Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
File:                     D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json)
Hash identifier:          4hKNRcyIDGkK9wKJQnJjuHORcP0CUCSw78iKYjyjuFw=
Subject key identifier:   3C:DF:7B:D1:35:08:9B:11:A3:16:BF:DE:4E:B2:41:F1:73:A1:B7:7B
Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62
Certificate issuer:       /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
Certificate serial:       16FBECBF539C0555A11637389409D6A209944AF9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
Manifest number:          0161
Signing time:             Mon 27 Apr 2026 15:42:38 +0000
Manifest this update:     Mon 27 Apr 2026 15:37:38 +0000
Manifest next update:     Thu 30 Apr 2026 22:27:38 +0000
Files and hashes:         1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: 7Oi5j12RVi3qx9bBfzHfHE0vUABfTWWODw/d5Ig7GBE=)
                          2: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: xO9KZ2wS8cX+lnHA20YSoJ+8+EuvNNU6nLs0CmmfJSE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fb:ec:bf:53:9c:05:55:a1:16:37:38:94:09:d6:a2:09:94:4a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
        Validity
            Not Before: Apr 27 15:37:38 2026 GMT
            Not After : Apr 30 22:27:38 2026 GMT
        Subject: CN=3CDF7BD135089B11A316BFDE4EB241F173A1B77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:fa:58:b9:04:d6:dc:55:4b:4b:1d:d6:79:
                    3d:2a:05:36:f4:70:08:6e:bb:d5:4c:fd:1f:1a:ab:
                    7b:b0:42:d8:cf:a6:9f:c3:81:6c:6c:9c:81:78:ab:
                    02:a1:78:74:cc:c0:50:ce:e2:25:71:75:e7:44:2c:
                    e4:3a:b1:ee:f7:95:eb:6a:47:b7:1d:b7:43:49:08:
                    3f:b8:19:48:9e:09:77:d5:92:04:e6:5b:ba:94:5c:
                    90:ee:f6:ad:98:8f:0b:1e:9b:df:49:78:76:e6:91:
                    33:db:77:a7:3e:bf:bc:b8:de:18:2e:14:05:e3:32:
                    d8:d5:22:93:70:4b:f0:76:5c:1b:0b:60:38:81:34:
                    bd:2f:f0:0c:69:b4:3a:f8:d3:14:98:9c:0b:3b:d0:
                    16:2e:21:9d:e5:41:e4:57:01:d4:a8:b6:ce:89:ab:
                    95:47:db:65:90:87:d5:5a:4b:9f:fe:2b:17:24:7f:
                    3c:59:3f:80:39:3e:5e:77:8f:d4:99:38:5f:24:7b:
                    1a:e5:7e:e4:f9:38:2e:2f:e9:1c:12:a9:ca:69:5d:
                    ea:21:6b:dd:7e:46:de:8c:c2:dd:db:41:84:ab:fb:
                    69:4d:6b:7a:74:f1:69:50:24:80:25:69:0f:3c:2f:
                    0d:ec:3a:75:54:8b:6b:1e:70:0c:06:15:b5:55:b9:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DF:7B:D1:35:08:9B:11:A3:16:BF:DE:4E:B2:41:F1:73:A1:B7:7B
            X509v3 Authority Key Identifier:
                keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:48:a1:4f:a8:38:88:ab:8f:6e:ea:5a:ec:4c:0d:d5:63:2d:
         e2:1e:03:c4:ee:8a:fe:4c:be:51:4f:76:82:96:24:87:3e:a0:
         09:5f:83:59:67:64:ac:ff:0c:a4:80:bb:94:82:2a:e0:51:98:
         fa:67:a0:e3:3f:64:51:bb:79:15:2e:b6:7b:6d:a5:d8:ce:7d:
         6d:5f:b3:ee:26:36:6b:a9:f5:64:37:a8:5a:85:4c:9d:02:4d:
         cc:55:60:61:5a:d7:3b:aa:c6:57:e7:23:27:b9:fe:a3:6f:c5:
         6e:b8:a0:59:0c:e8:72:a9:5d:4b:84:0b:84:74:45:ce:c3:0a:
         3f:45:4d:a4:36:fe:8c:7e:c8:1b:0a:09:50:eb:99:6a:3f:9c:
         2d:6b:e3:af:12:d3:02:72:1d:b3:2b:65:3c:45:8d:81:f6:30:
         07:61:48:98:85:ed:22:f9:20:39:17:f5:ff:e5:8d:31:eb:80:
         11:74:d9:b0:2c:3e:ce:2b:e6:a3:08:0b:84:84:3d:eb:a7:60:
         13:a4:a1:a3:89:bc:78:63:c2:82:67:b7:24:4a:c7:b5:77:59:
         54:ba:54:6b:76:0b:70:aa:ad:dd:40:1f:0d:39:90:42:b7:eb:
         e4:a1:97:59:44:0e:62:b6:bb:77:2a:4b:54:63:28:b6:4c:3e:
         c7:9c:6a:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFvvsv1OcBVWhFjc4lAnWogmUSvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3
RDhCNjE2MjAeFw0yNjA0MjcxNTM3MzhaFw0yNjA0MzAyMjI3MzhaMDMxMTAvBgNV
BAMTKDNDREY3QkQxMzUwODlCMTFBMzE2QkZERTRFQjI0MUYxNzNBMUI3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJvpYuQTW3FVLSx3WeT0qBTb0
cAhuu9VM/R8aq3uwQtjPpp/DgWxsnIF4qwKheHTMwFDO4iVxdedELOQ6se73letq
R7cdt0NJCD+4GUieCXfVkgTmW7qUXJDu9q2Yjwsem99JeHbmkTPbd6c+v7y43hgu
FAXjMtjVIpNwS/B2XBsLYDiBNL0v8AxptDr40xSYnAs70BYuIZ3lQeRXAdSots6J
q5VH22WQh9VaS5/+KxckfzxZP4A5Pl53j9SZOF8kexrlfuT5OC4v6RwSqcppXeoh
a91+Rt6Mwt3bQYSr+2lNa3p08WlQJIAlaQ88Lw3sOnVUi2secAwGFbVVuSS9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPN970TUImxGjFr/eTrJB8XOht3swHwYDVR0j
BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4
NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC
NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5
ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG
RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG9IoU+oOIirj27qWuxMDdVjLeIeA8Tuiv5M
vlFPdoKWJIc+oAlfg1lnZKz/DKSAu5SCKuBRmPpnoOM/ZFG7eRUutnttpdjOfW1f
s+4mNmup9WQ3qFqFTJ0CTcxVYGFa1zuqxlfnIye5/qNvxW64oFkM6HKpXUuEC4R0
Rc7DCj9FTaQ2/ox+yBsKCVDrmWo/nC1r468S0wJyHbMrZTxFjYH2MAdhSJiF7SL5
IDkX9f/ljTHrgBF02bAsPs4r5qMIC4SEPeunYBOkoaOJvHhjwoJntyRKx7V3WVS6
VGt2C3Cqrd1AHw05kEK36+Shl1lEDmK2u3cqS1RjKLZMPsecakM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:21:44 2026 by rpki-client