Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
File:                     9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json)
Hash identifier:          DAfkatGbDkRRyoeIQIRHWpkechaaStjs/h/5qX7H8VI=
Subject key identifier:   66:81:C4:DC:32:E8:5A:1A:C0:1D:B1:17:4F:03:A3:F2:83:82:CE:37
Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7
Certificate issuer:       /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
Certificate serial:       159BD30D2ECB2C2FDB9136240F0CE056883FE728
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
Manifest number:          0128
Signing time:             Wed 29 Apr 2026 08:10:06 +0000
Manifest this update:     Wed 29 Apr 2026 08:05:06 +0000
Manifest next update:     Sat 02 May 2026 20:08:06 +0000
Files and hashes:         1: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=)
                          2: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=)
                          3: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=)
                          4: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=)
                          5: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: nLTRPQQPNxok0LklhVym5Zq8FXXI2Mtjdzx7Bz/OXtM=)
                          6: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=)
                          7: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: 9LXLYm+D6soIVqMRtdkPI6t9IFIKIsecaLtAbcGiLNw=)
                          8: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=)
                          9: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9b:d3:0d:2e:cb:2c:2f:db:91:36:24:0f:0c:e0:56:88:3f:e7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
        Validity
            Not Before: Apr 29 08:05:06 2026 GMT
            Not After : May  2 20:08:06 2026 GMT
        Subject: CN=6681C4DC32E85A1AC01DB1174F03A3F28382CE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:d0:4f:f3:7a:78:53:58:b7:53:01:09:0a:
                    04:0f:87:fe:be:8e:6d:b6:fe:00:18:94:92:b9:75:
                    a8:a9:7c:8d:88:64:3b:2f:7e:ad:7c:1c:e1:28:8f:
                    45:dd:b5:18:1f:2c:4a:2e:0f:54:f7:fa:0a:82:d9:
                    c1:fe:2d:3b:3e:3e:e6:82:e5:57:d9:7a:94:c8:a0:
                    d5:c8:ea:9b:90:a3:4a:35:01:c0:30:18:5a:49:36:
                    80:6b:dd:c0:26:88:1f:fb:9d:75:32:e1:8e:e7:54:
                    c6:b9:54:57:a1:fd:19:05:25:89:00:27:27:fd:53:
                    8b:4a:90:f1:63:9a:3d:d1:34:e1:c8:3f:97:99:8f:
                    4e:16:37:0a:37:bd:51:72:14:ed:a4:4a:11:02:62:
                    f3:e8:94:c3:88:16:cd:4b:59:80:2f:0c:bc:95:f9:
                    74:92:44:81:a8:bb:90:94:a9:76:89:bd:17:ff:78:
                    a7:ef:23:e1:7e:a8:9a:02:2b:e2:be:20:f4:36:7f:
                    04:27:a6:5c:be:02:88:ac:74:1b:5f:47:3e:50:38:
                    dc:3d:c1:ae:02:45:14:dc:a5:cf:d7:84:0a:ab:9c:
                    d9:88:c9:30:17:f8:2a:e2:b3:f8:a0:fc:e1:20:2f:
                    45:fa:65:99:56:e1:3b:95:7a:b0:42:ba:03:35:39:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:81:C4:DC:32:E8:5A:1A:C0:1D:B1:17:4F:03:A3:F2:83:82:CE:37
            X509v3 Authority Key Identifier:
                keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:40:d4:ea:e8:67:7b:37:fc:77:7e:c8:f7:3c:6d:14:e4:91:
         52:e2:af:30:0e:b8:87:f5:3e:97:df:c9:13:e2:23:00:91:c8:
         8a:c7:f7:98:9d:d0:b3:7e:cd:8f:83:2a:da:75:d1:27:bd:3b:
         b0:7b:b7:fe:01:5e:ef:c9:fd:d8:39:c2:47:db:67:e7:43:09:
         07:68:44:f7:6c:16:9f:3a:1c:86:5e:ff:e4:4a:b1:97:6f:c7:
         f4:38:90:ec:2f:20:49:38:e1:3f:2a:c0:02:b4:ac:f9:90:61:
         f8:00:7c:99:a3:61:0b:66:32:84:54:e2:cb:03:5a:27:97:b2:
         2c:87:60:dc:fe:40:5a:d8:36:99:ef:e5:6d:d6:19:14:bb:dc:
         3b:6e:8c:5d:f2:c5:ca:09:4f:cf:02:b8:fc:f1:68:51:c5:a7:
         6a:b7:45:99:b6:be:c0:e5:9a:81:db:af:83:83:3b:52:a3:4f:
         a4:a9:fd:50:4a:65:b0:81:41:34:56:06:24:aa:f2:e8:5b:bf:
         03:e7:6b:9a:2d:4a:9d:83:91:fd:69:b7:b2:bc:70:c5:68:16:
         84:e0:42:51:56:17:99:80:09:b5:09:da:cb:38:28:e7:e5:8b:
         47:d1:9e:93:f2:89:62:cc:f9:ce:bf:cb:b1:6e:6c:9a:cf:22:
         83:a2:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:02 2026 by rpki-client