Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft
File:                     2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json)
Hash identifier:          i9fm0JigtQnhXQPbAEHwtu/thTIITzPV39yOKJsvWpo=
Subject key identifier:   13:58:56:BD:FE:5C:63:83:54:55:60:6D:5E:35:1F:BF:2B:F2:4D:6C
Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2
Certificate issuer:       /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2
Certificate serial:       1C01CA94C1930D666C5BC7B8DAAC15627CFF1A4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft
Manifest number:          013F
Signing time:             Mon 27 Apr 2026 16:51:51 +0000
Manifest this update:     Mon 27 Apr 2026 16:46:51 +0000
Manifest next update:     Fri 01 May 2026 04:24:51 +0000
Files and hashes:         1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: +OevkhB7r44OnQm82LNlP8LRDK9Y7/yxi7S+eG9f5A4=)
                          2: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: NhQf12TMByfPDgnDUkzmYoD+zfpYt6dHQ185bKqgHqc=)
                          3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: bSChIDo0CglmTqFSV6p630tLNxr15ZtjkZahOcEGfmY=)
                          4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: 58riNyfqbPP7fKRqZA+ufvmL363qEOUl7N/mxlGGnOA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:01:ca:94:c1:93:0d:66:6c:5b:c7:b8:da:ac:15:62:7c:ff:1a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2
        Validity
            Not Before: Apr 27 16:46:51 2026 GMT
            Not After : May  1 04:24:51 2026 GMT
        Subject: CN=135856BDFE5C63835455606D5E351FBF2BF24D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:3d:15:a4:15:0f:f1:8a:4b:8f:4c:11:2c:
                    77:5f:a7:71:2f:3a:d4:45:36:c8:26:8d:bb:af:8d:
                    96:3a:b9:65:bf:ad:e6:39:34:75:66:f5:74:ab:90:
                    cc:68:05:d1:7f:5c:0e:46:74:1e:e7:ef:04:be:31:
                    62:a7:23:00:0d:2d:8a:7a:0f:ea:24:b1:10:02:fe:
                    ae:e4:7c:db:e9:28:76:29:3e:29:3c:86:1a:fd:29:
                    26:9f:d0:16:78:cb:1b:3e:02:07:9d:38:b2:f9:95:
                    aa:1c:3f:ca:ea:ab:1d:44:0f:66:87:d4:dc:66:8a:
                    36:7b:de:02:08:7f:4a:08:fe:c1:f5:92:fa:bd:3d:
                    37:f5:4f:c1:82:e9:e0:5c:13:db:5f:de:b6:69:e2:
                    e1:88:7d:bd:a2:ba:f3:aa:84:a4:73:3a:7c:ee:a9:
                    8f:f9:4c:34:31:93:8b:ce:88:5e:cf:9b:92:b5:48:
                    19:a9:0a:4f:5c:90:f7:6d:a3:90:7a:15:0e:7b:02:
                    01:9e:cf:98:23:47:21:23:a2:4d:f1:0a:55:fd:4b:
                    5f:5e:f5:94:a4:04:c9:2b:86:d1:4b:9e:10:9b:d6:
                    ca:99:9b:b4:25:eb:4f:ef:5e:49:8c:ce:12:b5:2d:
                    97:3e:cc:bc:06:43:44:e5:54:a0:73:1e:d3:47:54:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:58:56:BD:FE:5C:63:83:54:55:60:6D:5E:35:1F:BF:2B:F2:4D:6C
            X509v3 Authority Key Identifier:
                keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:1a:40:fa:5f:24:00:8e:7a:b3:10:3e:d3:9c:27:86:4b:
         30:d2:7c:9d:cc:4b:2f:a4:a1:73:c2:bc:7e:20:9e:08:a3:0d:
         56:4a:f5:55:13:95:0f:77:57:16:b8:a8:67:4e:0f:72:65:9c:
         00:88:f8:e9:87:b9:ca:03:2f:2d:36:22:01:69:fe:15:2b:67:
         cc:25:0f:07:f5:d3:b2:1b:e7:94:fb:c9:bf:be:88:77:a8:ec:
         33:6b:54:5f:c4:aa:65:6a:3e:6c:fa:1d:0c:ad:7e:52:fb:b9:
         5b:c8:ac:a4:3e:40:1a:e5:8a:47:a8:a0:f5:b8:59:ca:1a:e9:
         c4:7f:4f:90:79:03:cc:9e:82:cb:0e:66:7b:b0:8a:2d:9c:c7:
         af:32:c2:a0:e2:e4:16:76:92:13:fa:13:e5:c2:d9:38:67:fb:
         8b:4e:79:32:0c:36:a4:1c:ee:83:c7:9c:22:aa:37:bc:c7:0a:
         ab:fa:43:25:57:ea:46:c0:07:a4:c6:3f:80:d7:52:c7:1c:3a:
         e9:ad:75:b7:08:16:ba:35:ee:8e:fe:b8:e6:52:f9:3d:f6:d2:
         56:ae:62:04:a1:61:15:ce:b9:fc:fa:7c:2e:b8:0f:3d:9c:cf:
         f0:b0:af:d4:c9:31:fb:16:7f:08:25:20:d7:d3:25:e8:6c:98:
         37:c8:37:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHAHKlMGTDWZsW8e42qwVYnz/Gk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE
Q0Q2RkRDMjAeFw0yNjA0MjcxNjQ2NTFaFw0yNjA1MDEwNDI0NTFaMDMxMTAvBgNV
BAMTKDEzNTg1NkJERkU1QzYzODM1NDU1NjA2RDVFMzUxRkJGMkJGMjRENkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20z0VpBUP8YpLj0wRLHdfp3Ev
OtRFNsgmjbuvjZY6uWW/reY5NHVm9XSrkMxoBdF/XA5GdB7n7wS+MWKnIwANLYp6
D+oksRAC/q7kfNvpKHYpPik8hhr9KSaf0BZ4yxs+AgedOLL5laocP8rqqx1ED2aH
1NxmijZ73gIIf0oI/sH1kvq9PTf1T8GC6eBcE9tf3rZp4uGIfb2iuvOqhKRzOnzu
qY/5TDQxk4vOiF7Pm5K1SBmpCk9ckPdto5B6FQ57AgGez5gjRyEjok3xClX9S19e
9ZSkBMkrhtFLnhCb1sqZm7Ql60/vXkmMzhK1LZc+zLwGQ0TlVKBzHtNHVKCRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUE1hWvf5cY4NUVWBtXjUfvyvyTWwwHwYDVR0j
BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF
RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2
RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll
ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG
MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKWNGkD6XyQAjnqzED7TnCeGSzDSfJ3MSy+k
oXPCvH4gngijDVZK9VUTlQ93Vxa4qGdOD3JlnACI+OmHucoDLy02IgFp/hUrZ8wl
Dwf107Ib55T7yb++iHeo7DNrVF/EqmVqPmz6HQytflL7uVvIrKQ+QBrlikeooPW4
Wcoa6cR/T5B5A8yegssOZnuwii2cx68ywqDi5BZ2khP6E+XC2Thn+4tOeTIMNqQc
7oPHnCKqN7zHCqv6QyVX6kbAB6TGP4DXUsccOumtdbcIFro17o7+uOZS+T320lau
YgShYRXOufz6fC64Dz2cz/Cwr9TJMfsWfwglINfTJehsmDfIN/E=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:13:46 2026 by rpki-client