Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
File:                     00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json)
Hash identifier:          dQnJ2htdSrSF7XO9PawIW76quanr097GFUeb0J/bmm8=
Subject key identifier:   D9:AC:E3:0F:E5:8A:B4:65:1B:79:DE:A0:50:7E:FF:C2:1F:5E:40:C4
Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63
Certificate issuer:       /CN=00CBB314A3396508984527DC9E3F91DA2A407863
Certificate serial:       31AF302E811993C27798282B977FE3CB24545E42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
Manifest number:          01D5
Signing time:             Tue 28 Apr 2026 17:02:40 +0000
Manifest this update:     Tue 28 Apr 2026 16:57:40 +0000
Manifest next update:     Fri 01 May 2026 23:27:40 +0000
Files and hashes:         1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: zPJwoYlYVUWfKNJbenzQ4XPKJqwUvv7VGWry1rzbZSc=)
                          2: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: k/yun076PsssCGJV+dhHKFDdCdGpSvjPt5fgt4QygqI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:af:30:2e:81:19:93:c2:77:98:28:2b:97:7f:e3:cb:24:54:5e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863
        Validity
            Not Before: Apr 28 16:57:40 2026 GMT
            Not After : May  1 23:27:40 2026 GMT
        Subject: CN=D9ACE30FE58AB4651B79DEA0507EFFC21F5E40C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:b5:86:dc:b0:f4:86:d2:d6:27:02:16:b8:
                    5b:6f:f0:3c:b5:c0:93:ba:42:41:61:f2:ef:90:a0:
                    92:f3:3b:2e:05:18:a9:27:03:07:53:f0:b5:df:64:
                    86:54:68:d7:75:b4:37:11:e0:63:df:3a:cb:cc:d0:
                    41:cf:45:57:db:5a:ea:a8:6b:25:e8:03:a5:10:fd:
                    5e:ff:32:25:f5:a2:8a:14:bf:7e:d0:06:12:0b:30:
                    bb:83:17:4d:c3:a5:88:a1:be:a2:0f:a3:ca:66:83:
                    a2:6e:2b:01:ea:5e:b2:6c:21:cc:b4:c0:3d:29:23:
                    03:86:3a:e9:e1:73:cf:cb:d7:7b:80:1a:be:95:59:
                    a5:a9:c6:50:5b:0e:21:2f:6d:6c:74:56:d8:21:2a:
                    34:de:4a:34:a9:f5:f7:cd:a5:9d:be:2f:ce:ad:04:
                    b0:ab:04:52:43:41:b9:53:8a:3c:b3:f8:52:0e:f9:
                    22:d6:df:60:07:9a:14:d7:3e:c5:1f:ee:06:d9:fd:
                    cd:22:07:1f:4d:a2:e1:6f:0d:8d:72:fd:cc:6d:c0:
                    d5:b3:57:f4:75:38:b0:bc:ca:51:67:38:4b:20:d2:
                    4c:ff:b9:f8:14:a2:27:a2:6b:91:89:09:26:52:59:
                    4a:2f:cf:cc:a1:f1:a8:5d:cd:4f:c1:73:9c:8a:af:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AC:E3:0F:E5:8A:B4:65:1B:79:DE:A0:50:7E:FF:C2:1F:5E:40:C4
            X509v3 Authority Key Identifier:
                keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9f:ff:48:df:8d:ab:7f:43:b5:bb:29:0c:7b:df:c6:83:27:
         66:a0:62:3c:57:ea:7a:eb:55:6e:b0:0d:2e:ab:ef:ed:3d:80:
         a6:f5:ed:bb:2e:6a:1c:ac:96:45:1e:b7:b9:d8:76:4e:19:d3:
         f5:60:d4:18:48:0c:a5:fa:b1:3c:e0:25:78:b7:d6:85:68:6c:
         0c:9a:65:e8:41:0f:93:c4:4e:f2:bd:db:1a:a7:bd:3c:95:b9:
         32:cb:c2:c0:8a:a2:f0:b6:9c:ef:20:f9:f6:31:6b:44:d1:3f:
         00:0f:db:0e:8e:ba:3a:8a:61:3b:05:92:49:c7:5c:83:a7:25:
         6a:1f:09:65:00:ab:74:4b:3d:c0:25:1a:e3:d3:34:f1:56:b8:
         34:9e:a7:93:03:de:f9:8c:db:e9:dc:33:e9:36:69:64:59:f9:
         5e:84:86:74:f6:50:5d:bc:f3:ae:8a:bd:7c:48:13:78:c6:33:
         ec:de:58:6e:8d:ac:4b:3a:0e:37:f2:4b:e1:87:8e:44:55:f4:
         3d:4e:30:2b:f0:aa:24:47:ac:57:3a:b5:37:4e:db:ac:c1:ef:
         2d:0e:af:e1:60:89:64:b5:ab:45:7e:52:fb:1f:41:73:c5:78:
         ca:e7:c7:1a:ae:e7:e9:4c:19:b6:67:79:38:b7:81:cc:3c:f2:
         ca:95:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:31 2026 by rpki-client