Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
File:                     BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json)
Hash identifier:          QGeOJiVEdWLxsMO258ELs2AzYtTuECiKsLrV+XmCOaI=
Subject key identifier:   3E:2E:85:F6:64:70:AF:D9:C0:0D:7C:E8:A3:C3:25:27:C0:11:5A:27
Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37
Certificate issuer:       /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
Certificate serial:       67D4CD4BBFD5103D2E181DC74BBFD2A631B23226
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft
Manifest number:          0577
Signing time:             Wed 29 Apr 2026 09:51:36 +0000
Manifest this update:     Wed 29 Apr 2026 09:46:36 +0000
Manifest next update:     Sat 02 May 2026 16:09:36 +0000
Files and hashes:         1: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: ifILYerUDcpRe223pMC/3xtPqhg84IovzTQC0ym+UNg=)
                          2: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: gB/Q187la6gm8qsp2Yv6/zuENtxXbTAl8b+QHinNe0w=)
                          3: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: IzocfQbAm6re271rkdggFPq3VGCEGAEeE3AdaJEm7ps=)
                          4: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: mGCWO7sWv6KbfFwFhaUqHJpml7zSpNNF/eE8v7Zvwzc=)
                          5: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: JGFlFhH6nweNzgQ11TLkyB/qqq3QQSYaNP8bQViVV64=)
                          6: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: 2/e1df75ZuB0mlztIUau/nvIcUBCoLK27iXCpZBorYA=)
                          7: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (hash: 9n83xrlqClU8EreC5b0A1VtR+6Td1JPgQy3YDNhy7m8=)
                          8: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: lE9s+BoEY5gwrvlaGT630nudod/SJ6QnowFtOuZG/F8=)
                          9: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: T+xAmOcrpikrQh6BNR+E6JFDb4uNhHPoQy2Ve9WHYks=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d4:cd:4b:bf:d5:10:3d:2e:18:1d:c7:4b:bf:d2:a6:31:b2:32:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337
        Validity
            Not Before: Apr 29 09:46:36 2026 GMT
            Not After : May  2 16:09:36 2026 GMT
        Subject: CN=3E2E85F66470AFD9C00D7CE8A3C32527C0115A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:ed:15:f3:6d:16:83:59:41:5e:37:83:a5:
                    b3:a9:26:ff:9c:c9:dd:1c:89:cd:05:84:ed:2a:e9:
                    66:da:9f:6a:36:6b:65:7b:bc:a6:c3:d5:ad:32:87:
                    08:df:5e:6f:3e:9f:0d:34:47:0f:42:15:33:e1:21:
                    3e:9b:0a:77:a5:f2:46:90:45:a4:70:ba:ac:c8:bd:
                    1b:6c:6e:c3:b1:5c:21:d3:83:a1:4f:4b:e6:a7:4c:
                    64:b1:5f:ff:9a:7c:8f:a4:42:08:31:80:fe:07:85:
                    93:15:94:13:80:15:9a:f8:49:19:80:d1:ca:72:6d:
                    05:0c:88:58:61:e2:1a:95:97:e3:2b:e7:ba:35:f4:
                    43:08:6d:3c:c8:e0:1e:97:be:65:72:3a:a2:be:db:
                    8f:a1:fd:cc:48:0b:d6:34:49:46:61:64:86:b5:b1:
                    5a:8b:c8:a0:73:71:5b:40:c7:1f:31:ac:76:e0:a0:
                    9a:aa:c2:b1:81:ce:4f:92:40:a9:eb:cc:71:dc:5c:
                    ee:27:34:fa:c1:08:b9:97:a9:52:40:c6:3e:40:00:
                    c3:74:ed:39:29:a3:3b:b4:3f:18:7f:24:05:4b:ba:
                    14:36:83:76:a7:2e:12:af:2d:88:e2:81:fc:d5:f4:
                    c4:0e:d5:63:80:08:70:2a:82:b8:17:ff:43:4e:ca:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2E:85:F6:64:70:AF:D9:C0:0D:7C:E8:A3:C3:25:27:C0:11:5A:27
            X509v3 Authority Key Identifier:
                keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:47:ea:33:10:3b:40:e5:6a:02:bd:9f:88:8e:4c:12:ab:
         86:d8:95:0a:92:65:f6:5a:99:9a:b5:84:76:b0:15:23:6f:41:
         7e:b6:81:36:d0:f8:5b:83:f1:b2:8c:57:82:97:21:f5:b5:59:
         73:e0:91:d8:05:f4:df:1c:11:1d:f7:b3:76:94:c7:b4:60:76:
         1a:ce:c7:a8:47:5a:89:5e:4a:0f:cc:8b:56:0e:7b:f0:2f:37:
         4f:15:a5:01:fa:eb:63:53:1a:96:b6:02:70:ae:f8:4b:59:b5:
         b8:fc:cb:e0:5d:25:f6:56:c7:6b:c3:ed:4f:14:10:cd:b1:2f:
         7a:ce:2b:d6:11:15:eb:8f:4b:c4:d2:da:70:7e:bd:88:c7:79:
         2b:d3:70:d6:39:6c:5f:c9:e4:f9:df:42:cd:34:99:73:a0:28:
         6c:1e:f5:97:ba:d5:5e:e2:02:9b:db:1f:cb:e2:b3:c7:d7:db:
         4c:4d:b7:8e:41:91:97:ae:c1:cd:b7:23:5f:e2:cd:d0:65:4b:
         77:fe:e5:b5:b6:75:5d:e0:cd:ad:af:d2:f6:b7:ca:b4:d5:83:
         6c:25:38:27:c7:c2:08:18:7a:03:ed:a0:e5:71:ec:0f:e8:25:
         b6:c7:31:b0:4b:f1:3b:15:df:1e:28:24:a2:a3:05:ad:9a:66:
         6f:69:4d:53
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ9TNS7/VED0uGB3HS7/SpjGyMiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUy
MDdGQTMzNzAeFw0yNjA0MjkwOTQ2MzZaFw0yNjA1MDIxNjA5MzZaMDMxMTAvBgNV
BAMTKDNFMkU4NUY2NjQ3MEFGRDlDMDBEN0NFOEEzQzMyNTI3QzAxMTVBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUu0V820Wg1lBXjeDpbOpJv+c
yd0cic0FhO0q6Wban2o2a2V7vKbD1a0yhwjfXm8+nw00Rw9CFTPhIT6bCnel8kaQ
RaRwuqzIvRtsbsOxXCHTg6FPS+anTGSxX/+afI+kQggxgP4HhZMVlBOAFZr4SRmA
0cpybQUMiFhh4hqVl+Mr57o19EMIbTzI4B6XvmVyOqK+24+h/cxIC9Y0SUZhZIa1
sVqLyKBzcVtAxx8xrHbgoJqqwrGBzk+SQKnrzHHcXO4nNPrBCLmXqVJAxj5AAMN0
7Tkpozu0Pxh/JAVLuhQ2g3anLhKvLYjigfzV9MQO1WOACHAqgrgX/0NOyhvxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPi6F9mRwr9nADXzoo8MlJ8ARWicwHwYDVR0j
BBgwFoAUvKMZU7ksX8RS7ah7kMvZjiB/ozcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZTJjNDgxNS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC9CQ0EzMTk1M0I5
MkM1RkM0NTJFREE4N0I5MENCRDk4RTIwN0ZBMzM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUyMDdG
QTMzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UyYzQ4MTUtYjJkYS00YzIwLWJj
MzEtNTAzYWRmNDliNDkwLzAvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5
OEUyMDdGQTMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA8iR+ozEDtA5WoCvZ+IjkwSq4bYlQqSZfZa
mZq1hHawFSNvQX62gTbQ+FuD8bKMV4KXIfW1WXPgkdgF9N8cER33s3aUx7RgdhrO
x6hHWoleSg/Mi1YOe/AvN08VpQH662NTGpa2AnCu+EtZtbj8y+BdJfZWx2vD7U8U
EM2xL3rOK9YRFeuPS8TS2nB+vYjHeSvTcNY5bF/J5PnfQs00mXOgKGwe9Ze61V7i
ApvbH8vis8fX20xNt45BkZeuwc23I1/izdBlS3f+5bW2dV3gza2v0va3yrTVg2wl
OCfHwggYegPtoOVx7A/oJbbHMbBL8TsV3x4oJKKjBa2aZm9pTVM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:25 2026 by rpki-client