Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft
File:                     D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json)
Hash identifier:          fMiFvE0f+h5qhKsHLT80jL70HOA3f3F+TW/GOVO1CcQ=
Subject key identifier:   BC:9E:64:BD:07:F1:6B:F9:D3:CC:27:C5:11:5D:BF:9E:BC:C0:9C:3D
Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19
Certificate issuer:       /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
Certificate serial:       6E1E762B6C6711ACCC9B92076A7D5C73E42D6A86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft
Manifest number:          0136
Signing time:             Tue 28 Apr 2026 12:21:52 +0000
Manifest this update:     Tue 28 Apr 2026 12:16:52 +0000
Manifest next update:     Fri 01 May 2026 16:43:52 +0000
Files and hashes:         1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: a65T79RY4jJs29DyytiX30Ecbo3aziPjQjbF3KwFaiw=)
                          2: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: i8iRrksR1Li2H2l84ojmPQuOZLaqcgS/Gxukx5T+yII=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1e:76:2b:6c:67:11:ac:cc:9b:92:07:6a:7d:5c:73:e4:2d:6a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
        Validity
            Not Before: Apr 28 12:16:52 2026 GMT
            Not After : May  1 16:43:52 2026 GMT
        Subject: CN=BC9E64BD07F16BF9D3CC27C5115DBF9EBCC09C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:91:f4:55:d5:ca:20:27:ab:21:f3:c7:be:
                    d8:8b:0b:a9:5c:3e:b5:12:d5:48:5a:71:57:b6:67:
                    3f:cf:89:19:38:60:33:ef:9c:c7:fd:3d:83:ce:1f:
                    82:85:3f:c6:1b:3e:d2:84:6d:41:0a:2f:d9:25:10:
                    5b:40:3d:42:3b:99:89:97:51:b0:16:7b:72:82:41:
                    d2:e2:b5:7f:8a:18:82:84:25:6c:80:79:e6:d1:7f:
                    8d:c7:85:74:0b:88:7a:4a:34:9b:30:7f:e6:6c:88:
                    b5:03:37:2b:98:3f:0b:92:14:88:67:59:68:5e:e6:
                    a9:c4:91:c6:62:47:5d:34:41:32:62:b9:b1:ba:29:
                    aa:32:44:18:a8:7c:e0:44:18:05:ac:11:19:22:5b:
                    63:67:23:3f:78:c6:6c:08:a1:23:de:9c:78:f8:8b:
                    b7:84:00:2e:81:d2:b5:5c:87:05:a8:34:43:56:49:
                    3f:49:fa:24:38:52:d3:33:33:02:5d:d3:84:65:d8:
                    1e:26:3b:b6:38:d7:ec:8e:28:b4:3b:c7:03:d4:1d:
                    77:3e:f6:31:21:02:95:e1:c3:b5:83:47:f1:3e:bc:
                    00:6b:04:5d:ff:81:ab:2b:e0:f4:f3:36:2b:74:64:
                    c1:08:6b:a8:82:a2:4e:9a:a9:2d:87:3d:ed:b5:a2:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9E:64:BD:07:F1:6B:F9:D3:CC:27:C5:11:5D:BF:9E:BC:C0:9C:3D
            X509v3 Authority Key Identifier:
                keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0a:4a:a3:65:5b:0a:74:b8:ac:dd:9b:a4:c8:54:93:fb:7c:
         57:e1:d2:30:1f:a2:c6:b0:92:6f:a1:d2:f1:2f:f7:1d:a4:97:
         0a:7d:71:bd:72:3d:4b:79:0b:40:ac:60:05:dd:78:c2:ef:81:
         bb:a7:ba:43:c2:cb:db:7f:b3:88:55:fc:e6:de:d3:6b:99:fa:
         25:fb:81:3d:ef:60:87:55:9b:2e:19:7e:27:b5:c0:5a:44:f0:
         18:df:26:47:cf:3b:0f:19:7d:67:fb:c4:fe:bd:9b:97:7a:91:
         b6:e2:44:67:97:ea:29:18:06:c7:7d:b7:c9:12:99:9d:27:d5:
         ed:f9:c4:1a:72:b0:c9:28:67:f9:52:64:08:ea:40:8d:8b:45:
         3c:52:64:8a:aa:38:95:7b:b0:ca:bb:22:19:50:6e:1c:fb:43:
         fb:b1:08:d5:32:2d:69:31:42:98:c7:c1:ae:80:fb:ad:cf:18:
         05:47:85:23:d2:ec:53:cf:1a:69:42:10:d0:d3:40:24:43:46:
         23:03:ec:93:57:95:b7:75:b4:15:ac:04:ed:1e:1b:48:1b:03:
         21:13:ae:0a:b5:c2:fe:f2:f6:ca:7d:7f:25:67:79:08:e2:0d:
         a8:ce:08:5d:90:3e:09:f4:e7:b4:99:87:c2:78:a2:6d:f6:03:
         8e:22:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:35 2026 by rpki-client