Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft
File:                     DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json)
Hash identifier:          MJBEr9ebR2nV4iaErtflYdjLyDw4QoI2zU1EtPyVOdg=
Subject key identifier:   96:1B:7C:88:48:B6:7D:BD:B0:00:C6:5B:54:03:04:83:08:49:F1:6E
Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B
Certificate issuer:       /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B
Certificate serial:       21CABBACA4D136D6512432120592A836C80C10A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft
Manifest number:          0133
Signing time:             Tue 28 Apr 2026 01:22:17 +0000
Manifest this update:     Tue 28 Apr 2026 01:17:17 +0000
Manifest next update:     Fri 01 May 2026 09:33:17 +0000
Files and hashes:         1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: w5n8yiMrIgzcvo+g6YEVVLhybNNQ2MPRI0ou7f46jlg=)
                          2: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=)
                          3: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ca:bb:ac:a4:d1:36:d6:51:24:32:12:05:92:a8:36:c8:0c:10:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B
        Validity
            Not Before: Apr 28 01:17:17 2026 GMT
            Not After : May  1 09:33:17 2026 GMT
        Subject: CN=961B7C8848B67DBDB000C65B540304830849F16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d1:44:7f:cc:4b:55:e0:66:56:cd:3f:25:1a:
                    73:44:72:6d:12:50:07:33:bd:45:41:2e:f7:d8:6a:
                    7c:0c:b9:5e:88:fd:ee:aa:7e:01:c4:68:6b:e8:cc:
                    0d:29:38:50:1f:05:f0:62:30:ac:eb:34:40:8f:b1:
                    15:36:b8:6d:9b:e9:4e:af:71:b6:c3:a2:e4:ba:49:
                    d7:b5:f9:47:d9:1d:13:54:9f:4c:a5:19:17:66:d8:
                    a3:ee:a4:cb:23:cd:a2:f1:5f:8d:a0:3e:e1:f0:d1:
                    72:de:11:a8:7b:2d:06:b0:e7:ac:de:ef:65:a1:c8:
                    96:71:e0:92:2f:8a:28:f0:64:81:28:92:1a:1d:76:
                    ed:a2:7d:3d:77:bb:e5:fa:dc:23:b8:9c:0a:56:52:
                    34:e2:9c:27:ce:f3:72:c6:e2:01:80:f0:57:89:37:
                    a3:ca:bc:cc:44:8a:56:01:ad:10:52:b8:71:3f:fc:
                    42:65:46:9d:81:7c:46:59:9a:2a:4c:1e:f9:7b:84:
                    9c:4a:b7:86:c8:40:d8:39:8b:c8:9e:c4:09:5c:87:
                    7d:9d:05:2d:82:20:52:6d:86:5e:55:f1:25:53:af:
                    2b:17:60:50:6a:7e:a7:24:1b:51:c0:98:14:2d:43:
                    8b:71:3e:ab:bb:54:4d:ff:4d:28:7d:90:33:f6:11:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1B:7C:88:48:B6:7D:BD:B0:00:C6:5B:54:03:04:83:08:49:F1:6E
            X509v3 Authority Key Identifier:
                keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:57:3a:3b:64:9b:9f:d1:ca:a4:24:e2:9e:38:69:e2:a6:
         32:b4:c7:1f:85:1c:c2:34:bb:13:c8:52:fa:51:f4:9a:22:41:
         26:66:d0:53:2d:72:64:72:04:e5:55:f7:90:d8:b9:3e:a8:5d:
         c9:c1:a7:83:95:1c:b8:dd:c9:93:ff:35:d0:e0:5e:0c:13:88:
         43:62:41:65:a7:25:5b:1d:ca:49:47:9d:f1:a7:5b:97:8e:c3:
         5d:27:d6:5b:56:82:0a:45:18:ee:86:03:6f:88:d6:76:eb:a4:
         96:6f:df:6e:b9:db:1a:07:af:aa:0e:b0:12:78:ab:19:ee:e3:
         49:06:1f:8f:a3:5e:3c:61:53:ca:a0:59:53:69:2b:db:e6:95:
         76:71:eb:0b:41:df:8b:f4:c8:43:12:65:46:95:6e:75:53:e2:
         ce:b0:db:29:aa:c5:62:c3:b2:d0:07:e6:9e:22:ce:5c:2f:83:
         c6:c9:42:3f:13:12:bf:37:8f:0d:66:2e:d0:23:50:c9:71:31:
         69:eb:42:d6:f8:fa:19:87:05:a1:8f:d2:40:ec:d2:b3:e9:23:
         0d:0a:16:40:93:6e:7c:89:e0:aa:16:9c:77:47:91:98:5e:94:
         60:c0:76:77:42:69:b0:0a:50:4d:9c:73:aa:aa:b1:d0:67:c5:
         1e:74:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:05 2026 by rpki-client