Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
File:                     1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json)
Hash identifier:          7GRPmgsJYy0/ABCMgKiUYVmji00DJI7YgRrDghz9K2U=
Subject key identifier:   3B:88:BA:67:A1:90:8E:3D:4C:15:38:8C:50:93:B9:95:08:1F:CA:87
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       3A840C2464541DB25224287FFD2215DBD23736E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
Manifest number:          0214
Signing time:             Wed 29 Apr 2026 03:30:06 +0000
Manifest this update:     Wed 29 Apr 2026 03:25:06 +0000
Manifest next update:     Sat 02 May 2026 08:50:06 +0000
Files and hashes:         1: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 31rqAW06+FuDJELvsb/0uxq0ocORo684ERfMQVWzj54=)
                          2: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: vo3txQHD1GP/JznijvlkQTtQaeBbi729kAiguRxIkyE=)
                          3: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 8bb25AjKY+CfhaHD2T35vRoSHcpGFrksD2snYFX7/PA=)
                          4: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: p/6KK4JMbgCv5VkdanC2JpAp7VpmlbyPcWCjqL4KniM=)
                          5: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: YqkCvMl0PPv/SjM86CmSE7YV2BzpnMMQxQbEuJOY7ws=)
                          6: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: IwDEqUkW43XX4AyGB8PbDkCNt5umzTCdzQdXW/hMu5c=)
                          7: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: FBwLiD7U4sCYynBhJGjAu+VAe5YUj9+FUjVO+L+zaEo=)
                          8: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: rfAEDfb98EmJrbbYSOsJh0R3GKeVtrdV920jQ6JYXXk=)
                          9: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: qVIOTxzkHoMtUEEPyvvgBkFKT9oB5BtmkPkZiQLq0ng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:84:0c:24:64:54:1d:b2:52:24:28:7f:fd:22:15:db:d2:37:36:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Apr 29 03:25:06 2026 GMT
            Not After : May  2 08:50:06 2026 GMT
        Subject: CN=3B88BA67A1908E3D4C15388C5093B995081FCA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:4d:a6:a4:9f:00:09:23:a3:ef:60:f8:5b:
                    f0:7b:bf:7e:ee:3f:fd:06:f5:b9:a3:46:44:4a:41:
                    81:8f:dc:fa:3a:49:f4:30:89:e7:d6:fb:3f:f6:c7:
                    4a:de:3e:84:7f:09:a5:1f:e6:f8:07:83:ef:a3:8c:
                    e4:84:4d:73:70:f0:8f:32:42:df:2b:30:da:4f:86:
                    6b:b6:cb:fb:3b:ff:ef:5e:2b:c6:9d:49:99:ca:cb:
                    51:46:d7:81:eb:2b:5d:cf:14:dc:f9:d8:7c:f4:07:
                    8a:ed:e4:18:35:1c:52:98:92:69:9e:ed:81:f9:94:
                    6e:31:d8:2e:4c:6b:9b:00:e7:7e:8d:c8:4b:12:5f:
                    5f:04:53:bb:21:85:3e:5c:21:7b:1c:b4:70:24:f5:
                    c7:c2:9b:fb:17:8b:a2:0c:c3:8e:7a:88:a0:2f:d5:
                    87:c1:db:aa:89:e0:29:6e:3d:b1:3e:8b:85:db:9e:
                    42:f7:f4:6a:66:6f:84:e5:8f:86:d3:cc:76:f3:c5:
                    16:0d:cf:01:32:ed:aa:0a:5c:8c:96:5c:78:87:51:
                    3b:2c:04:8e:2e:6d:f3:24:19:2a:e1:73:02:f8:2b:
                    18:20:6e:92:99:ba:23:fd:98:3a:28:bd:97:56:73:
                    f5:22:64:b4:61:05:11:a2:d5:6c:c4:82:db:92:ac:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:BA:67:A1:90:8E:3D:4C:15:38:8C:50:93:B9:95:08:1F:CA:87
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:ce:24:67:70:90:a3:98:fa:99:d8:92:15:81:67:91:c5:
         f2:20:e4:3e:7b:10:6a:9c:d8:89:b6:e1:2e:24:bb:eb:8b:75:
         e5:3b:44:8c:24:ce:8c:d2:91:09:ab:d4:8e:7e:87:3c:da:91:
         93:05:ce:87:f8:78:f4:33:e9:a9:0d:3f:95:f8:ee:85:00:71:
         a5:a3:48:a2:ce:92:35:ee:ed:15:b0:65:6b:20:06:e0:49:1b:
         3c:98:04:cd:6c:e1:05:51:db:4f:91:2a:0f:f0:0a:4a:5f:64:
         f5:56:49:50:e3:12:64:bd:2c:5b:9d:e5:2f:d4:f7:dc:df:b2:
         b4:7c:dc:c9:f9:62:9c:46:47:80:11:23:e8:20:43:2c:ae:be:
         d6:0a:53:08:0e:cf:4c:79:90:d8:19:59:11:e5:3e:75:5e:81:
         9e:97:81:f6:5d:fb:5c:fd:6f:10:b0:1b:53:41:b8:6e:ae:04:
         08:44:48:72:ce:59:51:11:42:e1:73:5e:f4:36:0e:d7:28:af:
         04:e5:25:3c:38:70:45:b5:2d:14:6c:e5:5c:b9:58:7b:e2:44:
         f4:45:76:3b:df:50:b5:e1:ac:68:dd:d3:69:af:40:2e:c5:db:
         bb:5d:b3:71:b9:dd:5b:0f:cf:e1:54:b2:6a:c9:ef:dd:3a:ad:
         13:f8:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:55 2026 by rpki-client