:0e:97:52:05:6c:bb:cb:6b:de:fc:07:51:08:d0:d3:
         ee:b8:21:06:18:d8:18:90:d2:d5:79:0e:82:e3:6b:5a:e3:ac:
         06:ae:cd:66:f4:fa:42:cb:8b:b8:32:33:81:a5:e4:2d:e7:1a:
         98:d5:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:08 2026 by rpki-client