Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
File:                     1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json)
Hash identifier:          86B1J54mt+VbfFqtkNNrhonqrGq0oLBu0pbMggDSbpo=
Subject key identifier:   D9:47:7C:71:8E:B9:36:26:56:CF:0C:6D:57:DA:C8:23:F0:8B:12:E9
Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB
Certificate issuer:       /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
Certificate serial:       77E475ABD548929AE013E8EACEE8E9DBBD929760
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
Manifest number:          0319
Signing time:             Wed 29 Apr 2026 02:12:42 +0000
Manifest this update:     Wed 29 Apr 2026 02:07:42 +0000
Manifest next update:     Sat 02 May 2026 04:59:42 +0000
Files and hashes:         1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=)
                          2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: 2IKfyCkTDzCeMzIXWJ/eEMpZSGoNBx+jkfKtgY4VcjE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e4:75:ab:d5:48:92:9a:e0:13:e8:ea:ce:e8:e9:db:bd:92:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
        Validity
            Not Before: Apr 29 02:07:42 2026 GMT
            Not After : May  2 04:59:42 2026 GMT
        Subject: CN=D9477C718EB9362656CF0C6D57DAC823F08B12E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:e1:6d:b2:7e:4f:f0:8d:00:f3:c3:6b:bc:
                    5f:44:76:f6:38:b8:c7:ac:8e:2c:20:39:e4:a4:4e:
                    2b:1c:2d:08:56:a1:a8:30:7e:89:7e:aa:43:d1:a8:
                    df:d1:f0:82:0f:cf:a5:65:49:48:13:38:27:1c:c6:
                    0d:04:95:35:17:f9:7f:42:80:45:08:92:7b:85:9a:
                    7e:e9:2a:ce:dd:5b:10:2a:cb:41:03:3c:60:9a:e7:
                    2e:a7:b3:b8:d4:db:8b:08:20:59:5a:ed:f1:78:20:
                    1f:f5:b5:a5:3d:85:67:4e:8b:6e:66:6e:28:e4:fa:
                    f6:ca:9a:7e:c5:a2:1d:01:91:86:d7:6e:93:5c:ed:
                    74:30:42:01:2d:9d:3f:35:20:e9:b9:3e:af:23:9e:
                    d8:7c:23:0d:ff:04:40:a4:94:53:d0:65:17:18:53:
                    f7:8e:d0:52:c3:da:66:52:cd:7a:3e:d1:f7:2a:d6:
                    a7:24:a8:8a:03:09:b0:90:c5:26:c0:87:00:e7:b7:
                    e5:9e:14:28:59:66:51:70:33:1d:45:5e:65:a7:49:
                    17:8f:5c:bf:02:43:51:f9:6d:87:40:0e:67:17:fd:
                    54:d2:c3:3c:d0:fe:b9:85:f6:09:ff:f5:4c:fa:a1:
                    2a:d8:c6:03:67:88:7f:cb:d1:dd:74:93:9b:14:f3:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:47:7C:71:8E:B9:36:26:56:CF:0C:6D:57:DA:C8:23:F0:8B:12:E9
            X509v3 Authority Key Identifier:
                keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:15:8e:cb:15:78:0e:50:34:d9:e0:26:ba:d9:9a:ba:bb:26:
         9d:0e:46:df:b1:f0:b6:d5:2b:c5:b5:ec:c3:aa:9b:3c:3c:0c:
         75:fa:45:79:87:47:ca:73:b2:70:10:6b:81:46:53:4e:5e:cb:
         82:cf:f1:cf:32:37:80:30:93:0a:4d:1a:34:dd:fd:43:9f:7f:
         73:7e:56:08:c0:bd:c6:fa:1f:4e:4f:33:3c:64:49:2b:17:6d:
         35:56:8e:f8:65:f1:3d:d5:78:8d:ae:d5:4f:c7:f1:bf:db:38:
         33:c4:89:8a:d3:88:5a:3b:00:75:50:ca:9c:e9:19:d4:44:e7:
         68:a8:26:1a:7f:0a:28:49:8f:d2:e5:66:6c:f7:a7:91:65:00:
         37:b9:e0:73:7f:3f:e8:01:ac:8e:95:45:f4:ca:ba:35:e4:f8:
         1a:35:2b:9e:de:9e:e3:56:e6:49:60:c0:2d:9c:c1:f0:46:d1:
         bf:48:c8:0d:4b:b8:0b:8f:04:94:60:e6:10:66:36:fc:05:90:
         39:3a:a6:55:9f:06:0a:25:f1:38:ae:22:09:da:ec:95:cb:af:
         42:ce:52:59:95:6b:f5:96:15:d2:5e:25:48:d2:c3:88:58:f1:
         af:33:95:54:85:e2:85:31:aa:0e:c1:a9:87:73:eb:12:80:29:
         50:aa:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----