Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
File:                     16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json)
Hash identifier:          6Vi2zNxsKz/oluy1bJcyyqWFN7iA9oMfEBqfXIz0QVo=
Subject key identifier:   45:B0:93:DC:AE:11:FF:71:1E:1B:63:0F:68:29:9D:C5:73:D6:A3:8C
Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
Certificate issuer:       /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Certificate serial:       41F39E323875A97711613DCC20820E97FC1999D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
Manifest number:          0191
Signing time:             Tue 28 Apr 2026 08:24:46 +0000
Manifest this update:     Tue 28 Apr 2026 08:19:46 +0000
Manifest next update:     Fri 01 May 2026 08:46:46 +0000
Files and hashes:         1: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: 1JGIVa7tRRkhUzjvHE8aXW4MVUcSTK2A5uQbYXK1Dk0=)
                          2: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: q8j/X9Ua/0mbnku+j9y9HsFIzPIhDRyObBOKzKCiRT8=)
                          3: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: hdkprfHwU4RXLgXXOBxZ9L/4dynqLbbepC7imEy91UI=)
                          4: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: u3jgsDSo3O7gCdt5jEOR1X0Y8olBMi4/W5ZYcUsryek=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f3:9e:32:38:75:a9:77:11:61:3d:cc:20:82:0e:97:fc:19:99:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
        Validity
            Not Before: Apr 28 08:19:46 2026 GMT
            Not After : May  1 08:46:46 2026 GMT
        Subject: CN=45B093DCAE11FF711E1B630F68299DC573D6A38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:54:2d:d0:dd:68:52:85:17:ff:3d:92:35:
                    e5:e1:01:b5:af:f5:cf:66:77:14:c2:93:3b:ac:86:
                    5b:6e:65:a4:08:32:9d:1a:c5:af:9b:a4:94:1f:de:
                    44:09:a0:a0:d1:8b:38:9e:8a:c1:64:4e:d5:d6:23:
                    5c:2c:f0:17:76:29:80:92:ad:e8:93:89:b2:d8:1d:
                    d8:a7:7d:94:22:c8:c1:96:9a:62:a7:38:10:e0:63:
                    95:17:b8:9e:55:aa:72:fd:d5:34:37:e7:f5:da:ac:
                    c2:29:f3:a5:23:ac:cc:da:eb:f9:7f:2a:8b:43:89:
                    24:24:ff:48:36:b6:91:31:47:69:0f:b1:71:9f:0e:
                    48:55:cf:8a:bd:27:84:26:27:54:d5:dd:87:01:1f:
                    a3:ae:4b:98:15:e1:03:34:d0:01:f9:5b:d2:f9:0c:
                    63:b2:dc:6e:b1:eb:29:5e:1f:bd:d4:1f:26:c2:3b:
                    30:dc:b5:e4:cd:20:fc:10:dd:bc:89:ad:f0:b9:d8:
                    2c:67:d0:c8:62:27:12:52:38:f3:13:bd:a0:17:36:
                    22:f9:a9:b3:2e:e8:58:8d:b1:da:49:a1:9a:c8:b0:
                    28:e5:4b:f0:bf:16:32:3f:55:ce:25:b9:70:b3:95:
                    bc:d3:2c:6c:28:e6:63:5b:f0:0a:d0:b4:b4:77:a2:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B0:93:DC:AE:11:FF:71:1E:1B:63:0F:68:29:9D:C5:73:D6:A3:8C
            X509v3 Authority Key Identifier:
                keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:7d:a3:2f:8f:fc:e3:fe:4c:4d:48:45:39:ab:a0:35:3c:
         28:df:f8:59:65:7d:03:12:81:fd:a3:1b:ac:56:b0:d3:02:c5:
         29:22:2f:42:18:81:f7:f5:3f:eb:c7:b4:07:17:a3:12:ff:af:
         dd:94:a8:3a:4d:ce:9c:da:95:30:44:5e:78:e4:db:ad:5b:ea:
         dd:92:f2:71:82:90:f3:d4:0d:2c:bc:f1:de:54:9a:7e:43:f6:
         83:09:72:33:d1:b5:60:1e:18:71:2d:d2:76:b4:7b:42:df:63:
         07:52:c6:3d:99:99:24:2b:3f:c8:ca:54:15:73:3e:4f:0e:47:
         21:dc:02:66:a1:7a:03:97:45:e4:ab:49:3d:39:02:bb:f8:12:
         73:c6:8a:80:b9:23:00:17:a8:c5:ae:d8:73:e4:17:bb:30:ff:
         cf:f1:dc:60:41:73:b9:a8:39:db:76:98:86:1a:74:2d:7e:37:
         a4:19:f6:87:83:02:1c:ff:8d:80:3e:7c:16:51:90:4e:7a:57:
         dd:e1:5d:7c:43:24:93:3e:1a:b8:a8:e5:ac:36:ca:b7:fc:48:
         56:e3:34:72:aa:fd:87:05:58:21:dc:b4:a0:cb:4c:a3:c1:df:
         b1:b1:cd:a5:82:68:e6:9c:51:a4:2e:4d:ab:8c:24:31:58:0c:
         b0:d9:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:11 2026 by rpki-client