Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
File:                     2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json)
Hash identifier:          uSHxSnoj1Lox6gLbgVH6+WVX5MYBCZWAjN3WgNlhn8I=
Subject key identifier:   BE:58:EA:16:BF:8F:A4:A6:55:82:E7:95:CD:2E:61:AC:BE:03:9A:74
Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC
Certificate issuer:       /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
Certificate serial:       67FE853D298EA0128E94B011AFF610C6A4AE4621
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
Manifest number:          0141
Signing time:             Tue 28 Apr 2026 22:00:47 +0000
Manifest this update:     Tue 28 Apr 2026 21:55:47 +0000
Manifest next update:     Sat 02 May 2026 03:01:47 +0000
Files and hashes:         1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: Qif7rbOClBlpqcna73BPPsp8Q+eNz30+NPatbLx9dJM=)
                          2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: oUnLaY5QLKq7msdrsSjPpVYbhTetk+RaEux8Uav3LJk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fe:85:3d:29:8e:a0:12:8e:94:b0:11:af:f6:10:c6:a4:ae:46:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
        Validity
            Not Before: Apr 28 21:55:47 2026 GMT
            Not After : May  2 03:01:47 2026 GMT
        Subject: CN=BE58EA16BF8FA4A65582E795CD2E61ACBE039A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:8d:0b:76:0c:24:45:0d:d4:52:f5:d9:2f:
                    9c:a3:04:f1:c7:d7:4c:f7:5f:c0:c7:1e:42:0e:7a:
                    7d:4c:c8:9f:b3:50:6b:00:7f:60:9a:82:fd:5b:3e:
                    74:bf:8a:97:16:76:d0:61:7f:66:bd:eb:b9:63:08:
                    59:ed:a6:88:62:ea:7d:99:01:95:99:26:c7:2d:a5:
                    61:8b:25:53:db:05:2c:6d:03:61:fe:9d:e4:a8:b3:
                    94:92:a1:55:14:5b:e3:57:d9:2f:ac:d9:f4:dd:e0:
                    10:47:52:bf:59:f3:6c:1e:cf:d5:2f:13:b9:dd:49:
                    c8:34:c6:41:7d:fa:9a:5a:1e:08:7e:bc:10:fd:90:
                    b2:be:e0:3b:21:a7:a5:9a:da:4b:3b:b6:3c:b5:82:
                    6d:ed:8e:28:a4:c3:05:62:8e:cc:da:69:82:ba:c2:
                    e0:d5:bc:69:46:b3:11:72:23:a4:b6:ce:44:42:b6:
                    89:df:28:8f:d9:0a:45:59:fb:0f:f0:66:45:aa:9b:
                    8a:44:11:76:ba:7e:62:05:14:bb:1d:87:f0:8a:74:
                    bb:7b:89:25:fe:4b:2c:6b:00:39:1e:96:65:a0:d9:
                    e7:51:a9:7b:38:6b:b9:19:5e:ef:ed:a3:bb:52:a6:
                    5d:a1:3c:fe:c1:58:85:6c:36:a7:f5:1c:9f:a2:c9:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:EA:16:BF:8F:A4:A6:55:82:E7:95:CD:2E:61:AC:BE:03:9A:74
            X509v3 Authority Key Identifier:
                keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:eb:4c:81:61:71:03:c0:32:ba:ca:e5:6e:dd:2e:b1:54:76:
         7f:66:af:47:54:71:c8:d9:45:68:12:fa:e9:5b:d9:9f:bc:0b:
         07:79:4e:77:99:2b:01:5a:be:3e:fc:f5:3d:20:58:e3:ca:c7:
         cb:95:f9:eb:55:9e:3e:06:60:f4:81:c8:c7:d5:0f:29:26:24:
         77:95:fc:02:d3:87:65:b7:34:30:3d:dd:8a:9c:34:85:71:45:
         44:43:cc:0c:fd:4b:3e:7a:1c:a0:63:a5:1d:48:e9:56:23:85:
         71:4b:f9:b4:5b:e7:29:58:4b:15:24:1b:66:b9:48:f1:51:25:
         9b:d7:d5:97:43:6b:3a:24:3f:77:fe:42:f8:d0:25:73:ce:11:
         69:08:8e:17:75:3c:2d:64:79:2a:47:c5:04:00:71:17:a9:f0:
         13:68:69:08:42:64:46:e1:3b:9b:1b:18:17:18:70:73:a3:8e:
         fd:39:fb:0d:ef:c6:08:57:e0:0a:ee:ce:d8:f8:51:9f:2c:fa:
         87:56:50:96:6c:af:6a:41:11:47:05:4c:0d:8c:5e:17:bc:dd:
         c4:89:57:06:ef:7f:44:a7:f6:e7:28:73:f8:81:9d:51:74:d3:
         7f:41:c3:ce:06:b0:1f:e7:ae:59:05:f0:fe:3a:c5:9a:49:a7:
         4f:5f:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:58 2026 by rpki-client