Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
File:                     3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json)
Hash identifier:          PvZwgEyKZj52kO/Vn6/pdIp9l1CE5qiAPmkDVOFga3U=
Subject key identifier:   D9:71:2A:9B:DF:0B:3B:53:88:8F:06:1E:76:91:19:5A:9F:F3:C9:1C
Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
Certificate issuer:       /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Certificate serial:       5860821898282ECA52203579D2CCE342CD9E3041
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
Manifest number:          F3
Signing time:             Tue 28 Apr 2026 12:41:03 +0000
Manifest this update:     Tue 28 Apr 2026 12:36:03 +0000
Manifest next update:     Fri 01 May 2026 16:30:03 +0000
Files and hashes:         1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: iL5nyEuNPs2sq8yg05y+Yq+G8ELj4pm6Pyny6aF/BCQ=)
                          2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:60:82:18:98:28:2e:ca:52:20:35:79:d2:cc:e3:42:cd:9e:30:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
        Validity
            Not Before: Apr 28 12:36:03 2026 GMT
            Not After : May  1 16:30:03 2026 GMT
        Subject: CN=D9712A9BDF0B3B53888F061E7691195A9FF3C91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:08:a0:53:6f:05:cf:30:7d:a8:93:9a:bf:
                    92:92:66:f0:20:43:76:c1:1a:f8:75:23:f9:01:ce:
                    cd:b0:dd:d9:a8:c4:0e:fb:1a:11:d0:98:d0:26:4d:
                    da:21:3c:bd:b9:80:d9:44:dd:7d:66:dd:16:b8:fc:
                    97:0a:be:70:f2:49:4d:b1:c6:e3:a2:a9:90:8b:29:
                    a7:c3:8f:e4:2a:5a:1f:2e:44:60:21:8b:31:0e:61:
                    a8:f0:22:64:cd:ce:b0:e7:3b:dd:ed:c7:2a:19:9e:
                    28:f0:fe:d5:c6:84:df:98:12:78:a7:48:ee:a4:64:
                    f8:21:89:60:62:0d:ab:b7:69:04:7e:68:e1:6f:17:
                    83:42:98:aa:e6:9c:85:0d:ba:53:fd:72:99:2d:5b:
                    a5:30:71:52:b4:83:a0:4c:44:8a:b9:ac:5e:8e:b7:
                    e8:95:cf:44:d0:78:be:9d:c1:79:39:86:01:94:83:
                    35:1d:29:da:eb:92:a9:d8:14:17:f5:1d:63:dc:01:
                    dd:8f:2f:66:37:18:28:b5:9d:b1:ef:e6:f3:2d:33:
                    d6:1e:1c:2d:52:5e:40:62:0c:aa:df:b6:7c:de:02:
                    8e:b4:d8:b2:f7:e6:28:9a:0f:14:f3:49:de:41:a7:
                    5e:05:67:aa:00:e5:c2:2f:68:5f:97:bc:0f:33:17:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:71:2A:9B:DF:0B:3B:53:88:8F:06:1E:76:91:19:5A:9F:F3:C9:1C
            X509v3 Authority Key Identifier:
                keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:ef:e3:1d:76:48:23:b6:95:96:27:b7:11:1e:a3:93:e1:
         86:03:b2:e1:2e:4e:21:93:8e:09:f9:44:b4:da:a7:c5:8b:04:
         59:4d:b9:f4:74:da:d4:9e:79:da:0b:98:3a:26:34:f2:44:73:
         75:a6:98:8f:57:b4:2a:4a:b0:00:fe:14:6b:f1:e4:06:64:bb:
         31:fb:47:2f:fc:ed:70:1f:a3:e8:f2:6a:0c:c0:6b:4e:89:5e:
         3a:db:79:64:5a:32:38:9e:3e:6a:f1:87:65:ba:03:9a:4d:8e:
         ba:9c:c2:dc:5b:49:77:48:2e:f4:63:a5:be:74:eb:ed:15:11:
         4b:6c:60:dd:04:4d:07:97:3b:ac:c1:40:6c:53:91:6f:2b:b0:
         e4:7c:d4:0b:2a:0e:32:14:d2:ac:02:84:6b:35:8e:39:27:65:
         d1:46:c9:ee:d1:a2:ab:80:e3:6c:cd:59:7c:a5:80:0d:6b:c8:
         12:f7:3f:19:6d:e7:fa:38:f7:36:99:fb:4c:b4:06:77:b5:6b:
         79:e2:c6:60:19:fb:0d:f5:fd:56:e5:04:15:4e:21:b7:a3:a8:
         3e:bf:dd:ca:e8:5e:f7:ab:eb:09:4b:db:6c:53:4b:49:96:06:
         cf:13:9a:90:af:fc:45:2e:c4:35:dc:28:f9:9c:3e:11:88:e6:
         00:4a:68:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWGCCGJgoLspSIDV50szjQs2eMEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF
OUUwN0JGNDAeFw0yNjA0MjgxMjM2MDNaFw0yNjA1MDExNjMwMDNaMDMxMTAvBgNV
BAMTKEQ5NzEyQTlCREYwQjNCNTM4ODhGMDYxRTc2OTExOTVBOUZGM0M5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaUwigU28FzzB9qJOav5KSZvAg
Q3bBGvh1I/kBzs2w3dmoxA77GhHQmNAmTdohPL25gNlE3X1m3Ra4/JcKvnDySU2x
xuOiqZCLKafDj+QqWh8uRGAhizEOYajwImTNzrDnO93txyoZnijw/tXGhN+YEnin
SO6kZPghiWBiDau3aQR+aOFvF4NCmKrmnIUNulP9cpktW6UwcVK0g6BMRIq5rF6O
t+iVz0TQeL6dwXk5hgGUgzUdKdrrkqnYFBf1HWPcAd2PL2Y3GCi1nbHv5vMtM9Ye
HC1SXkBiDKrftnzeAo602LL35iiaDxTzSd5Bp14FZ6oA5cIvaF+XvA8zFylFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2XEqm98LO1OIjwYedpEZWp/zyRwwHwYDVR0j
BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy
QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw
N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy
YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5
MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJK/7+MddkgjtpWWJ7cRHqOT4YYDsuEuTiGT
jgn5RLTap8WLBFlNufR02tSeedoLmDomNPJEc3WmmI9XtCpKsAD+FGvx5AZkuzH7
Ry/87XAfo+jyagzAa06JXjrbeWRaMjiePmrxh2W6A5pNjrqcwtxbSXdILvRjpb50
6+0VEUtsYN0ETQeXO6zBQGxTkW8rsOR81AsqDjIU0qwChGs1jjknZdFGye7RoquA
42zNWXylgA1ryBL3Pxlt5/o49zaZ+0y0Bne1a3nixmAZ+w31/VblBBVOIbejqD6/
3croXver6wlL22xTS0mWBs8TmpCv/EUuxDXcKPmcPhGI5gBKaFg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:27 2026 by rpki-client