Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
File:                     846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json)
Hash identifier:          pbWVKnDc6nJJ+TfriKU9rVyxuQBoqyPVOHbUt+5PeMk=
Subject key identifier:   20:3E:D3:95:F4:CF:C9:54:F1:D2:65:51:25:D0:9C:46:4C:1E:17:B2
Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0
Certificate issuer:       /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
Certificate serial:       11FDB05C16BA958689BC2167BB14F858A5232261
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft
Manifest number:          03D5
Signing time:             Wed 29 Apr 2026 00:52:07 +0000
Manifest this update:     Wed 29 Apr 2026 00:47:07 +0000
Manifest next update:     Sat 02 May 2026 01:53:07 +0000
Files and hashes:         1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: g5zZxNvbbogoaAabAq/wX+M467DOad8rmGrtyNODibI=)
                          2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: aSdaPM0o498crDDrokbkojmBP4EpLJ/R7SH4SGHemZM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fd:b0:5c:16:ba:95:86:89:bc:21:67:bb:14:f8:58:a5:23:22:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0
        Validity
            Not Before: Apr 29 00:47:07 2026 GMT
            Not After : May  2 01:53:07 2026 GMT
        Subject: CN=203ED395F4CFC954F1D2655125D09C464C1E17B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:be:dc:53:76:f1:a5:d5:76:1b:e6:ff:b7:
                    d0:7a:dd:67:85:c9:4d:8f:e1:f2:0d:92:29:0c:01:
                    58:06:b0:6f:86:14:19:71:b9:ca:b5:f5:96:66:ae:
                    c6:b7:1a:48:f9:b9:ec:00:d4:8c:3f:b9:c1:e1:dd:
                    62:36:3d:a6:23:a5:f5:fd:a3:59:4f:ce:28:61:6e:
                    08:af:29:2d:07:12:57:fb:07:6d:3e:29:dd:20:08:
                    25:08:cf:9e:93:6a:82:e5:eb:a2:ae:53:9f:c1:4c:
                    3e:97:99:a6:74:7f:22:cc:bd:b3:53:86:8f:5a:1f:
                    21:fd:d4:2a:60:b7:18:76:e9:85:07:3b:f4:2c:f5:
                    a7:ba:17:f9:b8:7e:c3:59:1b:dd:b3:2b:d4:ba:e9:
                    a6:7c:c0:08:cc:f4:aa:6c:1d:01:f3:01:13:7b:97:
                    73:73:6d:da:dd:7b:08:f2:a6:fe:13:11:e0:78:86:
                    9e:9e:a4:1b:ab:05:98:da:90:eb:a3:cd:b9:3c:d0:
                    4b:48:08:e8:52:8b:74:32:bb:6a:fe:78:65:dd:3d:
                    55:59:90:fc:3c:ea:e3:86:f3:7f:9e:46:4b:bd:87:
                    83:74:6e:a7:d1:2a:cf:d3:3e:fb:22:bd:ab:0b:24:
                    a5:5c:3f:ca:73:24:78:0f:a2:9c:d3:b9:d6:59:6d:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3E:D3:95:F4:CF:C9:54:F1:D2:65:51:25:D0:9C:46:4C:1E:17:B2
            X509v3 Authority Key Identifier:
                keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e1:c2:e8:84:5b:63:1e:69:5f:72:9d:cd:00:35:9f:49:8a:
         7f:1e:3f:ce:67:56:62:d5:16:fe:47:9b:d0:f8:dd:46:a0:43:
         87:bc:ee:67:77:2c:ad:3c:1b:e1:90:a2:aa:89:a6:02:f2:3c:
         6c:ac:67:59:aa:2b:fd:3b:74:d8:ca:c1:cd:8e:9a:de:0d:6a:
         99:fb:81:9a:95:86:d6:d3:15:fb:1f:c9:f8:cc:e8:0e:c0:86:
         9d:64:07:9a:45:5f:d5:a6:c6:6f:93:16:10:51:2f:fc:fb:91:
         a1:c6:0d:68:ba:09:b0:b8:5e:d8:63:de:f3:4a:05:89:b9:4a:
         fd:ab:a0:8d:b4:12:7a:ae:64:c7:42:93:18:20:e9:62:3a:b4:
         fa:e3:d5:b7:b6:2b:35:48:21:12:f6:9f:c1:b0:0d:64:65:ad:
         b9:1a:83:87:60:f1:24:bc:50:52:1d:74:fc:3f:bf:0a:55:d6:
         b4:b1:96:41:58:95:d5:8b:55:a7:9b:94:53:22:95:7a:cc:45:
         57:b1:9e:ca:4e:92:e6:d8:52:d6:60:7f:0b:95:f5:26:73:2d:
         d0:f4:a7:40:df:48:e9:58:68:81:ed:69:5f:4e:66:a7:bb:5b:
         96:74:53:10:6f:5e:43:83:31:50:af:6b:52:85:25:87:4a:69:
         9a:8a:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:04 2026 by rpki-client