Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft
File:                     3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft (raw, json)
Hash identifier:          2a0RzPpCuHNQwbs4YTvbprm9ZhEc4AlPrr+e4PZBunk=
Subject key identifier:   46:26:76:26:46:71:D9:6F:2D:EE:16:48:8D:0A:C5:C9:5C:10:37:7A
Authority key identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69
Certificate issuer:       /CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269
Certificate serial:       1B585784CFA8119F63857EF7293E8C0F4FA4A379
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft
Manifest number:          04F8
Signing time:             Wed 29 Apr 2026 01:32:36 +0000
Manifest this update:     Wed 29 Apr 2026 01:27:36 +0000
Manifest next update:     Sat 02 May 2026 12:50:36 +0000
Files and hashes:         1: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: rkHE7dCGWjwiXKSo5AmkFhmGB4j/W88po8KuTJD9fS0=)
                          2: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: 0yCL5KXTraWL90iq30pQr9XlRbIvmMrP24hOvDxVdWE=)
                          3: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: QKBrvi0RsDMYjSNqwszDPfOesbOlEOIHdE8u3xcyVKM=)
                          4: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: ceA/XjkZTjtckNNE+B0y8t16H7RYtmT+yFrD+MsXpYk=)
                          5: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: zCUg4ypvv2GlwnHN93OEr6YWYy+0fl7UKwqXyrw+mYs=)
                          6: 3D13C6FB9DB22CE134706325357C20E1DC9A1269.crl (hash: h6Cxld2Na328bT1sbRFg85LXjv75XuCaQVoSdxDUilg=)
                          7: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: q/CV3YIPQOm1aZYip5fIR1K9i7bDSVO+nIFF+ycG0Go=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:58:57:84:cf:a8:11:9f:63:85:7e:f7:29:3e:8c:0f:4f:a4:a3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269
        Validity
            Not Before: Apr 29 01:27:36 2026 GMT
            Not After : May  2 12:50:36 2026 GMT
        Subject: CN=462676264671D96F2DEE16488D0AC5C95C10377A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:45:80:b0:bd:a7:20:14:e2:a7:54:a3:27:
                    34:22:bb:90:49:41:d8:f4:43:3d:54:90:f3:f9:bd:
                    80:41:80:af:61:f6:a9:12:36:6a:26:c6:d9:6c:56:
                    fe:fc:5f:64:8a:ca:5f:36:a6:27:bf:ac:ff:ae:bd:
                    38:a9:8e:24:13:60:d3:ca:6f:fe:80:97:44:46:e4:
                    69:ce:c1:9b:36:5a:bb:7e:01:c8:d9:20:4b:eb:dc:
                    bc:06:c7:cc:8d:87:a1:de:f4:6f:78:25:92:43:c9:
                    81:df:72:6a:9f:81:b1:db:92:58:f7:70:18:f4:b9:
                    c7:83:8b:87:4a:14:7a:5b:c1:ae:f2:3f:d9:b9:f8:
                    57:00:82:80:0f:6e:e9:61:d0:f1:18:bb:b4:27:39:
                    21:74:1e:7c:6d:1a:e2:0b:09:fb:17:cd:0e:2b:a3:
                    56:ba:a8:a5:c6:1a:9b:fd:67:3d:e0:ed:2b:7d:b7:
                    3f:8d:dc:1a:a6:90:2c:c3:8d:35:05:b1:9c:40:9f:
                    9e:97:bb:a9:73:b0:1f:20:d4:b6:4c:f7:6f:b5:94:
                    06:36:a9:65:96:af:7c:73:27:92:10:1a:fa:2e:4f:
                    5b:7c:83:e9:98:7d:9e:11:19:d8:3f:27:6f:c1:78:
                    f9:56:6b:98:ef:90:43:83:d2:6a:56:c6:2d:37:13:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:26:76:26:46:71:D9:6F:2D:EE:16:48:8D:0A:C5:C9:5C:10:37:7A
            X509v3 Authority Key Identifier:
                keyid:3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:33:0b:41:d5:94:bd:3e:33:79:ce:18:68:84:62:84:04:bd:
         1c:dc:67:7b:ed:53:90:cc:71:4d:31:ae:ff:bf:23:2d:41:49:
         e4:53:aa:67:44:b4:c2:53:5b:5f:8c:ae:38:a4:9c:eb:fe:f3:
         c5:42:51:48:12:32:0e:92:10:e9:50:10:52:4d:e1:fb:51:af:
         03:ff:c3:64:ea:59:a8:e6:ad:e9:11:76:57:77:f6:a1:ef:3d:
         ca:6d:38:d7:a8:a2:83:51:4a:78:6f:0b:3f:6a:12:a8:e3:05:
         3e:c4:5a:ab:62:71:66:5a:f7:36:8d:e2:ae:7d:9d:a8:7f:13:
         b1:fc:0c:48:17:89:95:29:63:9f:85:59:72:da:9b:9c:34:2a:
         79:c3:c9:71:30:db:df:84:d4:88:c4:88:6f:59:a9:a7:a4:e5:
         d4:c9:16:4f:a3:ae:98:fa:2d:c1:1c:bf:7a:ed:16:92:77:c6:
         21:71:65:bd:ec:09:6c:d5:04:a7:25:ca:53:7d:ae:8d:6b:1a:
         e4:0c:2a:c0:27:cc:96:53:8e:a1:31:05:73:9a:09:66:45:41:
         7b:b8:fb:b1:8a:9e:0d:96:35:22:a3:75:ff:86:a3:82:49:44:
         18:1c:3d:4b:95:c3:45:76:73:08:60:13:25:9a:f8:2b:1c:02:
         77:be:07:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG1hXhM+oEZ9jhX73KT6MD0+ko3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIwRTFE
QzlBMTI2OTAeFw0yNjA0MjkwMTI3MzZaFw0yNjA1MDIxMjUwMzZaMDMxMTAvBgNV
BAMTKDQ2MjY3NjI2NDY3MUQ5NkYyREVFMTY0ODhEMEFDNUM5NUMxMDM3N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvEWAsL2nIBTip1SjJzQiu5BJ
Qdj0Qz1UkPP5vYBBgK9h9qkSNmomxtlsVv78X2SKyl82pie/rP+uvTipjiQTYNPK
b/6Al0RG5GnOwZs2Wrt+AcjZIEvr3LwGx8yNh6He9G94JZJDyYHfcmqfgbHbklj3
cBj0uceDi4dKFHpbwa7yP9m5+FcAgoAPbulh0PEYu7QnOSF0HnxtGuILCfsXzQ4r
o1a6qKXGGpv9Zz3g7St9tz+N3BqmkCzDjTUFsZxAn56Xu6lzsB8g1LZM92+1lAY2
qWWWr3xzJ5IQGvouT1t8g+mYfZ4RGdg/J2/BePlWa5jvkEOD0mpWxi03E7alAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURiZ2JkZx2W8t7hZIjQrFyVwQN3owHwYDVR0j
BBgwFoAUPRPG+52yLOE0cGMlNXwg4dyaEmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZDFlZTVlMi0zMzhjLTRkMjAtODA3ZS1lNTBiNzU1ODNkYjgvMC8zRDEzQzZGQjlE
QjIyQ0UxMzQ3MDYzMjUzNTdDMjBFMURDOUExMjY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIwRTFEQzlB
MTI2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw
N2UtZTUwYjc1NTgzZGI4LzAvM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIw
RTFEQzlBMTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIkzC0HVlL0+M3nOGGiEYoQEvRzcZ3vtU5DM
cU0xrv+/Iy1BSeRTqmdEtMJTW1+MrjiknOv+88VCUUgSMg6SEOlQEFJN4ftRrwP/
w2TqWajmrekRdld39qHvPcptONeoooNRSnhvCz9qEqjjBT7EWqticWZa9zaN4q59
nah/E7H8DEgXiZUpY5+FWXLam5w0KnnDyXEw29+E1IjEiG9Zqaek5dTJFk+jrpj6
LcEcv3rtFpJ3xiFxZb3sCWzVBKclylN9ro1rGuQMKsAnzJZTjqExBXOaCWZFQXu4
+7GKng2WNSKjdf+Go4JJRBgcPUuVw0V2cwhgEyWa+CscAne+B+k=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:27 2026 by rpki-client