Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
File:                     B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json)
Hash identifier:          TOBRKSCtw7IUGQgHNa+u1MCjfe5Lpq/u33V0W0mOfso=
Subject key identifier:   8E:A6:71:02:8E:71:38:C0:2B:FB:E3:D4:BF:D9:F2:5F:A9:84:35:D1
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Certificate issuer:       /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial:       0B480941AB64306009CC9183AA75843B458AC7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
Manifest number:          02CC
Signing time:             Mon 27 Apr 2026 18:31:47 +0000
Manifest this update:     Mon 27 Apr 2026 18:26:47 +0000
Manifest next update:     Thu 30 Apr 2026 18:33:47 +0000
Files and hashes:         1: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=)
                          2: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: 6wkPu0W/wFHCfKzpa13cvKmp+7EGlmnuZy/BP23O/gY=)
                          3: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=)
                          4: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=)
                          5: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=)
                          6: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=)
                          7: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=)
                          8: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=)
                          9: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:48:09:41:ab:64:30:60:09:cc:91:83:aa:75:84:3b:45:8a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
        Validity
            Not Before: Apr 27 18:26:47 2026 GMT
            Not After : Apr 30 18:33:47 2026 GMT
        Subject: CN=8EA671028E7138C02BFBE3D4BFD9F25FA98435D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:72:99:e2:c8:2c:c5:24:20:c8:b8:74:3d:
                    82:b2:e3:0e:53:21:f4:3a:28:27:a6:00:68:e4:74:
                    4f:bf:38:f4:e7:8b:37:c3:ee:08:0c:ff:2c:40:ea:
                    cf:c5:ad:10:6b:84:da:2c:4e:ac:83:5f:ca:11:20:
                    10:a7:55:ea:d2:7a:b7:31:4a:9d:d4:95:99:bf:e6:
                    d6:b1:ec:0f:b6:e9:c6:4f:17:80:3e:8b:65:84:50:
                    b7:95:34:46:29:ae:ef:e6:d5:c2:68:ef:89:b8:b2:
                    a6:12:46:ae:a3:85:bb:2a:ca:44:f4:d0:1d:22:67:
                    42:34:36:34:08:ca:e1:3b:d3:47:f0:2c:24:83:6c:
                    2d:10:91:b5:6e:b2:db:34:da:23:3c:26:f8:3b:36:
                    f8:8c:2a:4f:51:a7:92:69:ed:3d:71:a1:87:85:53:
                    f4:85:5f:60:56:e7:4d:41:2a:b2:35:56:52:38:28:
                    d5:9a:ef:92:7c:16:15:63:ad:34:40:11:77:2a:10:
                    f6:cd:45:f4:bd:43:a5:87:6b:fe:a0:4a:2c:c4:8a:
                    59:99:51:d7:89:ea:8c:9d:ef:e4:85:5c:ac:ea:ee:
                    4d:fb:e4:f7:77:99:14:62:9a:60:70:9c:a8:9c:41:
                    00:c7:f0:fe:89:bb:31:fe:2e:1a:91:51:06:1a:20:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:71:02:8E:71:38:C0:2B:FB:E3:D4:BF:D9:F2:5F:A9:84:35:D1
            X509v3 Authority Key Identifier:
                keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:85:f3:60:1c:0c:19:38:f1:08:fc:05:c6:ee:cc:02:d2:af:
         fe:48:81:64:ca:65:e4:88:a0:22:46:c6:64:2d:e0:56:c5:be:
         93:26:fc:68:75:7a:ea:ac:d7:20:4b:81:be:3e:8c:f6:f7:46:
         ee:ad:c2:f5:7c:e6:88:03:3b:90:7b:33:9a:f5:8f:17:5d:ab:
         90:34:1e:f0:e2:f4:55:bf:ba:12:5b:c5:ad:4b:89:a1:e2:03:
         63:a0:ac:6b:24:56:54:21:b3:31:56:83:b0:aa:fd:72:42:06:
         02:3f:4a:41:f9:e9:2b:d1:59:4e:b0:a5:db:e8:25:40:d3:d3:
         9c:46:8a:64:f8:da:4e:fa:53:1b:8e:8d:c1:9c:f8:e0:b9:6a:
         9c:3c:1c:db:7a:b1:38:97:9f:b0:81:50:d3:0f:cd:eb:3a:d9:
         81:c8:4c:77:c1:56:39:d9:63:60:e3:f7:d0:07:db:81:91:40:
         f6:e2:a6:51:c0:a5:7a:74:d1:49:6d:54:94:8f:cf:a6:2e:85:
         20:f6:a5:02:a8:8b:4c:e7:d6:d7:2e:89:90:3d:8b:d8:af:31:
         c8:0a:fd:65:f1:e8:58:f8:77:42:21:03:2a:e5:b7:ad:ae:44:
         0b:56:5d:48:1a:79:7c:9d:f7:b0:61:13:d4:f4:ec:ff:97:22:
         ae:61:4c:b6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITC0gJQatkMGAJzJGDqnWEO0WKxzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCM0E5Njg2QjFFOTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTRE
MEUxNERCMB4XDTI2MDQyNzE4MjY0N1oXDTI2MDQzMDE4MzM0N1owMzExMC8GA1UE
AxMoOEVBNjcxMDI4RTcxMzhDMDJCRkJFM0Q0QkZEOUYyNUZBOTg0MzVEMTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJkLcpniyCzFJCDIuHQ9grLjDlMh
9DooJ6YAaOR0T7849OeLN8PuCAz/LEDqz8WtEGuE2ixOrINfyhEgEKdV6tJ6tzFK
ndSVmb/m1rHsD7bpxk8XgD6LZYRQt5U0Rimu7+bVwmjvibiyphJGrqOFuyrKRPTQ
HSJnQjQ2NAjK4TvTR/AsJINsLRCRtW6y2zTaIzwm+Ds2+IwqT1GnkmntPXGhh4VT
9IVfYFbnTUEqsjVWUjgo1ZrvknwWFWOtNEARdyoQ9s1F9L1DpYdr/qBKLMSKWZlR
14nqjJ3v5IVcrOruTfvk93eZFGKaYHCcqJxBAMfw/om7Mf4uGpFRBhogrpkCAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBSOpnECjnE4wCv749S/2fJfqYQ10TAfBgNVHSME
GDAWgBSzqWhrHpXctodyraVbsTiuTQ4U2zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1
OGQ2ZGNhLTZkN2ItNDgxMS04NjJiLTBkYzVkNTdmYTJkOS8wL0IzQTk2ODZCMUU5
NURDQjY4NzcyQURBNTVCQjEzOEFFNEQwRTE0REIuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi9CM0E5Njg2QjFFOTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUx
NERCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9lNThkNmRjYS02ZDdiLTQ4MTEtODYy
Yi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFFOTVEQ0I2ODc3MkFEQTU1QkIxMzhB
RTREMEUxNERCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEA14XzYBwMGTjxCPwFxu7MAtKv/kiBZMpl5Iig
IkbGZC3gVsW+kyb8aHV66qzXIEuBvj6M9vdG7q3C9XzmiAM7kHszmvWPF12rkDQe
8OL0Vb+6ElvFrUuJoeIDY6CsayRWVCGzMVaDsKr9ckIGAj9KQfnpK9FZTrCl2+gl
QNPTnEaKZPjaTvpTG46NwZz44LlqnDwc23qxOJefsIFQ0w/N6zrZgchMd8FWOdlj
YOP30AfbgZFA9uKmUcClenTRSW1UlI/Ppi6FIPalAqiLTOfW1y6JkD2L2K8xyAr9
ZfHoWPh3QiEDKuW3ra5EC1ZdSBp5fJ33sGET1PTs/5cirmFMtg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:27 2026 by rpki-client