Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft
File:                     BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json)
Hash identifier:          jJkP35Cvr2DDf1S2PkR6fSaf+LZbOQcij0gQtRdMnM0=
Subject key identifier:   09:2D:40:D3:33:B2:A6:CE:83:0A:B4:C8:4C:4D:25:AC:74:9C:AA:40
Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C
Certificate issuer:       /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
Certificate serial:       7CC5BFD916E6A74F91B053799A0112D7C3DED122
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft
Manifest number:          0138
Signing time:             Tue 28 Apr 2026 19:52:23 +0000
Manifest this update:     Tue 28 Apr 2026 19:47:23 +0000
Manifest next update:     Sat 02 May 2026 01:46:23 +0000
Files and hashes:         1: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: uVhjikc+01ILAABNfYp2OgN/UN5xvnNbRu+Hb3oFuYo=)
                          2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: V+6ICfxJlzIXx0tsJaXlK0qkvR8zksD4IbjFfV4kF/o=)
                          3: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: PJhZnHXrtSkwY4/PVAs7mVXXuq51zTPsBe8jq3RzrCk=)
                          4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: t+VcXkUWUHKF6UOibDMpWswUlzEPH8qZz8XYAlMIEgc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:bf:d9:16:e6:a7:4f:91:b0:53:79:9a:01:12:d7:c3:de:d1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
        Validity
            Not Before: Apr 28 19:47:23 2026 GMT
            Not After : May  2 01:46:23 2026 GMT
        Subject: CN=092D40D333B2A6CE830AB4C84C4D25AC749CAA40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:98:50:97:d2:4b:bc:14:20:ef:fc:f2:ef:
                    b4:50:70:0c:53:ee:39:f7:04:13:b2:c3:1a:14:ca:
                    e5:0e:f5:94:59:34:63:14:21:c0:bf:03:50:74:e8:
                    58:1b:b2:67:09:ac:32:80:90:81:ff:c0:45:df:05:
                    f1:cd:31:6d:b1:5f:b0:0a:2e:19:18:ac:d7:43:c2:
                    3c:db:e9:6d:cc:d5:37:89:48:a6:55:9f:47:b4:07:
                    ec:4d:18:63:28:2e:f8:e2:42:68:84:69:f6:73:42:
                    6f:e8:61:e9:e4:9a:30:6a:89:d5:53:e5:07:aa:60:
                    0a:b0:6d:b4:ce:45:e7:26:48:fd:2e:72:35:67:49:
                    50:ca:47:96:69:02:94:ee:31:52:34:f5:af:c2:22:
                    0e:ed:a3:67:18:45:7c:93:d8:b9:4c:4d:e7:1e:c7:
                    48:a7:6c:de:4d:64:ec:3b:84:84:b1:9a:fa:f6:54:
                    a1:3e:0a:fd:2d:ee:b1:f1:98:af:54:af:51:a0:b0:
                    17:35:af:61:ec:fd:21:d2:96:e3:b0:e5:0b:21:98:
                    eb:d5:e1:fd:ab:bc:d5:63:a1:c2:10:d8:81:85:f4:
                    3a:db:0f:1c:1c:b6:30:4f:bf:a4:fd:66:98:b8:dc:
                    6d:2b:d3:dc:e2:83:e5:53:ff:7a:68:86:e6:e9:22:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2D:40:D3:33:B2:A6:CE:83:0A:B4:C8:4C:4D:25:AC:74:9C:AA:40
            X509v3 Authority Key Identifier:
                keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:b9:23:70:63:1e:80:85:e0:58:ff:1e:49:24:ac:d2:0b:
         2f:e5:76:62:7e:0f:d1:2c:d0:14:43:ab:5d:9a:bb:23:d7:43:
         d2:1b:a7:c1:e7:6e:47:b6:bf:3a:6a:cd:55:9f:c2:d5:0c:b7:
         b2:aa:e3:cb:49:01:76:bd:02:48:c0:e7:eb:f7:ee:63:0a:7c:
         d5:ca:f3:46:ef:d7:63:11:2b:9b:c0:e2:cf:f8:ee:3e:8e:49:
         b7:c9:a7:0d:1c:7e:96:39:10:44:e6:2a:0a:a1:9e:f4:4d:02:
         dd:b0:50:90:4e:73:29:45:94:f9:a6:b4:13:07:9b:01:74:19:
         64:a1:bc:0f:3f:86:78:7b:5a:f7:56:54:cc:dc:53:8e:8f:4a:
         ba:33:60:f0:c7:78:06:6e:93:e2:8b:51:f4:74:96:b5:59:21:
         a0:53:3d:0e:09:4e:f1:e4:aa:07:f1:8f:07:9e:1f:c0:f0:34:
         a7:45:13:4f:52:d5:ae:6a:e3:58:3f:a1:ae:84:82:a8:8d:b2:
         29:4f:0d:8d:6d:c1:79:8f:36:71:71:8d:af:ac:31:e3:6f:b9:
         df:9e:5e:45:22:ae:c5:e6:0e:91:40:ee:88:69:e1:a9:99:b0:
         47:60:7b:3a:2e:08:91:0d:f8:ee:34:f7:bb:01:21:7f:62:85:
         a1:69:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:58 2026 by rpki-client