Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
File:                     9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json)
Hash identifier:          Us5re3yB1wZLmnGTrtNKgkiaQCC/DF3zjAFoBH51OHQ=
Subject key identifier:   74:80:86:2B:4D:B9:65:42:F3:E8:30:A7:C8:92:4F:3F:F6:69:DF:E5
Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43
Certificate issuer:       /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
Certificate serial:       78387A0E68D0ED890493BF0DEAE79A63225199E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
Manifest number:          010B
Signing time:             Mon 27 Apr 2026 07:41:46 +0000
Manifest this update:     Mon 27 Apr 2026 07:36:46 +0000
Manifest next update:     Thu 30 Apr 2026 13:46:46 +0000
Files and hashes:         1: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=)
                          2: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=)
                          3: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: AQPouw6KmR7fN87+VaLF74mzJOh+tkbmA6P5SCbRh4s=)
                          4: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=)
                          5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:38:7a:0e:68:d0:ed:89:04:93:bf:0d:ea:e7:9a:63:22:51:99:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
        Validity
            Not Before: Apr 27 07:36:46 2026 GMT
            Not After : Apr 30 13:46:46 2026 GMT
        Subject: CN=7480862B4DB96542F3E830A7C8924F3FF669DFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:3b:5a:00:9c:d9:c9:6f:74:eb:0c:7a:13:
                    12:20:ed:3a:64:0c:32:a4:16:40:59:6d:14:f3:1f:
                    5f:dd:9c:b8:59:74:1a:7a:7b:54:a7:2f:d4:8f:6b:
                    18:88:21:4c:52:36:62:bf:4c:44:dc:f0:72:f2:23:
                    5b:00:ad:48:69:3b:c9:75:8c:be:db:6c:a7:4a:30:
                    04:a5:1a:80:99:8c:6b:a8:b9:d9:d0:e8:b6:f0:7d:
                    77:f8:3c:a1:e9:2e:fd:6c:52:05:60:dd:24:fb:7c:
                    c7:65:62:22:6b:f6:47:a1:77:3e:11:17:43:04:a5:
                    35:0b:72:e9:c0:e4:40:39:bf:32:c6:44:29:cf:04:
                    77:bc:45:44:1b:6e:1d:a3:80:21:f1:54:fc:a1:af:
                    35:0d:bc:f3:8e:bf:44:9c:3b:b0:43:f5:e7:37:6a:
                    4a:82:b7:d0:55:fb:33:da:95:1c:e5:d3:66:e3:cc:
                    46:a4:5e:46:b2:2c:0e:e7:98:dd:a6:58:b3:6b:4b:
                    e9:10:f6:ab:37:b4:4b:f9:7a:1a:17:1f:ed:10:bb:
                    29:c6:2f:77:3a:24:40:42:f9:a9:32:01:70:19:1f:
                    ae:94:a4:48:26:a1:39:67:ac:cf:91:ae:81:8b:a5:
                    f3:f5:cf:6f:da:8f:7d:93:76:52:8c:1c:c0:fb:db:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:80:86:2B:4D:B9:65:42:F3:E8:30:A7:C8:92:4F:3F:F6:69:DF:E5
            X509v3 Authority Key Identifier:
                keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d3:0a:5f:be:a4:12:9e:1d:5d:e5:05:a8:35:13:60:0b:ea:
         34:df:88:91:28:6f:e7:22:c3:01:f0:43:ad:50:23:c7:4f:a5:
         d5:57:f5:c6:2e:5a:a6:56:e6:ed:1d:a0:c8:e2:46:0f:29:63:
         94:43:46:8e:36:c1:53:d7:03:eb:41:23:e0:66:09:49:98:b4:
         ae:ab:4d:ca:22:c3:0f:4f:15:4c:da:30:a9:08:49:51:54:ab:
         ea:07:6c:91:9c:7f:f3:00:2b:bd:8c:14:ac:ab:aa:e5:e6:92:
         8e:e2:77:2c:36:cd:80:5c:c6:59:df:c3:05:40:22:9f:c4:f3:
         6a:cf:ff:51:cd:42:1f:b8:8b:2c:cf:e5:66:01:49:66:19:2e:
         9c:1b:49:4e:df:ec:a7:ff:d4:24:d0:3a:16:63:7a:e6:e2:95:
         68:07:04:99:fe:6c:32:c0:a9:24:d4:21:3e:9e:c4:d1:3b:46:
         02:1f:5a:a2:6a:aa:f8:56:84:a2:dc:ef:f5:0a:2b:dc:9e:44:
         01:e3:0b:87:e1:bf:a7:67:03:3e:ce:59:e5:32:36:92:f3:cc:
         16:dc:d9:99:66:5f:82:f4:a0:54:04:e1:9a:9e:1f:fe:5b:92:
         d3:eb:1b:b6:e0:75:9d:67:7c:65:0b:72:e4:cd:9c:05:f7:31:
         da:87:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:18 2026 by rpki-client