Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft
File:                     8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft (raw, json)
Hash identifier:          iECilC3mgohbsxOLg/jHp22RNIhz8RGAM+SupgMM7sk=
Subject key identifier:   7D:41:FF:D1:4D:B1:DA:60:4F:18:FF:B0:EA:DB:B3:17:6A:7C:D8:49
Authority key identifier: 8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50
Certificate issuer:       /CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50
Certificate serial:       7D6AC1F877527277731FC73F112518307B5FA5F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft
Manifest number:          023D
Signing time:             Mon 27 Apr 2026 17:13:10 +0000
Manifest this update:     Mon 27 Apr 2026 17:08:10 +0000
Manifest next update:     Thu 30 Apr 2026 20:23:10 +0000
Files and hashes:         1: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: ooGoBMcKILEQifzcY+BHkj0PZgD66qyMLLKIw9Iw/Ns=)
                          2: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: yr+x0CB3AdUmNqphpkhuDags40KkNjTbZutK0PGt33A=)
                          3: 8DA7BD2FB53F2491FB6F3C9319EF347499610E50.crl (hash: hAF5qKRSPm4nTFhFdwQUEnuoNYv8Ht+PJZB2aDNAKek=)
                          4: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: bLVCg/aZos6YT0/beT3day4Lo+nylpWYvUGVuWgwCzI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6a:c1:f8:77:52:72:77:73:1f:c7:3f:11:25:18:30:7b:5f:a5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50
        Validity
            Not Before: Apr 27 17:08:10 2026 GMT
            Not After : Apr 30 20:23:10 2026 GMT
        Subject: CN=7D41FFD14DB1DA604F18FFB0EADBB3176A7CD849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:a4:93:a8:54:51:96:3a:13:d4:9d:c4:bc:
                    d4:54:15:d2:1e:21:7e:dd:66:94:13:94:96:d9:b5:
                    0d:e4:de:56:c6:4e:11:79:51:bb:43:9a:f5:b7:98:
                    2a:74:09:01:dc:fe:82:2e:3d:13:cb:e1:76:f7:68:
                    23:45:31:0c:25:0c:e2:a8:ff:65:ca:eb:c4:58:a5:
                    42:02:7b:22:06:dd:73:0d:74:cf:cb:fb:e5:5f:fa:
                    56:cb:84:6b:bf:c6:28:08:eb:73:d8:a0:10:2a:da:
                    74:21:3d:81:6f:43:5e:ab:f7:40:ba:b1:86:76:b0:
                    14:30:c4:1c:d0:a4:70:ca:0b:5a:e8:e7:60:0e:2a:
                    52:d9:95:c4:ef:c5:b8:07:40:19:44:a2:6c:ce:25:
                    9d:26:85:77:4c:e5:24:b0:ae:80:61:2e:a5:34:2a:
                    68:b8:d9:77:49:46:e6:7b:41:ba:b7:87:35:9e:41:
                    7e:99:63:ff:6f:2a:cb:21:ef:57:71:b9:0f:7f:ae:
                    ec:9a:51:12:e1:1c:3a:59:7e:ba:ca:f9:26:84:97:
                    43:98:cd:8d:3f:48:c8:dd:fa:18:5f:9f:d2:97:35:
                    3b:ff:57:f8:db:44:03:e1:5a:f0:68:be:22:83:8f:
                    02:32:1a:ba:49:22:00:49:fb:4e:c3:4e:8b:6b:a3:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:FF:D1:4D:B1:DA:60:4F:18:FF:B0:EA:DB:B3:17:6A:7C:D8:49
            X509v3 Authority Key Identifier:
                keyid:8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6a:7f:56:ce:7d:52:76:3c:fa:fd:78:a7:52:25:dd:7a:dd:
         bf:bb:d1:a0:7b:6c:2f:28:af:07:21:1d:c6:27:2f:6d:03:e6:
         fd:28:5a:83:97:9d:1f:f9:4b:83:15:89:d8:a3:6e:50:84:6c:
         02:83:76:07:6a:ce:74:75:e9:e0:e0:76:3b:33:93:5f:d5:6a:
         b0:02:95:6e:90:d5:32:eb:5d:51:c8:2f:1d:53:f7:29:0f:03:
         16:76:cc:bf:a0:72:62:3d:2a:d4:e0:de:8e:6f:f0:7f:94:2e:
         f9:31:55:f9:57:d6:24:9c:0e:7a:78:d0:5c:b1:ae:30:b4:5e:
         ee:1c:d2:19:cd:1c:8d:20:19:37:ce:63:13:38:29:24:21:de:
         e0:d6:4b:15:87:4f:ee:36:d6:97:79:26:c8:33:6e:fc:cb:17:
         82:d3:96:68:42:1c:ba:82:5b:a0:85:6c:17:a7:46:b3:7f:1a:
         7a:8e:3e:d3:82:bf:0b:4a:9f:74:a9:af:ea:67:37:75:1e:a5:
         4e:b0:41:1a:e4:6e:24:8e:44:b8:01:1c:c2:fd:97:08:62:95:
         41:d3:08:ea:7c:9d:43:44:6f:75:7d:ac:5b:5e:a4:aa:23:ff:
         a4:55:22:54:15:79:9d:b1:2d:da:42:80:64:20:37:28:31:bb:
         63:58:d6:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfWrB+HdScndzH8c/ESUYMHtfpfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0NzQ5
OTYxMEU1MDAeFw0yNjA0MjcxNzA4MTBaFw0yNjA0MzAyMDIzMTBaMDMxMTAvBgNV
BAMTKDdENDFGRkQxNERCMURBNjA0RjE4RkZCMEVBREJCMzE3NkE3Q0Q4NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4aSTqFRRljoT1J3EvNRUFdIe
IX7dZpQTlJbZtQ3k3lbGThF5UbtDmvW3mCp0CQHc/oIuPRPL4Xb3aCNFMQwlDOKo
/2XK68RYpUICeyIG3XMNdM/L++Vf+lbLhGu/xigI63PYoBAq2nQhPYFvQ16r90C6
sYZ2sBQwxBzQpHDKC1ro52AOKlLZlcTvxbgHQBlEomzOJZ0mhXdM5SSwroBhLqU0
Kmi42XdJRuZ7Qbq3hzWeQX6ZY/9vKssh71dxuQ9/ruyaURLhHDpZfrrK+SaEl0OY
zY0/SMjd+hhfn9KXNTv/V/jbRAPhWvBoviKDjwIyGrpJIgBJ+07DTotro23XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfUH/0U2x2mBPGP+w6tuzF2p82EkwHwYDVR0j
BBgwFoAUjae9L7U/JJH7bzyTGe80dJlhDlAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
OGY5ZTg3ZC1lNTA5LTQ3YmEtYmU5ZC04OTU1NmY1MzBlYTgvMC84REE3QkQyRkI1
M0YyNDkxRkI2RjNDOTMxOUVGMzQ3NDk5NjEwRTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0NzQ5OTYx
MEU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhmOWU4N2QtZTUwOS00N2JhLWJl
OWQtODk1NTZmNTMwZWE4LzAvOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0
NzQ5OTYxMEU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK5qf1bOfVJ2PPr9eKdSJd163b+70aB7bC8o
rwchHcYnL20D5v0oWoOXnR/5S4MVidijblCEbAKDdgdqznR16eDgdjszk1/VarAC
lW6Q1TLrXVHILx1T9ykPAxZ2zL+gcmI9KtTg3o5v8H+ULvkxVflX1iScDnp40Fyx
rjC0Xu4c0hnNHI0gGTfOYxM4KSQh3uDWSxWHT+421pd5JsgzbvzLF4LTlmhCHLqC
W6CFbBenRrN/GnqOPtOCvwtKn3Spr+pnN3UepU6wQRrkbiSORLgBHML9lwhilUHT
COp8nUNEb3V9rFtepKoj/6RVIlQVeZ2xLdpCgGQgNygxu2NY1kM=
-----END CERTIFICATE-----