Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.mft
File:                     2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.mft (raw, json)
Hash identifier:          IcV+rmN/VCym8iXc/amLVZVkUb1PLhuhlzmrM73kvRU=
Subject key identifier:   06:D6:ED:D1:63:65:70:FB:12:60:5A:0D:74:0B:8E:6B:4C:52:F2:8E
Authority key identifier: 2D:8F:FF:DB:D1:AF:90:7A:3E:7B:0E:82:19:A3:73:19:BB:11:27:F7
Certificate issuer:       /CN=2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7
Certificate serial:       12C8867603A6DCB3854273312F5F86F4F479C80B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.mft
Manifest number:          1C
Signing time:             Tue 28 Apr 2026 15:51:15 +0000
Manifest this update:     Tue 28 Apr 2026 15:46:15 +0000
Manifest next update:     Fri 01 May 2026 20:48:15 +0000
Files and hashes:         1: 2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.crl (hash: EujfSJxAF5zJU7TP30ighbtqNvfAXCxCPECfawdxJ9E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c8:86:76:03:a6:dc:b3:85:42:73:31:2f:5f:86:f4:f4:79:c8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7
        Validity
            Not Before: Apr 28 15:46:15 2026 GMT
            Not After : May  1 20:48:15 2026 GMT
        Subject: CN=06D6EDD1636570FB12605A0D740B8E6B4C52F28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:a9:7d:e2:8d:76:c1:30:2e:17:4d:84:f1:
                    05:0b:bb:dd:e7:91:fe:0e:9e:5d:8d:5a:dd:d9:d3:
                    51:62:cf:4b:b9:9f:b8:c2:b8:22:56:ed:81:4e:af:
                    46:44:f4:20:e0:35:ba:3e:82:d2:53:70:88:ad:66:
                    c6:30:2f:9c:f1:f1:10:5a:98:db:9d:fe:14:be:7c:
                    3f:7d:3a:a2:36:17:95:50:32:4a:4f:ff:2d:91:2e:
                    99:fb:c7:ea:47:28:d1:42:cf:7d:04:ef:04:a3:1e:
                    61:25:3b:58:c8:62:77:e9:5d:d8:b3:e9:a7:24:f9:
                    81:36:01:2d:44:44:59:2a:c9:cc:33:a6:7f:11:47:
                    71:eb:20:cb:0b:b1:a0:9b:2f:39:3f:df:06:90:e5:
                    d8:3c:ca:8f:73:e8:f3:14:1e:ed:68:c7:24:60:a2:
                    e1:c1:c8:4a:6c:7f:5e:e4:6f:27:91:56:ea:c3:92:
                    02:ce:a2:bf:28:00:13:05:41:6e:22:85:d2:b3:b8:
                    88:8c:1a:b8:d6:c7:0e:f8:85:6c:36:18:6d:b1:03:
                    6e:16:35:2d:76:59:ae:dc:f8:82:d6:4f:8a:96:dc:
                    87:73:db:f9:5f:80:68:c1:05:12:ae:00:75:cc:65:
                    60:a1:f2:c2:b0:e3:7a:99:54:9f:58:b3:48:e2:6d:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:ED:D1:63:65:70:FB:12:60:5A:0D:74:0B:8E:6B:4C:52:F2:8E
            X509v3 Authority Key Identifier:
                keyid:2D:8F:FF:DB:D1:AF:90:7A:3E:7B:0E:82:19:A3:73:19:BB:11:27:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/2D8FFFDBD1AF907A3E7B0E8219A37319BB1127F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:57:f8:12:78:8d:16:d8:5d:a3:b4:6e:61:e4:e9:55:4f:82:
         79:47:02:20:8a:fd:d0:a4:ff:c0:94:cc:e1:76:95:d5:2c:57:
         f7:db:7d:c8:a1:97:cf:b9:c6:e2:67:d8:59:77:af:13:f1:79:
         ba:71:44:cb:ac:d6:54:03:b3:de:32:bc:a4:6f:20:a2:b9:f6:
         99:3a:31:e2:8a:d5:f2:45:42:92:ea:4c:04:20:85:b7:a6:64:
         a7:b7:b7:25:a8:43:21:52:43:7e:da:9f:e2:e4:f1:cb:f1:cc:
         f6:41:95:3a:fe:d4:96:8c:b0:1e:a9:27:32:3c:13:93:33:c0:
         8a:60:ca:49:7d:cd:5d:b5:74:c1:c9:78:82:c3:71:0e:43:c5:
         a7:5f:3a:5e:3a:fe:a3:f0:31:4c:20:16:b2:1a:3d:fc:13:9c:
         19:64:47:e5:2a:da:ea:58:01:1f:fa:15:b6:88:ea:3c:86:23:
         37:dd:c1:32:f8:fa:18:ca:19:0f:93:ed:d9:a8:53:b2:4d:13:
         97:88:95:a0:85:f7:9a:b1:fc:1a:c6:34:58:15:f0:a1:64:33:
         39:b2:c2:70:1d:1b:2a:1c:77:86:88:94:83:fb:a1:41:29:71:
         5d:56:23:76:66:c7:11:75:bf:6e:88:7a:c2:9c:c3:15:66:44:
         9b:93:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:13:23 2026 by rpki-client