Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
File:                     BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json)
Hash identifier:          laCCm4HzdjErhhBDpM9TlAFRUiKeoN+pXe/cfZHXqZs=
Subject key identifier:   02:04:08:30:17:F6:4A:02:C8:28:D9:2E:4F:7B:75:68:D5:56:E5:F0
Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
Certificate issuer:       /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Certificate serial:       36CB72DC28945A8ED54BE59BC7ABD9F4F7377491
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
Manifest number:          0223
Signing time:             Mon 27 Apr 2026 13:01:54 +0000
Manifest this update:     Mon 27 Apr 2026 12:56:54 +0000
Manifest next update:     Thu 30 Apr 2026 21:57:54 +0000
Files and hashes:         1: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: C/jOD70S/lq/f2o4lqBzdMrlb5+QMVzSY4OdcjUHnHk=)
                          2: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: yauiVurx9A7FpPCvoFpJPf7hgUeZNvFAGvzWaMCB0Ic=)
                          3: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: u7eiIUnffNPdeqqP/VglXdzrnbj56dfexEAIJFCuTP0=)
                          4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: lAY4AFx6j4ENTtX/5Sic1TWQTEW1WElYGoOsg0fzrX4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cb:72:dc:28:94:5a:8e:d5:4b:e5:9b:c7:ab:d9:f4:f7:37:74:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
        Validity
            Not Before: Apr 27 12:56:54 2026 GMT
            Not After : Apr 30 21:57:54 2026 GMT
        Subject: CN=0204083017F64A02C828D92E4F7B7568D556E5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:7f:c0:1c:7a:d4:81:2f:7d:13:0b:08:e0:
                    fa:32:aa:43:fc:41:77:ce:3b:b5:37:bc:5f:03:6e:
                    1a:f9:63:cf:87:9f:fc:6a:94:4d:9c:12:ac:5c:ae:
                    86:02:77:b8:b7:f3:ac:7f:fd:09:54:f6:0e:ec:8e:
                    da:2f:d4:e9:ab:3d:35:3f:fe:9e:4e:c4:3b:a3:cd:
                    a9:26:2d:f6:4c:2a:3b:44:7e:c1:70:f4:0d:88:de:
                    00:61:fe:23:58:2e:07:25:cd:41:18:7e:38:92:dd:
                    e3:0a:8b:d7:21:f1:3f:45:14:6e:39:c4:94:f2:fb:
                    b5:c2:bb:d5:6b:68:d0:78:a9:a6:d7:dc:d3:88:d2:
                    ac:2b:9b:8c:a7:7a:82:cf:99:22:49:f9:fd:db:37:
                    ff:21:cc:ba:89:51:e6:5b:b0:31:b2:4a:3e:d4:95:
                    69:d3:47:57:f2:92:64:97:fa:a3:8b:ed:bd:85:5d:
                    f5:7a:d4:9f:b0:15:64:9c:ac:5c:e0:3e:e3:d7:8b:
                    f7:73:9b:a9:45:07:52:a5:df:66:97:54:52:b9:3b:
                    fd:1e:95:41:dc:40:70:dc:dd:3b:63:fe:70:0e:bc:
                    a0:e7:72:ce:54:41:2d:d5:0b:58:0b:f1:81:47:33:
                    6b:2b:d7:d7:dd:b2:71:cf:bd:24:3e:2f:9a:0c:e7:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:08:30:17:F6:4A:02:C8:28:D9:2E:4F:7B:75:68:D5:56:E5:F0
            X509v3 Authority Key Identifier:
                keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:76:14:d5:8f:63:7d:d3:a1:80:ed:9f:e5:06:3b:5f:b4:e0:
         b0:7c:9f:70:5b:c6:14:c6:ed:41:62:d0:56:62:d8:2a:b6:57:
         8b:b6:c1:73:77:8d:da:c6:35:46:a8:32:e6:fe:d7:3b:eb:41:
         7e:f9:37:92:86:54:ab:5c:7b:3a:35:f0:61:79:c5:44:a6:33:
         8f:43:02:2e:30:8d:76:1b:c3:5a:be:77:6d:a8:23:8d:65:e7:
         ab:e4:03:05:5f:00:bf:0b:4f:ba:26:69:0d:bf:ce:f1:c6:60:
         dd:e6:ac:d6:3e:38:9b:f9:2a:9c:d7:5f:ac:07:ca:96:b2:5e:
         9a:57:f5:32:45:57:02:67:10:43:2f:a0:b5:c2:37:ea:e3:6d:
         46:56:fe:ad:35:46:8a:51:7c:9d:3a:22:20:ff:53:42:89:a1:
         d8:0a:ea:84:71:e1:37:85:9b:fe:03:50:0d:8c:73:ca:1b:b2:
         cd:a7:3a:66:5b:40:b2:8d:15:2e:ba:86:c7:0d:b1:df:a2:9c:
         f3:fc:52:b8:7b:87:b4:57:c8:6b:aa:b9:73:23:cb:96:5c:46:
         b5:cc:a0:2f:86:1f:37:ec:22:c5:1c:30:00:ea:7b:80:85:b6:
         a9:a8:bb:20:4a:be:85:d7:b0:bc:dd:f6:31:91:1b:f6:df:e1:
         31:28:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:04 2026 by rpki-client