Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
File:                     30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json)
Hash identifier:          BxN1cK5mlvspP4Uw24TPq/0ZckoA0zmduHRohFl9ffs=
Subject key identifier:   73:CD:B9:D7:55:40:91:89:A1:0E:D6:7A:2F:70:36:BC:6C:78:07:3B
Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF
Certificate issuer:       /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
Certificate serial:       1D23FA90F09F27D126A2B30F198F627F38BF1638
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
Manifest number:          0186
Signing time:             Mon 27 Apr 2026 08:12:51 +0000
Manifest this update:     Mon 27 Apr 2026 08:07:51 +0000
Manifest next update:     Thu 30 Apr 2026 11:37:51 +0000
Files and hashes:         1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: C52489RC5C7/6xA/AFGhqaTac2q7UpLljZUsc+WdOYU=)
                          2: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Lbof0Eu5fIUUt+ZOnyAgcQnzposa001pRsoMaWB/hPw=)
                          3: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: hwaFziLL+ZU/UGQhLXVdC2E8LQCqF1zjnbszdzQiEHA=)
                          4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:23:fa:90:f0:9f:27:d1:26:a2:b3:0f:19:8f:62:7f:38:bf:16:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
        Validity
            Not Before: Apr 27 08:07:51 2026 GMT
            Not After : Apr 30 11:37:51 2026 GMT
        Subject: CN=73CDB9D755409189A10ED67A2F7036BC6C78073B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:e4:5e:73:55:6e:90:5a:cb:27:a7:53:0a:
                    2a:50:90:19:d3:fc:98:ea:57:ea:11:c2:bd:df:c0:
                    87:44:a4:f4:b4:af:21:86:b7:6a:af:ae:75:96:e5:
                    53:7a:fb:f2:7a:1e:09:8f:73:1e:9c:7c:eb:ca:32:
                    c3:a7:be:d3:35:72:61:7a:ab:49:e9:95:bd:9b:80:
                    21:92:1f:33:b9:b8:de:5a:0b:76:e1:d0:38:58:b1:
                    33:f2:4c:43:84:44:38:31:05:4d:0c:2e:21:40:c2:
                    1f:9d:46:d2:ee:18:fe:14:76:6f:86:c7:77:37:0c:
                    9d:cd:77:3a:c0:e7:fa:70:51:da:b2:ae:97:6a:a1:
                    51:ff:48:59:63:33:f9:5a:14:08:52:0f:82:a3:8c:
                    01:0c:ad:78:bf:4b:62:31:bf:ab:5c:a7:ed:b7:97:
                    46:74:69:92:c0:53:c3:2b:c3:ae:21:c4:23:fd:95:
                    56:9b:f8:f9:4d:b6:c5:6f:a6:96:bf:9f:75:73:6d:
                    63:cd:76:4a:1b:4d:15:6d:d0:25:87:18:e0:d9:fb:
                    f3:a9:dd:b6:83:f3:80:60:70:30:7f:5c:e3:0d:54:
                    b0:ac:e3:77:bf:12:ec:40:ff:51:c1:29:cf:83:50:
                    6b:c9:be:cf:4a:1f:52:82:a1:60:15:6c:9c:c6:50:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:B9:D7:55:40:91:89:A1:0E:D6:7A:2F:70:36:BC:6C:78:07:3B
            X509v3 Authority Key Identifier:
                keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:f7:76:50:79:1c:b3:73:e3:30:e2:f6:1d:93:41:4b:0f:
         b4:1f:a9:12:a9:c9:63:d8:82:f0:01:2d:af:5f:63:e9:c9:99:
         f8:ec:68:20:0d:95:13:90:a0:e3:b2:65:28:88:07:45:15:4b:
         d7:08:c7:c4:10:4b:a1:e2:ea:37:8f:e0:0a:52:bb:a5:44:c5:
         7e:3c:b7:84:e4:e8:97:31:ea:5d:51:d1:08:2e:9c:2e:f7:0c:
         25:13:3b:36:c8:6d:14:f8:c5:ca:33:5f:74:d1:9a:7f:e2:69:
         2f:d4:b7:80:18:62:cd:30:a4:55:aa:3f:a1:13:ce:95:44:48:
         b7:2b:08:74:e2:c4:09:97:60:d5:ec:47:72:b3:4e:b9:db:4b:
         fd:16:b7:87:95:0c:dc:a6:0c:92:22:6b:69:c1:68:70:cf:b7:
         cc:44:73:2e:23:51:7f:df:e2:95:12:64:36:cc:13:a5:e6:20:
         9c:a9:8b:7c:3e:a3:c0:4e:c8:fe:c6:91:43:0b:48:1c:0b:5d:
         57:45:40:9a:85:04:fd:86:d3:a4:da:a1:70:d4:ec:8d:bb:97:
         03:0b:83:9c:ce:ce:6b:b8:20:f3:29:8d:36:cd:af:90:cf:2c:
         1d:a1:38:93:e1:c0:79:31:9e:73:31:3e:71:56:ad:ab:e1:c0:
         76:63:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----