Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft
File:                     84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json)
Hash identifier:          8dAS+/kNaj9VHOGwZwFflfSgnS8OA8Z13l6m/8e9pbs=
Subject key identifier:   CA:EF:4D:E5:D5:7D:B9:6A:41:75:3C:50:9C:37:D1:66:DA:C4:B9:6E
Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4
Certificate issuer:       /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4
Certificate serial:       118636D9DDF47B5FCA1A9A91B1C5625123E3706E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft
Manifest number:          0133
Signing time:             Tue 28 Apr 2026 18:12:12 +0000
Manifest this update:     Tue 28 Apr 2026 18:07:12 +0000
Manifest next update:     Fri 01 May 2026 21:36:12 +0000
Files and hashes:         1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: ahPKjnSuVwKStyd+0Ng4DuGwJh47m+wwoJIqbd+gpK4=)
                          2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: dLduW7MXdnSJllFKIvUDcjg3JCfw8pw/axVHyf0p8mw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:86:36:d9:dd:f4:7b:5f:ca:1a:9a:91:b1:c5:62:51:23:e3:70:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4
        Validity
            Not Before: Apr 28 18:07:12 2026 GMT
            Not After : May  1 21:36:12 2026 GMT
        Subject: CN=CAEF4DE5D57DB96A41753C509C37D166DAC4B96E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:cd:e5:af:10:9b:95:20:ef:89:cd:0c:bd:
                    40:1f:44:89:9f:22:2f:0b:d7:fc:68:4c:1c:98:e9:
                    21:c4:a8:ed:48:81:d4:4e:89:20:9d:23:77:e9:a2:
                    43:15:d4:4b:f4:54:28:00:36:d8:5e:36:71:c7:02:
                    d0:16:51:8b:fe:dc:e8:1d:e9:0e:ab:c9:f7:92:e5:
                    dc:de:f5:b4:1e:fe:55:53:e7:da:a6:8b:ce:35:75:
                    f5:5b:d9:45:12:ab:f8:b8:63:ea:2d:8f:c1:d5:e8:
                    03:49:15:c8:1e:a2:71:1d:22:c4:49:25:fb:7e:d1:
                    dc:46:d4:96:43:dd:fd:ce:9e:c8:34:29:df:07:6d:
                    05:68:c8:b0:e7:84:f7:be:7a:34:59:50:f8:9d:e7:
                    20:16:a2:88:21:7f:26:eb:5e:f1:65:c8:67:37:74:
                    f8:9d:c3:6b:cb:06:87:a2:a1:41:a6:40:f7:cb:6f:
                    4a:0f:e3:e7:8d:2e:b5:4e:e7:46:47:95:38:67:a7:
                    66:68:f8:3c:83:6e:25:1e:73:16:23:17:9a:3b:e3:
                    a6:1d:f6:29:b8:25:06:72:16:89:ca:47:88:21:4a:
                    d2:e7:42:63:2e:a1:92:44:8d:38:90:69:06:ba:42:
                    41:0d:34:ba:ee:dd:57:2b:4f:e2:18:c7:b5:cf:64:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:4D:E5:D5:7D:B9:6A:41:75:3C:50:9C:37:D1:66:DA:C4:B9:6E
            X509v3 Authority Key Identifier:
                keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:a1:44:24:94:46:a1:44:74:c1:0d:0b:3e:7a:f6:23:fb:
         2a:a0:38:09:8b:ee:9d:c8:68:2b:18:99:c9:96:16:8a:79:9b:
         c7:7f:ee:84:17:8e:6e:09:0b:d0:90:e5:77:37:e9:7f:47:c8:
         1a:df:b0:bc:eb:1a:b6:70:04:17:cd:45:20:57:a8:c2:51:b2:
         81:cf:db:c9:42:15:60:7d:6a:2e:1d:a7:22:fc:0c:ba:e7:a0:
         8c:a6:23:a7:92:d4:01:46:5e:41:42:d0:88:d9:61:4e:cd:40:
         95:d6:66:48:8c:83:0e:56:f1:f7:90:f4:ec:c8:8a:60:e8:61:
         41:f8:4c:28:6e:0c:38:66:de:97:cd:34:5c:ad:70:6a:32:ee:
         1b:db:bf:8e:b8:4b:a9:28:56:e1:0a:72:d1:b2:8a:8b:30:02:
         a0:7e:19:fa:a7:34:82:e5:9c:7b:ca:15:bc:4d:03:77:f7:18:
         6b:57:94:b1:9e:eb:1c:b9:ea:8d:2d:e5:44:7c:79:e6:0d:8c:
         07:0d:24:cd:b3:a8:4b:f2:aa:c2:74:18:36:a1:89:51:56:c7:
         40:93:a6:00:eb:60:b4:ca:94:15:b3:f2:12:53:5c:ca:9f:a1:
         14:54:24:d6:ff:79:34:e9:b5:7c:d7:69:a8:14:ac:e7:01:f6:
         17:4f:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:11:04 2026 by rpki-client