Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
File:                     89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json)
Hash identifier:          7D/XkaUrN7IpEqZAktQKvSgXvH4OxL4MkifnRAcS6Xw=
Subject key identifier:   A3:92:F0:80:BD:41:C6:D3:1F:31:1E:D5:FD:38:70:8D:FF:66:3D:D8
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Certificate issuer:       /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial:       5F8ACC3E6F242FBC36199A548E636F726C0B9F04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
Manifest number:          0544
Signing time:             Mon 27 Apr 2026 09:03:20 +0000
Manifest this update:     Mon 27 Apr 2026 08:58:20 +0000
Manifest next update:     Thu 30 Apr 2026 10:27:20 +0000
Files and hashes:         1: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=)
                          2: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=)
                          3: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU=)
                          4: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: QNKDfRdPvbLpEW8hv/ehUps1eBR4QCqUvW4kRikFHoc=)
                          5: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=)
                          6: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=)
                          7: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8a:cc:3e:6f:24:2f:bc:36:19:9a:54:8e:63:6f:72:6c:0b:9f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
        Validity
            Not Before: Apr 27 08:58:20 2026 GMT
            Not After : Apr 30 10:27:20 2026 GMT
        Subject: CN=A392F080BD41C6D31F311ED5FD38708DFF663DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:c2:fd:00:b6:92:09:b2:6a:16:f8:aa:1d:
                    2d:86:4b:b9:a2:fb:71:af:57:ba:ea:f2:e2:ed:63:
                    99:60:d0:00:b5:43:45:af:6a:3c:75:34:fc:83:43:
                    bf:f8:5d:d9:90:33:ce:12:c7:d2:f6:ae:1e:6b:58:
                    5f:90:79:39:55:f8:08:d6:b3:55:ce:69:1d:45:90:
                    d8:e2:0b:33:3a:ff:34:61:a9:05:4b:1b:24:ea:17:
                    24:a4:81:c4:90:7e:1f:55:f2:92:c9:a5:94:dc:57:
                    eb:ab:51:68:65:8e:19:c3:df:07:f0:3a:16:71:0e:
                    b8:2d:c8:78:f5:fc:8a:b6:c8:e3:9d:95:3b:dc:2e:
                    1d:7c:06:27:55:76:fc:b4:be:11:c8:40:de:c9:40:
                    c9:f3:2c:b4:d5:34:7b:5a:2f:eb:48:bb:99:81:24:
                    60:60:45:64:79:1e:c4:49:39:93:fb:aa:e7:a7:57:
                    c5:b0:7e:c3:56:53:09:00:34:ff:ce:61:5c:f0:8f:
                    46:3b:86:46:ba:db:3f:14:80:05:8f:f5:5b:ae:13:
                    46:ac:cb:71:00:37:f0:32:59:47:8f:c4:ce:0c:44:
                    42:73:0d:3d:4f:bb:74:31:90:22:6e:41:23:68:49:
                    aa:cf:2d:5f:9c:47:54:b8:58:27:c1:52:bf:21:3a:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:92:F0:80:BD:41:C6:D3:1F:31:1E:D5:FD:38:70:8D:FF:66:3D:D8
            X509v3 Authority Key Identifier:
                keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:65:b9:9a:08:18:8f:f6:db:e1:f4:c4:43:ce:62:ee:0f:3a:
         8c:24:13:f3:7e:7a:e5:52:7a:91:e8:9d:34:ca:0e:55:21:44:
         0b:eb:45:27:0f:5e:9c:78:1c:3f:c0:e4:7c:e5:24:0c:7a:ad:
         70:7b:cd:11:dd:36:cf:41:b1:c1:7c:87:31:66:d6:d1:f3:83:
         ac:38:b7:21:be:b8:29:2d:ae:40:59:27:5b:a6:7f:8c:93:b1:
         8d:99:6b:f0:bf:bf:df:8b:e5:2a:59:1b:30:7e:9f:32:d2:1d:
         6a:5d:e1:90:f7:8d:b0:e5:8e:b6:15:21:b8:da:48:9d:87:42:
         4b:ef:78:12:21:bd:b1:f0:53:53:da:12:aa:c1:98:bc:5f:0b:
         86:de:65:c0:98:99:ba:06:97:d0:16:64:2d:4f:cf:b5:47:f8:
         27:12:97:7b:46:b6:6d:0e:ea:47:e3:25:76:eb:b1:81:a2:d2:
         9e:c6:d0:8e:ac:12:a9:c2:3d:3c:67:c0:38:e6:cf:55:cf:77:
         1c:94:cc:f4:00:d3:49:a7:66:dc:8c:e4:09:17:79:d7:90:79:
         76:ae:10:51:c4:f8:8d:e5:fb:2d:ca:79:34:85:56:93:2f:64:
         26:df:03:29:2d:30:1b:4e:b5:61:ea:9a:49:80:95:f8:08:df:
         c1:f4:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:06 2026 by rpki-client