Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          flVTRtVLWHPX1uNPR9DCVw71+OcD1MIbmc5wY7DqN/I=
Subject key identifier:   97:54:52:D5:B8:15:18:87:39:1C:70:0B:AA:82:E5:BB:67:40:B2:28
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       0A7A80B21E580960508E4C6D072AF0AD490308C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          057B
Signing time:             Mon 27 Apr 2026 13:42:48 +0000
Manifest this update:     Mon 27 Apr 2026 13:37:48 +0000
Manifest next update:     Thu 30 Apr 2026 17:28:48 +0000
Files and hashes:         1: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
                          2: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          3: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
                          4: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
                          5: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
                          6: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          7: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
                          8: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
                          9: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: 9rkQB3ScnR5pQEuBGTTESQ4f3NHbwtE+6Llvh3Mie1Y=)
                          10: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7a:80:b2:1e:58:09:60:50:8e:4c:6d:07:2a:f0:ad:49:03:08:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Apr 27 13:37:48 2026 GMT
            Not After : Apr 30 17:28:48 2026 GMT
        Subject: CN=975452D5B8151887391C700BAA82E5BB6740B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:75:95:b7:81:d0:b0:bc:e1:45:9a:c4:01:
                    6d:47:6a:1f:d0:5c:d3:2e:58:7f:1a:38:f0:fd:f0:
                    b5:10:77:29:54:c3:b8:11:27:c3:d4:28:2e:ae:d3:
                    0b:11:e0:d8:55:6a:55:b5:2f:11:30:93:e5:f3:d6:
                    63:bb:cd:aa:0e:c7:7f:c3:43:65:af:35:98:57:2a:
                    2f:9e:11:37:1b:6f:33:b6:ee:48:d8:66:0f:a3:c9:
                    14:ac:b8:97:12:dc:33:67:40:87:50:1f:14:a1:c7:
                    7e:60:0f:67:c5:6b:43:ce:c7:7b:90:21:a4:79:0d:
                    dd:39:8b:ec:25:da:36:47:89:3a:7e:3a:05:23:be:
                    5c:75:c7:a7:85:a8:b9:2d:66:56:8c:54:97:e1:fb:
                    68:32:11:06:f1:b9:8f:65:ff:6e:55:6f:2b:1d:b0:
                    ed:bb:e9:bf:54:73:0e:6b:87:23:7b:72:1a:7d:b7:
                    24:f1:95:9b:1e:e8:ad:cb:25:ee:6a:a9:3b:a4:a6:
                    57:1d:e0:ad:f0:a4:f6:d4:16:76:af:63:fb:f2:81:
                    04:af:56:de:dd:bb:32:50:1b:b8:ec:80:45:11:4d:
                    d2:29:56:d6:5b:1a:e3:f1:64:85:1f:ca:2a:b0:80:
                    38:be:6f:0e:db:c2:5f:4c:e1:b5:08:4a:29:2e:1e:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:54:52:D5:B8:15:18:87:39:1C:70:0B:AA:82:E5:BB:67:40:B2:28
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:65:84:37:a8:fe:a0:fd:ab:e1:14:26:a9:bd:ae:2f:23:
         f7:e2:87:5f:78:05:76:77:a7:d0:4c:b1:9a:cd:9b:c7:af:2e:
         b0:56:4d:73:1b:68:b3:88:eb:bc:f4:06:89:e4:16:c9:7f:31:
         32:6a:a5:2d:82:ee:0c:16:95:20:ed:fc:d4:bc:82:2a:68:5f:
         55:81:8a:25:60:25:28:59:01:cc:c5:17:57:9e:5f:6a:33:05:
         16:ec:c8:5c:29:65:0b:04:9d:5f:72:44:3e:aa:77:bc:45:35:
         20:04:03:bd:bf:ba:89:b2:99:ac:91:4a:20:d4:9e:c2:79:2a:
         d9:4a:d4:23:ae:db:76:db:e7:29:d5:6a:a1:b9:ef:33:6f:07:
         2c:2a:27:a3:21:1c:57:ed:3a:e5:1e:cc:0c:53:ac:6c:91:7d:
         fa:46:5c:21:71:b1:e4:c5:b0:68:01:9e:52:36:6a:9b:02:2f:
         ca:57:98:66:0d:9c:32:d6:1c:9b:b6:bc:cc:a7:c4:7c:86:c7:
         b3:90:04:f6:73:48:d6:e2:80:05:41:e5:f9:11:e2:d9:73:c6:
         ce:e9:fa:ed:77:9e:d5:7f:ba:3a:bb:5b:e4:14:a9:6e:12:46:
         b3:6a:4d:a9:f0:ca:20:c8:b7:6d:04:0d:1d:e7:d4:45:ca:fe:
         c7:9a:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:23 2026 by rpki-client