Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft
File:                     4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json)
Hash identifier:          NfMyE24EQbjtRRJwyokqgDhlSggw+2fh0guEHe5HtkM=
Subject key identifier:   25:A2:7C:5C:97:AE:79:CF:4C:1B:1C:15:2C:6F:1D:4D:1F:A7:27:2C
Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD
Certificate issuer:       /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD
Certificate serial:       03B8D11535FDFBF8F2C615D15294CA9E8FC0B61D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft
Manifest number:          0151
Signing time:             Tue 28 Apr 2026 08:54:44 +0000
Manifest this update:     Tue 28 Apr 2026 08:49:44 +0000
Manifest next update:     Fri 01 May 2026 20:28:44 +0000
Files and hashes:         1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: JE6AkPTyGfQ3hMGPMaM1yeI7GxBQtkUUy1yIKL2XW2k=)
                          2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: L5i/E5G2yR4p96EaiaxVuLqhNScyIzpSwsnYjpL8mEM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b8:d1:15:35:fd:fb:f8:f2:c6:15:d1:52:94:ca:9e:8f:c0:b6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD
        Validity
            Not Before: Apr 28 08:49:44 2026 GMT
            Not After : May  1 20:28:44 2026 GMT
        Subject: CN=25A27C5C97AE79CF4C1B1C152C6F1D4D1FA7272C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:bb:5a:00:0e:47:14:9d:6f:91:96:c2:1e:
                    67:b5:d7:c3:d7:2d:37:53:bd:29:f1:95:22:eb:bd:
                    ab:f6:56:1c:31:81:0c:4e:c9:4d:20:0e:f5:4b:ef:
                    c0:ca:61:a9:e9:2c:78:d1:7f:a6:48:d5:65:64:ce:
                    69:05:98:79:a7:a2:a7:22:67:1a:0c:67:1b:7e:35:
                    b1:04:d5:f3:f2:6c:b2:de:e2:48:50:50:77:4a:88:
                    18:e4:48:cb:ae:ee:6a:ce:0c:28:f2:e3:7e:1d:33:
                    6c:a7:ca:8e:ef:f6:ab:a4:36:85:32:25:b4:3b:a7:
                    e3:16:45:fa:ae:42:c7:04:58:f0:4e:8f:cf:ef:dd:
                    80:46:3b:b5:09:9a:a6:05:a6:8f:3d:2a:e0:15:d2:
                    96:fc:7a:bc:06:31:be:fd:37:71:33:fa:90:d9:87:
                    84:5d:0f:aa:e8:e2:19:d2:6b:ed:58:79:c1:f9:62:
                    ad:ce:b5:1f:28:9e:8d:34:4b:d2:79:7f:d8:a8:6c:
                    25:c4:9f:a7:ee:6f:f1:7a:a4:9f:55:f9:e7:6e:2d:
                    84:5b:82:a0:e7:ee:0e:f1:2e:1e:75:a0:91:22:e0:
                    b1:1b:d8:74:16:44:1a:20:b7:ac:d9:31:62:e2:d2:
                    f0:ee:b0:93:75:f6:a5:f0:79:6f:9c:fa:95:68:b4:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A2:7C:5C:97:AE:79:CF:4C:1B:1C:15:2C:6F:1D:4D:1F:A7:27:2C
            X509v3 Authority Key Identifier:
                keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0d:66:56:f3:0c:45:c6:4a:92:3e:46:cb:39:14:94:ca:09:
         b8:96:f2:35:1e:c7:0a:28:37:02:fb:00:50:34:29:85:2f:bf:
         4d:bf:eb:05:d5:3a:22:f4:c4:a0:d1:7b:1e:10:0a:5a:eb:93:
         98:48:8d:ee:03:dc:05:24:a0:01:c1:2a:df:c5:35:d6:50:87:
         f8:b0:e9:dd:91:c2:37:a5:26:53:5d:c7:db:a4:bf:06:40:67:
         52:d6:07:6a:c7:73:cf:d3:29:85:ee:58:ee:3a:a8:f4:9a:68:
         d0:41:a5:5d:44:2f:8f:84:1b:16:3a:04:91:c5:02:46:6f:12:
         55:0d:fc:a9:af:e4:54:2a:d6:85:44:40:a0:a9:7b:02:fd:06:
         1c:a7:96:37:bb:e6:97:9f:ba:93:34:91:55:20:11:5f:42:22:
         c6:29:21:c9:ab:d9:79:73:b8:4e:65:89:5e:02:81:95:33:13:
         8e:98:0c:13:e3:65:56:df:83:6e:8d:46:6d:18:54:3e:eb:f6:
         4e:eb:69:f5:1a:d1:2f:ce:64:c3:1c:cb:37:4b:1a:8d:9b:13:
         e8:2a:a7:f8:7a:db:c4:53:34:ab:14:50:9b:f7:1f:a2:82:95:
         78:7d:6f:d1:53:83:af:64:c1:21:41:aa:9a:82:c1:9c:80:74:
         64:e8:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:13:14 2026 by rpki-client