Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
File:                     31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json)
Hash identifier:          1tr4mWzdf8mhnebZImZsagJO00hdCxe/4RZohDwYTm8=
Subject key identifier:   D2:9B:DD:D7:82:00:78:60:3D:F0:29:BD:92:AB:56:F4:D0:A0:F9:6E
Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
Certificate issuer:       /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Certificate serial:       04A365FFFA2F2278DCA1B75321B5366FB0EFDBA2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
Manifest number:          FD
Signing time:             Tue 28 Apr 2026 17:51:36 +0000
Manifest this update:     Tue 28 Apr 2026 17:46:36 +0000
Manifest next update:     Fri 01 May 2026 20:56:36 +0000
Files and hashes:         1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: t6BbITbf0F86CainKRbD86IcLHXjRLl0qM2xy8Ch4pg=)
                          2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a3:65:ff:fa:2f:22:78:dc:a1:b7:53:21:b5:36:6f:b0:ef:db:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
        Validity
            Not Before: Apr 28 17:46:36 2026 GMT
            Not After : May  1 20:56:36 2026 GMT
        Subject: CN=D29BDDD7820078603DF029BD92AB56F4D0A0F96E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:f3:6e:e5:4f:22:72:20:17:67:6d:9f:27:
                    29:4e:82:01:cf:81:77:e8:5c:cd:9f:f0:62:c4:69:
                    c9:65:5a:a8:d7:64:9b:30:4f:45:86:fa:af:f0:ba:
                    26:6e:c3:df:d6:fa:d3:30:c3:db:74:e9:32:dc:30:
                    1c:9f:35:22:e0:f4:51:9d:00:39:b7:53:9e:f8:d0:
                    66:ca:7b:13:1a:0b:fe:16:15:7c:96:1b:78:8e:9f:
                    90:bc:e7:7d:4a:9a:78:33:ca:4e:11:9a:c6:11:1d:
                    ba:30:17:89:90:38:d7:ab:1a:73:22:20:ad:66:99:
                    a6:59:0c:eb:76:56:bb:8f:68:be:b2:b3:40:cb:ff:
                    b6:b6:b4:63:48:3b:24:e1:a5:6d:ce:87:5b:07:c8:
                    04:34:0e:d9:cd:fe:3c:a1:19:c7:6c:9a:21:7a:06:
                    ab:8d:46:c5:27:ad:2e:30:68:6f:ba:08:a6:53:a8:
                    54:ef:19:3d:b1:1c:1d:7a:1a:28:d5:8d:28:ea:2a:
                    84:6d:30:88:77:2c:10:46:9c:28:01:4e:91:87:f0:
                    c4:a6:e0:a9:67:96:63:40:d7:b1:df:f0:fe:98:c5:
                    c3:4d:69:49:c2:1e:11:86:91:a6:e3:22:86:5a:4a:
                    91:05:d9:17:78:27:01:3c:49:c9:dc:9c:91:af:1d:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9B:DD:D7:82:00:78:60:3D:F0:29:BD:92:AB:56:F4:D0:A0:F9:6E
            X509v3 Authority Key Identifier:
                keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2c:92:e5:31:e7:d2:f2:bf:d3:1d:9c:d2:2c:0a:5e:00:b4:
         e5:c1:a3:aa:e6:ce:b9:89:2d:bd:38:d7:59:aa:3f:9c:20:fb:
         60:e7:3c:d5:fe:53:1f:30:6a:dc:a9:ae:02:fb:8e:10:12:da:
         fd:62:bb:05:a9:4b:0c:ad:1a:43:49:30:4b:57:b5:34:3a:16:
         2e:c4:6b:94:29:5d:db:bf:52:c6:36:b7:b7:04:bc:7d:00:c0:
         c8:f5:61:38:8b:be:67:19:0b:68:c9:7a:c1:70:fa:f0:3e:a7:
         89:05:95:ec:66:dd:53:a1:d0:45:1b:19:d6:39:48:60:bd:0f:
         63:d3:62:9b:1e:4d:1b:f2:e5:15:ed:e2:fb:84:24:0d:7d:f2:
         0c:6f:2a:97:37:32:31:1a:fd:dd:e3:f4:00:a8:09:e0:9e:67:
         51:bd:fd:1e:85:0c:6e:c3:43:33:44:b7:f3:53:e1:aa:b7:8e:
         1d:00:1c:06:28:e8:a1:8c:47:11:53:7e:57:39:17:08:42:1e:
         10:fa:84:d2:d4:92:40:4c:f8:c5:1d:2f:45:4b:26:f6:b4:34:
         8b:3a:46:67:f7:1f:e8:8e:69:97:9e:50:d5:ad:33:d3:d7:4f:
         1d:22:e4:cc:e8:c3:ad:1b:8e:2d:ad:67:f2:df:c8:f3:d1:9e:
         56:6a:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:16:32 2026 by rpki-client