Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
File:                     E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json)
Hash identifier:          OXN8+XO2x1bLA3JZjsB4BUDzutsp/7am/ha7HVK9haA=
Subject key identifier:   98:66:C6:D9:A1:3A:D9:CF:7E:18:BA:7F:43:E5:D5:C7:18:60:73:86
Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03
Certificate issuer:       /CN=E3928623409C1C10E292F838F8308E11636E6C03
Certificate serial:       60FA2AA815D932FC552FCDFC790411F7C96E0421
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
Manifest number:          0121
Signing time:             Mon 27 Apr 2026 13:42:32 +0000
Manifest this update:     Mon 27 Apr 2026 13:37:32 +0000
Manifest next update:     Thu 30 Apr 2026 14:19:32 +0000
Files and hashes:         1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=)
                          2: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: 7ojL8I9JO7TCnb3NdZCy4Wu0WAPRHBJPyT8bMmiCcXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fa:2a:a8:15:d9:32:fc:55:2f:cd:fc:79:04:11:f7:c9:6e:04:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03
        Validity
            Not Before: Apr 27 13:37:32 2026 GMT
            Not After : Apr 30 14:19:32 2026 GMT
        Subject: CN=9866C6D9A13AD9CF7E18BA7F43E5D5C718607386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:d8:83:1f:14:14:b2:7e:93:4c:5d:99:02:
                    04:e1:17:a3:76:ab:87:04:58:15:ec:cd:b8:ff:39:
                    f9:3a:a6:30:e1:c9:0e:64:a4:67:de:a4:68:de:b0:
                    7b:a8:47:ba:a8:00:d3:e0:07:6f:ff:e9:c7:da:ce:
                    a3:15:23:4e:06:37:4a:93:e5:8c:5d:4f:70:5f:04:
                    91:65:44:c4:27:fb:3a:5f:38:56:b0:ea:c5:e7:32:
                    58:8a:47:5e:85:81:89:97:08:9c:95:fe:a4:9e:e8:
                    60:95:ba:51:76:55:5c:46:b0:1c:0f:70:36:5d:f5:
                    c6:a3:be:97:b9:e9:e1:ba:7b:ec:af:de:e4:d9:9b:
                    dc:da:ac:b7:ee:6c:52:4c:47:16:55:93:9b:c7:82:
                    64:15:9b:06:e3:2a:21:99:46:ae:d0:2a:e1:a8:ec:
                    65:a3:0f:3b:85:9c:63:93:56:15:e1:0e:2b:48:9d:
                    4d:87:5e:69:19:3e:b6:25:35:ae:b9:9c:ad:1a:d0:
                    48:66:b7:0a:ab:77:70:be:75:72:f1:57:64:f5:75:
                    d3:98:11:89:d7:41:ca:ec:c4:2c:96:21:d7:e9:ab:
                    af:78:55:36:e3:92:51:f0:ae:78:3f:8e:68:8e:72:
                    df:a8:7e:ca:ad:97:3a:e4:18:a7:27:5b:da:f3:e7:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:66:C6:D9:A1:3A:D9:CF:7E:18:BA:7F:43:E5:D5:C7:18:60:73:86
            X509v3 Authority Key Identifier:
                keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:ea:7d:90:f3:21:76:ea:fe:e4:dc:a9:7a:a9:6f:22:4f:
         c9:e7:03:51:84:20:7a:2d:83:c1:cb:46:2a:c7:0b:e1:f7:71:
         d2:ab:f5:74:46:fc:2e:e2:0f:47:e2:5d:88:d1:3a:71:1a:07:
         41:81:cf:89:85:40:f9:0d:26:ca:4d:30:0b:24:00:b9:66:ba:
         61:c9:88:5a:c6:b9:6d:26:f4:7a:a4:43:1a:7c:03:2e:60:07:
         47:7a:41:35:a2:4b:03:c0:c8:99:4c:67:0a:76:6a:4a:1e:d9:
         a7:66:ec:d5:41:04:c8:e7:b8:94:27:cc:5e:bf:22:cd:5f:0a:
         bb:eb:ed:fc:38:21:2d:86:a1:ad:87:4d:9e:2d:8e:e7:e2:79:
         48:90:08:08:21:73:60:7e:eb:56:f6:7e:25:d5:d1:1d:1b:1e:
         42:4b:0a:11:e4:30:0e:35:55:12:c7:9b:fb:e5:03:03:cd:f4:
         00:37:ab:2f:52:45:ca:6b:87:30:f7:03:3a:61:10:da:4e:13:
         ee:1e:4d:f5:85:0f:f9:de:da:cb:b5:e9:f7:01:0b:10:30:03:
         03:4a:35:98:39:b0:a3:3d:0c:be:02:db:70:6b:68:13:d8:0b:
         3c:f2:f1:08:52:14:c1:a7:f8:1c:be:5f:90:af:0a:bf:61:83:
         4d:9b:3a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----