Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
File:                     B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json)
Hash identifier:          YoB1oSC4x/jZ4v+EgggRH3jntuJ2qfFHz1o2gVMBZ5g=
Subject key identifier:   10:B9:A3:73:AC:A7:EB:A9:86:E2:01:C7:1B:F7:45:53:CC:72:A7:21
Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
Certificate issuer:       /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Certificate serial:       31BF9D4C52FA9AC24F38C36D3946AE114357CCC8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
Manifest number:          0117
Signing time:             Wed 29 Apr 2026 02:01:37 +0000
Manifest this update:     Wed 29 Apr 2026 01:56:37 +0000
Manifest next update:     Sat 02 May 2026 09:26:37 +0000
Files and hashes:         1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=)
                          2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: GA3Lq1SRKomhfyfVZhqFkUcR1pYyR4D+5XRqiEAl16w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bf:9d:4c:52:fa:9a:c2:4f:38:c3:6d:39:46:ae:11:43:57:cc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
        Validity
            Not Before: Apr 29 01:56:37 2026 GMT
            Not After : May  2 09:26:37 2026 GMT
        Subject: CN=10B9A373ACA7EBA986E201C71BF74553CC72A721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:c1:80:00:c7:57:4d:2e:56:86:60:23:03:
                    23:d4:d3:51:16:4f:b0:33:55:09:56:5b:c3:c7:7f:
                    d4:01:52:84:88:ba:9e:c2:88:6b:fb:71:c8:71:8a:
                    01:9f:86:f5:9b:bc:73:24:0d:33:c1:a0:de:be:f4:
                    ba:a5:84:3e:ad:74:da:9f:5d:91:20:63:4b:e9:57:
                    c3:41:71:a0:46:ce:4a:b6:0b:0a:b7:d1:a7:8d:ae:
                    1a:78:17:a0:1a:31:4f:11:e0:00:ba:5f:e0:ff:7f:
                    0a:43:b7:e1:c2:13:78:23:db:bc:e4:93:e5:65:33:
                    a3:e1:b1:42:83:bd:3e:fd:1c:dc:ab:7b:64:af:e5:
                    f6:28:9b:b3:72:7c:3a:44:34:66:6f:68:b0:8a:eb:
                    6e:00:f8:fc:5a:89:e6:dc:10:6c:7e:01:b6:03:bc:
                    44:9e:e6:9b:db:a3:86:24:62:45:54:17:7c:60:52:
                    3e:77:91:ff:4a:c5:61:fa:22:44:3d:29:36:68:2b:
                    ca:9c:7b:e8:4e:e4:97:ab:50:2e:69:8f:65:9e:4f:
                    10:ff:4a:16:c5:06:83:8b:20:8e:15:ca:32:a2:2f:
                    1d:89:f3:c0:dc:3c:e1:b7:d7:e3:b3:e8:eb:41:48:
                    49:a9:ea:ab:9f:fb:ad:ac:7e:fb:16:aa:06:94:ef:
                    ca:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B9:A3:73:AC:A7:EB:A9:86:E2:01:C7:1B:F7:45:53:CC:72:A7:21
            X509v3 Authority Key Identifier:
                keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:54:51:2c:5f:54:bb:8e:7b:f1:a5:65:f9:90:a4:c1:9a:e0:
         bc:ef:55:4f:bb:29:67:81:cc:6f:ac:b4:7a:78:40:70:c6:d4:
         7d:29:cc:aa:e7:2f:ed:c2:e1:04:38:45:a4:d6:10:07:f2:cf:
         b6:41:c1:7d:b8:d4:e8:19:85:bd:8d:33:59:23:06:49:dd:4e:
         16:a5:63:a1:0c:4a:af:5a:1d:b9:cd:c8:3c:54:3b:a6:90:d4:
         91:8d:a5:b6:9e:cc:ce:1e:b4:fb:9b:61:de:10:a3:c1:81:ad:
         70:2d:f5:45:bc:b1:87:f9:d9:59:c5:0c:e4:70:b5:a6:95:85:
         0e:64:e8:92:be:14:5d:cf:7b:b0:0b:a7:ad:61:a9:a3:98:b5:
         8b:bf:01:48:0a:39:1e:44:a2:e0:c6:7b:f9:83:68:7f:ca:19:
         1b:e0:a6:1d:d7:eb:24:ca:de:f6:08:65:0f:e6:3c:16:e0:79:
         d9:5e:88:8d:35:3a:0f:f1:9d:19:b7:35:3c:df:b1:fc:ca:47:
         36:5f:6d:7c:4e:97:49:84:0f:a2:65:b3:f1:c4:c9:58:d7:a4:
         0a:52:49:04:59:24:81:d0:a4:ee:07:b3:2b:6e:34:b4:79:91:
         14:2a:63:88:ee:e5:65:f9:fd:34:19:54:8a:35:5f:f4:c6:6f:
         73:4d:95:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMb+dTFL6msJPOMNtOUauEUNXzMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy
OUQxM0JERDAeFw0yNjA0MjkwMTU2MzdaFw0yNjA1MDIwOTI2MzdaMDMxMTAvBgNV
BAMTKDEwQjlBMzczQUNBN0VCQTk4NkUyMDFDNzFCRjc0NTUzQ0M3MkE3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICcGAAMdXTS5WhmAjAyPU01EW
T7AzVQlWW8PHf9QBUoSIup7CiGv7cchxigGfhvWbvHMkDTPBoN6+9LqlhD6tdNqf
XZEgY0vpV8NBcaBGzkq2Cwq30aeNrhp4F6AaMU8R4AC6X+D/fwpDt+HCE3gj27zk
k+VlM6PhsUKDvT79HNyre2Sv5fYom7NyfDpENGZvaLCK624A+PxaiebcEGx+AbYD
vESe5pvbo4YkYkVUF3xgUj53kf9KxWH6IkQ9KTZoK8qce+hO5JerUC5pj2WeTxD/
ShbFBoOLII4VyjKiLx2J88DcPOG31+Oz6OtBSEmp6quf+62sfvsWqgaU78ojAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUELmjc6yn66mG4gHHG/dFU8xypyEwHwYDVR0j
BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx
MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx
M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw
Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5
N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHZUUSxfVLuOe/GlZfmQpMGa4LzvVU+7KWeB
zG+stHp4QHDG1H0pzKrnL+3C4QQ4RaTWEAfyz7ZBwX241OgZhb2NM1kjBkndThal
Y6EMSq9aHbnNyDxUO6aQ1JGNpbaezM4etPubYd4Qo8GBrXAt9UW8sYf52VnFDORw
taaVhQ5k6JK+FF3Pe7ALp61hqaOYtYu/AUgKOR5EouDGe/mDaH/KGRvgph3X6yTK
3vYIZQ/mPBbgedleiI01Og/xnRm3NTzfsfzKRzZfbXxOl0mED6Jls/HEyVjXpApS
SQRZJIHQpO4HsytuNLR5kRQqY4ju5WX5/TQZVIo1X/TGb3NNlV4=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:31 2026 by rpki-client