Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft
File:                     1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json)
Hash identifier:          u3TAAE/buHTjYdzks5CCL+ajZf+jRxIFngUTXFjLaHU=
Subject key identifier:   BE:A3:40:03:E0:AC:00:B3:DC:1F:B6:87:5F:BF:F6:0F:3F:3A:52:0F
Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19
Certificate issuer:       /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419
Certificate serial:       2225E7A41AA8568FCD01B36C4C9EA1642AE6B590
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft
Manifest number:          0540
Signing time:             Wed 29 Apr 2026 10:05:07 +0000
Manifest this update:     Wed 29 Apr 2026 10:00:07 +0000
Manifest next update:     Sat 02 May 2026 14:00:07 +0000
Files and hashes:         1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: 01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA=)
                          2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: lbqLm4gtIn2PpfyD5NIDm37sX2MwPhaC2Wn66mlRkRA=)
                          3: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: lohYCXH1GC/YSya9U7PfGWShV7wFTwDtZi/dVEgHQKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:25:e7:a4:1a:a8:56:8f:cd:01:b3:6c:4c:9e:a1:64:2a:e6:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419
        Validity
            Not Before: Apr 29 10:00:07 2026 GMT
            Not After : May  2 14:00:07 2026 GMT
        Subject: CN=BEA34003E0AC00B3DC1FB6875FBFF60F3F3A520F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:b0:7c:2c:07:49:23:5e:d2:0e:b4:ae:e9:
                    c2:8e:dd:8c:2f:7a:a9:ba:bf:2e:3a:68:b3:5d:70:
                    2c:7b:50:7f:67:d0:eb:6f:e6:40:6f:58:c0:04:93:
                    04:37:51:19:fa:6b:f6:b4:7f:c0:7a:a6:9f:f4:26:
                    6c:0c:b1:bc:cf:5d:f9:35:35:20:2d:55:f2:f8:cb:
                    a5:0e:ef:26:c8:ea:e6:df:30:7e:12:c9:51:37:b7:
                    3f:90:3f:5f:25:7c:da:f7:b0:97:c8:39:e9:50:bc:
                    1a:6f:69:c6:09:2d:a0:0d:17:4e:8d:f4:91:d4:64:
                    f0:e3:73:86:5e:3b:18:4b:ad:64:2e:ce:75:6f:f0:
                    d2:32:93:25:cf:8d:8b:9d:e5:08:1a:a0:0a:d5:40:
                    4e:45:cc:7f:67:0b:b4:32:40:42:41:ba:d0:4c:de:
                    53:1c:21:17:01:3c:29:2e:90:23:68:dd:5e:78:79:
                    d8:13:92:17:5d:f1:a0:d7:68:5d:7d:88:01:1f:5d:
                    97:86:81:28:dd:20:31:8d:15:93:49:82:b4:8f:61:
                    c6:e2:2c:bf:c3:eb:db:14:ff:87:4f:f5:f1:d9:c4:
                    91:b0:6b:c8:e2:c8:fe:03:82:40:18:ce:86:2e:f1:
                    b9:a1:24:98:98:92:ae:7d:03:ee:01:74:86:5f:de:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A3:40:03:E0:AC:00:B3:DC:1F:B6:87:5F:BF:F6:0F:3F:3A:52:0F
            X509v3 Authority Key Identifier:
                keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:c6:0f:4c:a3:52:f4:c2:44:71:93:5d:80:b2:a4:65:af:
         09:cc:5d:54:d1:0f:a7:99:40:b8:7a:cf:9a:cc:d6:d8:0d:68:
         e7:a7:b1:11:e3:e2:64:e1:db:27:e6:8b:3c:9d:98:4c:0c:4d:
         1c:a0:13:fc:68:f9:c0:2a:eb:54:e3:ff:5f:5f:bc:22:97:59:
         32:4c:a6:10:80:df:95:a8:d1:ff:d8:9b:e8:a4:16:b5:3f:7c:
         96:ae:03:a0:70:e6:ce:13:56:9b:ec:ef:0a:0c:1d:35:ce:0b:
         b1:82:51:74:6f:80:5d:66:34:1a:88:e1:52:af:2a:c1:15:36:
         b9:76:97:07:b4:dc:e9:1f:7a:96:91:67:b0:46:4b:6a:8b:c3:
         bc:6d:99:9e:11:b9:ae:9f:48:c2:cb:ba:ed:fb:f7:b7:6b:3d:
         72:8f:05:91:e2:61:77:ee:71:9a:94:8d:32:fa:d0:3f:2b:e0:
         7d:87:ab:46:d8:38:02:59:be:ce:e8:6c:5f:c7:75:a6:39:5e:
         e6:b4:41:f8:6a:44:ba:c4:10:40:11:06:5e:71:05:78:f3:22:
         8c:27:26:5c:0e:82:c8:be:14:2f:56:46:80:05:17:4d:62:a3:
         a8:24:7d:27:45:5b:70:2a:87:15:96:77:8b:d5:c1:82:aa:a2:
         95:e1:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:57:25 2026 by rpki-client