Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft
File:                     2985976A4B3081770748882703E16497964D05A6.mft (raw, json)
Hash identifier:          x9g6jkez+YHz1djQW+4XW3l+c76LAPAm7QbBp/dgXSU=
Subject key identifier:   87:7A:01:38:A7:0C:EB:FC:F9:AC:A7:BB:A6:F3:EB:8E:A1:42:B5:99
Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6
Certificate issuer:       /CN=2985976A4B3081770748882703E16497964D05A6
Certificate serial:       61F923D199D5232903B1ED26C1F14DCFE20EABB9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft
Manifest number:          025A
Signing time:             Mon 27 Apr 2026 11:50:46 +0000
Manifest this update:     Mon 27 Apr 2026 11:45:46 +0000
Manifest next update:     Thu 30 Apr 2026 12:14:46 +0000
Files and hashes:         1: 2985976A4B3081770748882703E16497964D05A6.crl (hash: BvYtuSyAVeTuKWA0BgYMfh4odDRnRMI8dl789QnJosQ=)
                          2: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=)
                          3: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=)
                          4: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=)
                          5: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=)
                          6: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f9:23:d1:99:d5:23:29:03:b1:ed:26:c1:f1:4d:cf:e2:0e:ab:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2985976A4B3081770748882703E16497964D05A6
        Validity
            Not Before: Apr 27 11:45:46 2026 GMT
            Not After : Apr 30 12:14:46 2026 GMT
        Subject: CN=877A0138A70CEBFCF9ACA7BBA6F3EB8EA142B599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:64:17:fe:3a:8a:48:d7:ed:6b:56:1d:fb:
                    4c:2b:2f:3f:9e:03:24:8e:bd:d5:9e:f0:55:61:6d:
                    35:91:60:08:ae:bf:9e:c5:c3:7c:11:19:59:91:67:
                    f4:15:7a:fa:fb:a1:51:52:65:90:36:dc:1a:ba:56:
                    65:04:6b:65:be:79:8e:1e:4f:db:5d:f3:35:dd:5d:
                    6b:11:42:50:c2:7d:9a:97:86:98:0c:ca:fd:5c:6d:
                    1b:a7:a7:d3:23:14:61:e5:82:28:3c:8a:0d:0c:af:
                    6f:46:2a:e9:c3:2e:4d:98:5b:b1:9d:98:0e:24:05:
                    fe:99:6e:ff:ff:f2:22:33:eb:c0:9c:09:9f:46:f3:
                    ea:b4:fe:1d:d1:fe:e4:1a:e3:10:ef:b1:79:6c:0c:
                    54:d9:eb:c9:d8:a8:a9:29:ae:10:c2:f7:5f:b8:33:
                    5d:77:20:0e:94:64:13:50:6a:61:e7:e8:c0:66:80:
                    68:c7:72:a4:b9:ee:ef:b7:a3:db:c2:b0:2e:d9:84:
                    a6:ab:f4:c2:83:0a:e3:10:5a:64:1b:44:e5:4e:6f:
                    f3:c8:d3:cc:c2:d5:56:a4:82:2f:20:4b:6d:0b:40:
                    87:e1:76:6d:52:85:e6:f3:f6:12:1f:90:9e:d1:33:
                    92:aa:b5:25:f0:90:7f:2a:d8:6d:3a:1c:af:55:94:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:01:38:A7:0C:EB:FC:F9:AC:A7:BB:A6:F3:EB:8E:A1:42:B5:99
            X509v3 Authority Key Identifier:
                keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9e:24:98:8d:08:f9:61:df:63:b9:00:ac:a8:e5:3f:57:ef:
         e6:ec:35:d0:9c:27:2c:cf:47:90:5a:ca:a9:82:c6:3e:09:aa:
         dd:0d:84:61:e8:5a:33:5b:03:6d:a8:05:57:b2:32:c1:e1:46:
         64:48:39:f3:11:ad:ac:89:df:a1:4a:63:92:43:3c:0d:9a:02:
         6b:10:b2:9b:6b:d7:d9:8d:1f:76:ab:87:43:c4:83:55:52:1b:
         ff:05:60:0d:39:0d:64:2a:a6:2a:60:0e:9c:dd:08:95:f4:7f:
         af:6f:a3:3b:13:0c:b1:57:80:a2:d9:43:2b:80:0c:08:6e:1b:
         e6:78:13:bd:8a:4d:25:df:dd:d1:6e:b7:3f:f8:8e:87:e4:67:
         2a:6d:71:bf:eb:ec:0b:bc:59:4b:a5:7a:c7:9c:79:6f:54:3a:
         75:34:e4:f6:cb:e8:36:6d:24:15:13:f1:5c:13:b0:c6:19:f6:
         51:5d:ac:83:08:60:b3:cb:99:72:89:e8:c3:58:58:77:fb:af:
         70:84:62:4f:12:9c:fb:17:e7:aa:0d:88:89:45:be:55:fb:38:
         ed:a7:a3:61:ff:f5:cf:78:ca:95:e8:bf:77:32:11:87:62:05:
         bd:d3:26:34:e9:dc:61:aa:46:0e:72:12:ae:3b:f4:67:98:05:
         9e:94:39:21
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYfkj0ZnVIykDse0mwfFNz+IOq7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5
NjREMDVBNjAeFw0yNjA0MjcxMTQ1NDZaFw0yNjA0MzAxMjE0NDZaMDMxMTAvBgNV
BAMTKDg3N0EwMTM4QTcwQ0VCRkNGOUFDQTdCQkE2RjNFQjhFQTE0MkI1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdWQX/jqKSNfta1Yd+0wrLz+e
AySOvdWe8FVhbTWRYAiuv57Fw3wRGVmRZ/QVevr7oVFSZZA23Bq6VmUEa2W+eY4e
T9td8zXdXWsRQlDCfZqXhpgMyv1cbRunp9MjFGHlgig8ig0Mr29GKunDLk2YW7Gd
mA4kBf6Zbv//8iIz68CcCZ9G8+q0/h3R/uQa4xDvsXlsDFTZ68nYqKkprhDC91+4
M113IA6UZBNQamHn6MBmgGjHcqS57u+3o9vCsC7ZhKar9MKDCuMQWmQbROVOb/PI
08zC1Vakgi8gS20LQIfhdm1Shebz9hIfkJ7RM5KqtSXwkH8q2G06HK9VlLCzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUh3oBOKcM6/z5rKe7pvPrjqFCtZkwHwYDVR0j
BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC
MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE
MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz
ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0
OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKSeJJiNCPlh32O5AKyo5T9X7+bsNdCcJyzP
R5BayqmCxj4Jqt0NhGHoWjNbA22oBVeyMsHhRmRIOfMRrayJ36FKY5JDPA2aAmsQ
sptr19mNH3arh0PEg1VSG/8FYA05DWQqpipgDpzdCJX0f69vozsTDLFXgKLZQyuA
DAhuG+Z4E72KTSXf3dFutz/4jofkZyptcb/r7Au8WUuleseceW9UOnU05PbL6DZt
JBUT8VwTsMYZ9lFdrIMIYLPLmXKJ6MNYWHf7r3CEYk8SnPsX56oNiIlFvlX7OO2n
o2H/9c94ypXov3cyEYdiBb3TJjTp3GGqRg5yEq479GeYBZ6UOSE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:54 2026 by rpki-client