Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
File:                     C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json)
Hash identifier:          gzKHb/h3HBmHNEoakkulBgEIAUcFYVsmpDEeGi+x69Q=
Subject key identifier:   F5:FC:A9:15:2D:35:03:0D:50:F8:81:AC:DE:6D:2B:E6:3F:78:D0:57
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       5F8FD9688C94D4561C37DC653072302D0573FAC7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
Manifest number:          04BC
Signing time:             Tue 28 Apr 2026 00:31:00 +0000
Manifest this update:     Tue 28 Apr 2026 00:26:00 +0000
Manifest next update:     Fri 01 May 2026 08:00:00 +0000
Files and hashes:         1: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=)
                          2: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=)
                          3: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=)
                          4: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=)
                          5: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=)
                          6: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=)
                          7: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=)
                          8: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: OlPjgKsNBQxjBnsetiXSkOlf5ElCoENy3C0yhndo6kU=)
                          9: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8f:d9:68:8c:94:d4:56:1c:37:dc:65:30:72:30:2d:05:73:fa:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Apr 28 00:26:00 2026 GMT
            Not After : May  1 08:00:00 2026 GMT
        Subject: CN=F5FCA9152D35030D50F881ACDE6D2BE63F78D057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:7a:2b:28:97:0e:1e:8d:8f:0a:55:96:c9:
                    75:ea:dc:07:4f:80:e8:23:23:11:0e:94:31:11:b3:
                    83:2d:8c:d4:dc:7d:dd:8b:6a:6d:d1:0b:16:d6:78:
                    09:d5:c5:fc:28:08:81:46:8b:03:77:03:7c:b7:3a:
                    55:b8:9e:97:7c:cb:c9:4d:6f:42:0f:1b:0d:b4:56:
                    88:08:ea:ba:b4:71:03:bc:59:21:e2:64:74:28:4a:
                    b8:69:40:7d:03:4b:7f:8b:aa:c0:a6:38:f8:64:f3:
                    98:2b:d0:3a:42:2c:b6:cb:d4:3c:57:b7:37:fc:ed:
                    7f:11:b7:c1:50:f4:44:3b:80:39:1c:26:b8:29:72:
                    be:e1:bf:c6:f0:6d:51:5b:4f:77:65:b7:9f:41:e9:
                    e8:0a:11:4c:ef:6d:60:bb:0e:7f:84:35:ca:92:90:
                    80:df:12:96:28:e2:89:82:da:1d:bc:84:2e:10:98:
                    25:60:53:81:4d:62:20:4b:e8:61:c5:ae:ce:fc:10:
                    a2:23:8b:49:0b:e0:6f:94:dd:47:d6:6a:cc:ca:f0:
                    a9:dc:cc:e0:04:69:f6:be:ed:04:5d:79:81:00:74:
                    5d:27:2e:bb:c0:5a:16:d7:c6:e1:2d:f9:ce:23:79:
                    7e:8f:6f:4f:6b:26:87:86:1b:46:3e:b8:82:d0:75:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FC:A9:15:2D:35:03:0D:50:F8:81:AC:DE:6D:2B:E6:3F:78:D0:57
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:99:50:61:90:0d:bf:49:b1:fe:27:02:1d:b5:d7:ad:a6:
         30:c5:13:83:be:af:a9:01:f2:a9:b6:9e:c8:e1:2b:d1:4b:11:
         ff:4b:db:52:c9:e0:a6:6c:ee:71:78:66:b2:c7:18:96:79:fd:
         11:d2:f4:00:9c:75:75:14:aa:60:f4:cb:5f:a1:e7:36:0e:13:
         23:52:d7:6e:d9:ae:d4:fc:6e:75:5a:46:4f:84:e9:8f:12:e7:
         db:dc:9b:75:d4:e4:21:95:df:ee:d6:02:6a:16:aa:41:7e:f9:
         88:ab:0d:66:f6:3f:be:07:7a:de:b0:08:71:4d:00:84:3f:93:
         c4:57:93:a2:ba:63:66:55:e0:a0:d1:39:bf:22:a5:70:ec:0f:
         29:22:fc:1e:f2:80:ff:8a:ec:7a:a9:12:2d:39:d1:ae:83:3d:
         ce:64:44:87:41:bd:93:e8:a7:4c:44:2c:6d:e6:6e:67:8e:1b:
         6b:8e:4c:d6:99:52:66:d2:a2:84:10:ec:d2:ca:9b:3d:3a:02:
         61:d4:ef:58:9e:74:ac:3e:29:af:d7:bd:52:fa:7b:54:a2:49:
         db:1b:39:62:f7:25:6a:14:3f:98:5f:29:8b:2e:90:a2:4a:33:
         d8:08:11:69:14:e5:54:e7:37:62:ed:c9:c2:41:74:e0:51:e8:
         7b:14:be:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:43 2026 by rpki-client