Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
File:                     BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json)
Hash identifier:          bw02ffpGZuFAAFtHxf8SI/d71pHXNI6W9F7k07HYuHM=
Subject key identifier:   6E:4E:AD:9C:03:B5:63:18:6B:F7:44:FF:39:55:2B:48:16:79:AA:03
Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
Certificate issuer:       /CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Certificate serial:       343520F66285E593383E3577C6EE5A688B9BFF89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
Manifest number:          0570
Signing time:             Wed 29 Apr 2026 07:52:20 +0000
Manifest this update:     Wed 29 Apr 2026 07:47:20 +0000
Manifest next update:     Sat 02 May 2026 16:57:20 +0000
Files and hashes:         1: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=)
                          2: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: lOPyN4jlxJmDfUm1Z5usitGLtQdiU+flslurwWQqLwM=)
                          3: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: +FaWxeyMSXTm1A2YbWkKpjjxd9ODF5R6bPfmYjsvC3c=)
                          4: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A=)
                          5: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg=)
                          6: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: NjMfFU89uellRyb0efnzHXSH52eM9RryvGqglBHVcbM=)
                          7: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: E6oSwKyWxejOo/v5HHitngqUwJ84vi0WR9s9o+kQ4qc=)
                          8: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: m1RDFs81kJe7cLkzIuvESdF6lsbsj7FMYtNBuW0nGcE=)
                          9: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:20:f6:62:85:e5:93:38:3e:35:77:c6:ee:5a:68:8b:9b:ff:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267
        Validity
            Not Before: Apr 29 07:47:20 2026 GMT
            Not After : May  2 16:57:20 2026 GMT
        Subject: CN=6E4EAD9C03B563186BF744FF39552B481679AA03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:8e:3f:cd:c1:80:af:50:34:d3:62:fe:52:
                    1b:66:24:6f:de:79:2d:dd:1a:e9:85:19:85:68:47:
                    54:6c:53:d5:f0:b4:f9:80:32:10:8d:5a:3a:74:9d:
                    29:8a:73:e6:0e:a6:54:64:fe:60:0d:6b:b0:fd:28:
                    7a:8c:9a:ea:a4:00:fb:b9:d7:95:e7:9b:52:b3:68:
                    ba:f6:a8:af:69:7e:28:c7:52:1d:9f:d2:cc:55:a9:
                    75:4e:26:3a:7d:83:c8:5e:47:ee:02:94:d0:6e:ca:
                    f9:f2:c5:fb:f8:10:2a:1a:68:6c:42:a0:1c:6f:89:
                    47:50:42:e5:df:8f:7e:cc:5b:2a:9b:b0:1d:e3:60:
                    e8:88:23:3c:ec:56:5a:6f:ca:bd:09:e1:6a:e8:20:
                    88:59:bd:72:b6:8b:86:b6:bf:12:dd:a5:2f:00:b3:
                    19:f7:82:d4:03:38:2d:b8:e8:1c:aa:f0:ff:6c:7b:
                    b3:75:11:48:8f:af:e0:1e:a5:d1:0d:7f:d0:77:b2:
                    89:57:ac:62:25:d9:0d:a0:c5:7e:6f:a2:ca:a0:4a:
                    ef:10:77:0e:3c:45:37:9c:ed:44:c3:ff:50:6e:eb:
                    ea:85:d4:dc:0c:de:da:fe:5e:89:60:79:e6:68:dc:
                    83:04:bb:46:41:94:9b:6e:09:04:b9:c1:fe:76:64:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4E:AD:9C:03:B5:63:18:6B:F7:44:FF:39:55:2B:48:16:79:AA:03
            X509v3 Authority Key Identifier:
                keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:5f:30:62:d1:80:8a:bb:09:71:34:b2:64:d2:89:f9:78:
         aa:b0:95:67:fb:8d:2b:39:53:36:96:17:62:a0:66:84:04:07:
         6b:c7:16:5d:3b:98:82:36:ed:5c:53:8c:e0:de:fd:a1:db:2b:
         ec:53:02:a8:de:2f:a9:66:8c:ec:f3:83:22:7f:da:f4:90:97:
         0f:4e:b0:ff:5b:c3:12:38:e8:b7:2f:91:4c:38:19:48:b6:26:
         3b:fe:92:db:be:58:65:b7:15:a4:86:04:55:ef:35:0b:81:bd:
         4d:1b:89:be:5e:51:09:f2:79:80:e4:11:31:98:04:dd:b7:2c:
         6b:65:c4:c0:15:a8:aa:91:8d:9c:07:ac:ef:e6:8f:47:b4:08:
         a3:95:15:36:7f:0d:e3:fb:a7:98:da:11:11:a9:0c:24:02:07:
         99:e7:3b:77:d4:dc:5b:03:29:fc:9c:d1:18:a8:69:ea:84:50:
         5a:d2:5e:49:c5:09:b4:2c:b2:81:3c:95:84:00:a4:c5:dc:e1:
         bc:c0:ab:9e:3c:12:cd:55:52:b5:8c:00:54:b9:2c:8f:46:6c:
         16:d5:1c:ab:a5:7f:f9:68:1d:67:1e:aa:fe:06:f7:00:be:16:
         24:92:de:3e:c1:00:14:0f:90:73:5d:6d:f6:dc:73:5e:a8:11:
         cb:3a:29:66
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNDUg9mKF5ZM4PjV3xu5aaIub/4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0
QTk2QjI2NzAeFw0yNjA0MjkwNzQ3MjBaFw0yNjA1MDIxNjU3MjBaMDMxMTAvBgNV
BAMTKDZFNEVBRDlDMDNCNTYzMTg2QkY3NDRGRjM5NTUyQjQ4MTY3OUFBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEI4/zcGAr1A002L+UhtmJG/e
eS3dGumFGYVoR1RsU9XwtPmAMhCNWjp0nSmKc+YOplRk/mANa7D9KHqMmuqkAPu5
15Xnm1KzaLr2qK9pfijHUh2f0sxVqXVOJjp9g8heR+4ClNBuyvnyxfv4ECoaaGxC
oBxviUdQQuXfj37MWyqbsB3jYOiIIzzsVlpvyr0J4WroIIhZvXK2i4a2vxLdpS8A
sxn3gtQDOC246Byq8P9se7N1EUiPr+AepdENf9B3solXrGIl2Q2gxX5vosqgSu8Q
dw48RTec7UTD/1Bu6+qF1NwM3tr+XolgeeZo3IMEu0ZBlJtuCQS5wf52ZBg7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbk6tnAO1Yxhr90T/OVUrSBZ5qgMwHwYDVR0j
BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2
NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2
QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5
MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB
OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH0cXzBi0YCKuwlxNLJk0on5eKqwlWf7jSs5
UzaWF2KgZoQEB2vHFl07mII27VxTjODe/aHbK+xTAqjeL6lmjOzzgyJ/2vSQlw9O
sP9bwxI46LcvkUw4GUi2Jjv+ktu+WGW3FaSGBFXvNQuBvU0bib5eUQnyeYDkETGY
BN23LGtlxMAVqKqRjZwHrO/mj0e0CKOVFTZ/DeP7p5jaERGpDCQCB5nnO3fU3FsD
Kfyc0RioaeqEUFrSXknFCbQssoE8lYQApMXc4bzAq548Es1VUrWMAFS5LI9GbBbV
HKulf/loHWceqv4G9wC+FiSS3j7BABQPkHNdbfbcc16oEcs6KWY=
-----END CERTIFICATE-----
Generated at Sun Jul 19 04:57:36 2026 by rpki-client