Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft
File:                     85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json)
Hash identifier:          vGskDaZtVZMph0XO8kuXclFDyerisuE3zU2zenfnC30=
Subject key identifier:   B8:B8:72:1A:20:E3:CE:80:5E:AA:60:2A:0C:1A:1C:1A:AD:43:F8:32
Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3
Certificate issuer:       /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3
Certificate serial:       6825E2373C6CEADDB456C25A0CD95BC820222039
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft
Manifest number:          0303
Signing time:             Tue 28 Apr 2026 10:42:26 +0000
Manifest this update:     Tue 28 Apr 2026 10:37:26 +0000
Manifest next update:     Fri 01 May 2026 14:34:26 +0000
Files and hashes:         1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: gonve5wIJ3O85bDiwHHm2xjnNdsU9xH6JAbxD3Ax5a8=)
                          2: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: Ixsp/32Xw5gESMhkHBzSlamk3XD7CcTLPfvPhZ6CFc0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:25:e2:37:3c:6c:ea:dd:b4:56:c2:5a:0c:d9:5b:c8:20:22:20:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3
        Validity
            Not Before: Apr 28 10:37:26 2026 GMT
            Not After : May  1 14:34:26 2026 GMT
        Subject: CN=B8B8721A20E3CE805EAA602A0C1A1C1AAD43F832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:84:6d:e4:e3:6b:dd:13:a9:10:65:70:83:
                    b9:64:a4:df:46:a3:4d:f1:5a:d6:38:cb:f7:99:6f:
                    13:28:da:23:f8:f8:c4:8b:db:8d:98:3f:a5:2e:fb:
                    12:7c:6e:31:15:a5:c9:3b:11:c6:5e:48:c9:79:e3:
                    76:bb:27:08:8d:16:9a:35:6f:3c:f2:ae:31:10:64:
                    b2:91:7b:a2:22:ea:7c:7d:29:47:c4:fa:e9:92:f2:
                    4d:13:54:63:a9:09:65:43:d8:55:2d:bb:e6:44:78:
                    42:39:42:ba:4d:b2:25:df:bd:47:2d:34:00:ec:ff:
                    6e:2f:11:9d:a1:3a:94:93:e0:14:97:20:47:43:00:
                    db:c3:7f:40:f6:9a:de:38:cf:7c:4f:c3:10:39:34:
                    b7:69:b1:28:04:15:de:5b:3b:a2:be:ff:08:9f:73:
                    65:55:bc:9f:90:39:f6:82:af:54:50:67:9b:a0:03:
                    00:eb:5d:46:f3:ee:9b:e9:51:19:36:fc:a5:fb:14:
                    97:4c:b3:80:46:64:4d:46:db:4c:50:3a:8e:4a:c1:
                    a8:67:f6:ad:d8:84:3a:2b:d8:ae:0e:04:cd:ff:8c:
                    47:03:73:40:69:a7:e0:7a:8b:d9:78:fb:bd:b4:6f:
                    83:98:d8:81:3b:a3:0d:f2:97:67:f7:b9:55:14:1b:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B8:72:1A:20:E3:CE:80:5E:AA:60:2A:0C:1A:1C:1A:AD:43:F8:32
            X509v3 Authority Key Identifier:
                keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:85:b8:c4:3f:a6:f7:df:59:af:76:66:68:6b:49:32:fd:8c:
         20:ea:de:f8:87:61:62:04:44:0e:b7:c7:7a:1b:42:21:93:36:
         47:c3:57:3e:45:d6:d3:aa:e8:b4:95:ba:e8:4d:a7:89:19:83:
         59:c7:1a:fa:eb:e5:fb:8e:2c:14:d7:b6:30:36:1c:6b:c6:db:
         d8:f6:95:d4:97:e5:31:44:ea:34:80:45:e5:52:cb:bb:22:9a:
         62:91:0a:ce:91:a1:9e:fb:9f:e6:9b:fb:fb:86:2c:c0:89:c9:
         20:f6:67:f5:2f:e8:bc:d2:85:ec:e1:cd:41:8f:27:65:3b:e5:
         e2:cb:a0:28:f8:09:23:1f:77:5b:d3:9a:1b:7d:35:e0:91:f3:
         bd:00:41:e2:41:60:8d:31:71:6f:ba:0e:be:2d:05:8d:e0:d2:
         7c:13:33:15:59:98:a4:90:0a:04:23:66:62:0c:58:88:a3:cf:
         d7:3c:a2:1e:b5:a0:10:78:2a:83:c8:69:45:54:39:76:e1:e9:
         b8:4a:44:81:80:f1:0b:f4:2b:45:49:5c:b1:82:18:f1:5f:40:
         9e:19:b0:fb:72:27:d3:ad:dc:ed:23:5a:2a:76:13:6d:f9:4a:
         66:a6:67:ae:83:8a:eb:4e:1f:6e:a4:76:14:d1:a0:e9:10:5c:
         5d:10:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:08 2026 by rpki-client