Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
File:                     B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json)
Hash identifier:          Su3Zoho/Q3SPaGiPBDog8FHJdRjyKB6kzW2oTD6SSUA=
Subject key identifier:   D9:A8:B8:43:C1:81:99:9E:A5:91:BE:55:27:73:0A:08:E1:68:1C:1E
Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6
Certificate issuer:       /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
Certificate serial:       4DDCF149116E6E12CEC7EAF4F5F38048CCD1F406
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
Manifest number:          0141
Signing time:             Mon 27 Apr 2026 23:02:13 +0000
Manifest this update:     Mon 27 Apr 2026 22:57:13 +0000
Manifest next update:     Fri 01 May 2026 09:31:13 +0000
Files and hashes:         1: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: 7cY2fjKwV/HHKZsrfzlu8ZyOit5FsK86Mnd1T/8Ljpc=)
                          2: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: tHzJEc4tVJbK/5ReWDfkb8wKbAgEEvzCH+vbGF7LXac=)
                          3: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: fIcDveADUnKrYgghvA5TImloeBQWIkv0d6dc4/jtesQ=)
                          4: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: DxiuVfLvcjyo+Mn8zZEZyq9g9x9MYwq6EjUmb+7l6rM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dc:f1:49:11:6e:6e:12:ce:c7:ea:f4:f5:f3:80:48:cc:d1:f4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
        Validity
            Not Before: Apr 27 22:57:13 2026 GMT
            Not After : May  1 09:31:13 2026 GMT
        Subject: CN=D9A8B843C181999EA591BE5527730A08E1681C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:63:de:b4:99:41:58:a0:58:90:a2:71:7c:
                    47:82:71:a5:b1:dd:be:ab:87:14:c2:ec:22:96:32:
                    81:29:93:e1:a0:3b:2f:93:59:ab:d0:3e:9f:5a:b2:
                    da:63:d8:a4:cc:a6:55:c6:97:ba:2f:98:41:fb:da:
                    f4:f5:88:42:fa:60:a5:70:9f:5d:86:00:8b:a9:52:
                    1e:3e:f5:d7:e7:05:21:63:c0:a5:ff:d7:f4:13:ba:
                    f4:e9:3b:6f:79:52:5c:15:95:75:05:14:44:87:7b:
                    c6:4e:6c:98:98:6a:10:24:0f:40:93:fc:e7:f5:75:
                    b2:57:38:41:2c:87:a8:49:a4:c1:f6:89:06:da:f7:
                    b0:d3:4f:fc:dc:41:79:ff:72:81:62:a6:fe:85:b7:
                    7e:2f:48:39:63:f5:c7:68:b0:de:4b:ec:9d:29:63:
                    40:8d:24:d7:a6:d5:96:e5:8b:a0:2c:06:90:b0:24:
                    95:79:80:8d:6e:44:62:c0:8a:d1:dc:c2:fc:86:40:
                    03:cc:23:25:de:c9:71:9f:96:c2:43:17:7b:c3:cf:
                    e4:ae:90:6b:78:47:6f:38:e1:17:b3:cc:b7:64:15:
                    e8:0c:d2:c6:b6:d6:bb:1a:76:ba:be:f6:e5:fe:68:
                    9a:9a:46:e5:48:15:9e:6b:7f:31:cd:e3:6a:09:de:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A8:B8:43:C1:81:99:9E:A5:91:BE:55:27:73:0A:08:E1:68:1C:1E
            X509v3 Authority Key Identifier:
                keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:70:5b:e6:2d:49:03:7e:71:b6:20:98:f9:ba:cc:b6:4b:
         95:7c:4a:0a:34:49:3b:a1:61:20:d3:6b:78:26:da:35:40:90:
         d2:0c:51:da:d0:fd:1c:4b:23:c3:48:3a:3d:31:3e:e5:93:e8:
         fa:bc:0b:23:63:87:06:05:08:72:f5:0a:4a:78:98:79:ea:47:
         71:c4:ad:7f:52:6d:5f:d9:da:bb:ba:b1:f8:2f:cf:cd:d2:67:
         b5:df:6b:a9:5d:1c:57:e7:90:a9:37:ea:87:f1:0b:e2:0a:b9:
         8a:32:a1:3b:5d:65:33:95:d6:87:2f:f9:06:13:33:18:e5:ba:
         75:90:f0:82:5c:06:5d:56:d1:54:89:58:35:4a:19:02:74:50:
         8f:01:57:1f:81:cd:9a:dc:e0:e9:6b:8b:63:7a:fb:52:6b:f9:
         18:5e:f2:3a:34:e4:2d:1c:08:9d:5b:bb:d7:d9:f4:dc:63:cb:
         06:cf:8d:3c:04:c2:1a:1a:6b:2b:42:f5:98:be:d2:75:ca:e2:
         9a:42:07:24:8f:2f:f5:93:39:5a:f6:d1:7f:d2:a2:9c:45:9b:
         c3:c4:35:2d:c4:51:eb:2f:b0:84:d3:93:75:23:87:a2:16:09:
         65:bc:99:df:51:9f:65:82:3b:3f:a4:bb:ee:f5:a6:4a:7d:74:
         76:38:92:a0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTdzxSRFubhLOx+r09fOASMzR9AYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2
MEMwNkFGNjAeFw0yNjA0MjcyMjU3MTNaFw0yNjA1MDEwOTMxMTNaMDMxMTAvBgNV
BAMTKEQ5QThCODQzQzE4MTk5OUVBNTkxQkU1NTI3NzMwQTA4RTE2ODFDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsF2PetJlBWKBYkKJxfEeCcaWx
3b6rhxTC7CKWMoEpk+GgOy+TWavQPp9astpj2KTMplXGl7ovmEH72vT1iEL6YKVw
n12GAIupUh4+9dfnBSFjwKX/1/QTuvTpO295UlwVlXUFFESHe8ZObJiYahAkD0CT
/Of1dbJXOEEsh6hJpMH2iQba97DTT/zcQXn/coFipv6Ft34vSDlj9cdosN5L7J0p
Y0CNJNem1Zbli6AsBpCwJJV5gI1uRGLAitHcwvyGQAPMIyXeyXGflsJDF3vDz+Su
kGt4R2844RezzLdkFegM0sa21rsadrq+9uX+aJqaRuVIFZ5rfzHN42oJ3r99AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2ai4Q8GBmZ6lkb5VJ3MKCOFoHB4wHwYDVR0j
BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE
RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw
NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl
YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB
MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFaKcFvmLUkDfnG2IJj5usy2S5V8Sgo0STuh
YSDTa3gm2jVAkNIMUdrQ/RxLI8NIOj0xPuWT6Pq8CyNjhwYFCHL1Ckp4mHnqR3HE
rX9SbV/Z2ru6sfgvz83SZ7Xfa6ldHFfnkKk36ofxC+IKuYoyoTtdZTOV1ocv+QYT
MxjlunWQ8IJcBl1W0VSJWDVKGQJ0UI8BVx+BzZrc4Olri2N6+1Jr+Rhe8jo05C0c
CJ1bu9fZ9NxjywbPjTwEwhoaaytC9Zi+0nXK4ppCBySPL/WTOVr20X/SopxFm8PE
NS3EUesvsITTk3Ujh6IWCWW8md9Rn2WCOz+ku+71pkp9dHY4kqA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:18 2026 by rpki-client