Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft
File:                     2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json)
Hash identifier:          2GopFP7voVNURawV+Sf6wTmkEKWPqbb2Gc9Viz7nxuM=
Subject key identifier:   02:96:1A:B8:36:E3:33:1C:F3:68:1B:3D:15:50:F5:6E:88:02:28:83
Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B
Certificate issuer:       /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B
Certificate serial:       5B647201229F41EC33459E2D605CB8B118BBA9A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft
Manifest number:          0120
Signing time:             Tue 28 Apr 2026 00:02:30 +0000
Manifest this update:     Mon 27 Apr 2026 23:57:30 +0000
Manifest next update:     Fri 01 May 2026 08:34:30 +0000
Files and hashes:         1: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: gKdqTyolaQS11e12g3angDD1p/D6XR8BV3+hOYhxSyQ=)
                          2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=)
                          3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:64:72:01:22:9f:41:ec:33:45:9e:2d:60:5c:b8:b1:18:bb:a9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B
        Validity
            Not Before: Apr 27 23:57:30 2026 GMT
            Not After : May  1 08:34:30 2026 GMT
        Subject: CN=02961AB836E3331CF3681B3D1550F56E88022883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:be:97:34:59:1b:84:5a:4b:b1:1d:4d:09:
                    bd:d0:03:0f:92:4e:51:d6:00:90:d8:9c:58:4c:c5:
                    cc:80:f1:90:b5:24:22:34:60:7b:f1:98:88:a9:e9:
                    e2:8b:c8:b1:81:50:21:ab:9f:76:2b:be:9f:84:38:
                    08:e9:11:1c:0f:81:29:b6:40:24:0b:d1:3e:5a:75:
                    dd:a0:c0:be:9b:03:29:8d:7a:ff:b4:44:a6:f0:d2:
                    36:cf:77:02:9c:69:e3:f8:e3:ea:ad:c3:15:ad:cd:
                    ef:63:30:a5:88:f5:5c:01:e6:72:f3:02:f7:03:75:
                    a8:5d:d3:62:96:55:7a:a4:42:38:15:af:f3:6e:c3:
                    dc:55:45:ab:43:5e:58:cc:ef:5c:80:2c:03:f9:2c:
                    2f:c6:73:93:b3:5e:fd:58:90:bc:39:a2:a2:08:d0:
                    ed:e5:6f:d5:b4:43:6d:07:eb:70:e8:f3:ae:6e:74:
                    da:40:a7:2d:3a:c0:cb:f3:79:79:92:44:67:71:72:
                    d8:ae:85:b8:3c:f7:0f:4a:0b:9c:d4:51:52:4b:db:
                    0b:e8:31:d4:b3:37:97:f1:77:ff:ef:13:1e:50:5c:
                    64:11:aa:fb:71:a3:ba:71:ea:4a:bb:ab:f9:36:a6:
                    78:30:15:b8:be:c5:c9:53:3d:26:76:27:d4:f6:a7:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:1A:B8:36:E3:33:1C:F3:68:1B:3D:15:50:F5:6E:88:02:28:83
            X509v3 Authority Key Identifier:
                keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:cf:a2:27:ef:38:92:00:08:f1:4c:72:5e:23:f5:91:a8:ce:
         4f:0e:eb:bc:46:97:26:d7:bf:bd:11:26:2d:77:b9:f3:b4:a0:
         f1:c5:55:15:35:73:dd:a2:57:65:d0:56:d7:6e:2f:ca:16:ed:
         9a:b9:a9:c7:f3:bb:bc:89:10:97:c4:fb:71:ce:e2:26:c8:0d:
         98:aa:8f:39:2e:fe:72:19:07:76:c9:e6:7f:f3:bd:8e:a5:f7:
         a2:7e:a1:01:48:21:bf:27:c6:87:b9:a3:f8:b5:07:23:a3:8a:
         6e:a6:0c:61:34:6e:1a:bc:9d:4f:94:4c:1c:b9:00:87:4a:d4:
         e1:5c:26:73:93:ea:9a:0e:25:31:77:6e:2b:71:98:1f:23:5c:
         b5:c9:d5:89:a9:d9:e4:18:f4:36:a4:6e:33:f4:dd:2d:79:7c:
         da:b6:59:2a:fe:77:f8:b1:85:fe:f6:ab:74:91:cf:8b:67:ee:
         de:fa:fe:3d:f4:69:22:3e:d9:3e:ea:d4:7c:f3:62:9e:ce:9f:
         8e:ac:34:25:5a:23:56:49:c8:1d:0b:e2:67:71:46:c9:3c:bd:
         27:08:61:d3:d6:1a:aa:1b:e2:32:d2:a7:1f:ac:cb:3c:02:70:
         fc:37:03:92:9c:06:6a:06:bc:ff:a2:47:e9:0d:9e:5b:b7:7c:
         84:cf:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:14:48 2026 by rpki-client