Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
File:                     9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json)
Hash identifier:          8TDR6nQ9PVM+SOY0JvKE2sPigDkxM0HYFG5HR9/hRxI=
Subject key identifier:   A4:AA:0F:14:DF:95:45:30:74:4A:43:F1:2A:2E:3A:D0:B4:EC:39:62
Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
Certificate issuer:       /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Certificate serial:       33A005FA189DB4C2F397747CCACCF0CB4E301CEB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
Manifest number:          0154
Signing time:             Tue 28 Apr 2026 21:52:33 +0000
Manifest this update:     Tue 28 Apr 2026 21:47:33 +0000
Manifest next update:     Fri 01 May 2026 22:18:33 +0000
Files and hashes:         1: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: n69OHXc1VH4Vs6W4ZgUCmV+iMLdpFqZKpifpbnikg7E=)
                          2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: tYgibkzzAtGjQKdmBmuyqmxYY+aFNcFxJWH78M/BK54=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a0:05:fa:18:9d:b4:c2:f3:97:74:7c:ca:cc:f0:cb:4e:30:1c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
        Validity
            Not Before: Apr 28 21:47:33 2026 GMT
            Not After : May  1 22:18:33 2026 GMT
        Subject: CN=A4AA0F14DF954530744A43F12A2E3AD0B4EC3962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:be:53:d5:b6:90:ba:64:d2:37:d1:da:cb:
                    4a:f8:28:39:b4:40:3f:d6:d4:8d:52:85:8d:76:e4:
                    e3:91:9d:4b:5c:55:3a:21:32:07:80:63:3c:ca:90:
                    48:ea:5f:2c:10:2c:0b:f8:f7:8f:6a:7a:08:0e:ff:
                    b2:7c:a5:bf:51:3e:c9:03:78:5a:44:fd:d1:be:68:
                    37:ac:3d:d3:20:ec:69:07:b9:5f:7d:53:60:fc:8d:
                    b9:8c:02:9f:ea:aa:92:ea:88:c5:ff:11:53:0a:24:
                    54:3c:e2:33:2f:ee:76:66:60:a9:df:14:cd:96:cc:
                    f3:0f:47:11:17:af:66:68:58:dd:06:a6:b8:15:0e:
                    41:bd:24:eb:88:36:14:e9:b1:de:65:53:19:ce:3d:
                    6f:9f:e0:f0:18:6f:da:96:29:55:32:0f:25:16:a9:
                    6a:7a:aa:28:a6:44:ad:6f:a1:5e:3d:e9:5e:ae:57:
                    0a:43:33:72:20:45:e5:aa:ce:85:a1:2f:b9:a3:dc:
                    21:12:a2:39:95:38:bc:b0:ce:93:0c:cc:b4:97:f8:
                    db:01:9a:cf:36:68:a2:dc:73:03:b2:e9:75:5c:f7:
                    82:48:82:2d:85:8e:da:0d:16:03:49:d9:a0:46:0a:
                    bb:18:f8:03:34:13:fd:9b:17:1a:5d:c0:9b:d8:74:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AA:0F:14:DF:95:45:30:74:4A:43:F1:2A:2E:3A:D0:B4:EC:39:62
            X509v3 Authority Key Identifier:
                keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:03:2f:ca:cd:96:64:65:30:2e:a7:e9:c1:9e:05:02:d9:
         45:47:95:ae:74:27:e7:c1:de:79:72:6c:b5:54:c4:fd:77:a5:
         5d:72:0d:e0:1b:18:11:61:96:aa:b9:fc:3e:a3:f9:13:d7:3d:
         b2:a3:c6:bb:f2:0a:88:db:b5:31:e3:44:92:a2:55:d4:08:87:
         8f:42:94:e8:f8:e7:91:45:ed:17:2f:18:66:b9:a6:19:a9:f3:
         b2:4c:81:c9:20:04:cb:c9:6a:d7:e3:97:48:8f:a4:6a:7e:e8:
         ae:fd:4f:87:11:f4:7f:4a:8c:d8:a6:75:75:79:e4:41:6c:e3:
         a5:58:e9:29:dd:fd:23:c8:a9:5c:36:ae:74:7e:0d:01:d7:b0:
         cc:8f:b3:fc:d6:ad:30:13:78:98:2a:03:cf:d9:62:37:98:cd:
         b5:ad:7f:6c:1e:10:c2:c9:00:8f:69:bb:d2:e8:41:75:3c:ad:
         6c:0c:e2:c1:3a:04:67:6c:01:a3:a0:4e:d9:06:c3:36:f1:bf:
         a0:d9:17:3b:6c:81:2d:50:a4:58:d2:83:80:fa:9d:df:19:96:
         90:04:f1:40:60:a0:ba:9e:fa:3e:73:a0:09:fe:67:d0:9b:65:
         1e:3e:db:28:48:2d:5e:7e:ec:74:e4:a5:fe:bd:e5:7e:03:02:
         42:c1:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:03 2026 by rpki-client