Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft
File:                     9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json)
Hash identifier:          kBO0GY0FDaGzpy2tp9AMTrj9FKSz7cPzk4ZvgSPLxMs=
Subject key identifier:   BC:8F:A9:90:A7:A7:4A:B7:BB:71:1A:A9:11:F2:45:5C:22:B8:BD:0C
Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85
Certificate issuer:       /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585
Certificate serial:       1ACD6A858CC38898EC7F31D40F21D9ADCF02B5B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft
Manifest number:          0123
Signing time:             Tue 28 Apr 2026 21:21:38 +0000
Manifest this update:     Tue 28 Apr 2026 21:16:38 +0000
Manifest next update:     Fri 01 May 2026 23:49:38 +0000
Files and hashes:         1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=)
                          2: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: CV0hQD6ZI/0NtG0pFr9knf7apptQHTP7opwql2cldm4=)
                          3: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=)
                          4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cd:6a:85:8c:c3:88:98:ec:7f:31:d4:0f:21:d9:ad:cf:02:b5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585
        Validity
            Not Before: Apr 28 21:16:38 2026 GMT
            Not After : May  1 23:49:38 2026 GMT
        Subject: CN=BC8FA990A7A74AB7BB711AA911F2455C22B8BD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:e7:af:40:d7:9b:53:9e:19:ba:35:77:5d:
                    73:03:64:f3:4e:a9:c1:e7:3d:21:a0:f0:8a:d9:54:
                    72:3b:a4:ae:4d:b0:54:1f:6f:ff:27:cd:90:7e:0f:
                    6b:8c:4e:78:9b:00:c1:1e:b5:23:0a:94:92:e4:02:
                    8e:19:f2:f0:f1:d1:90:91:c9:da:77:31:ab:e4:ca:
                    bc:31:3c:eb:e8:cc:03:10:26:c6:4b:0f:14:49:bd:
                    e2:96:4f:16:c7:1b:22:92:29:78:3b:2d:23:cb:62:
                    f3:7a:f5:7b:52:fd:a6:b5:f5:d1:59:17:69:46:70:
                    79:61:b1:70:d4:2d:d8:3e:92:39:b5:b1:29:fe:ae:
                    b2:39:d6:26:66:54:3d:fb:b9:22:f2:8d:8a:c8:0e:
                    9a:88:41:dd:a5:c4:85:47:fc:d6:08:e2:a4:de:c3:
                    97:5b:af:ca:73:d7:9f:b1:9a:f7:24:66:cc:c6:34:
                    16:ed:d0:95:74:7f:c0:ad:ec:35:cb:df:52:97:d0:
                    07:97:26:36:f7:23:db:a8:50:5f:d6:a3:a8:56:b7:
                    b1:ae:0c:6d:86:85:90:44:a4:4e:65:a9:34:26:42:
                    5d:dd:a8:64:48:a5:b7:e9:09:ed:42:cb:fd:c6:c3:
                    55:ab:cc:35:72:cf:cf:3a:89:ee:d6:c7:c7:ef:fc:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8F:A9:90:A7:A7:4A:B7:BB:71:1A:A9:11:F2:45:5C:22:B8:BD:0C
            X509v3 Authority Key Identifier:
                keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b0:03:82:55:ea:16:a7:f1:19:df:6f:2e:a6:07:99:31:a4:
         7f:a4:ce:20:19:48:e9:56:d5:7c:02:54:cb:fa:ab:92:7b:94:
         d9:e9:9d:ea:64:6e:0c:6d:bd:c4:1c:38:85:b1:f0:80:71:cd:
         b0:11:9d:bb:5f:30:cb:4c:8c:74:c1:09:a7:81:f9:0d:ab:ed:
         79:3a:3a:d3:5c:e8:8e:5c:1d:2a:ca:ec:bc:41:73:c4:9a:cb:
         48:21:5d:af:c1:e9:ae:90:dd:54:a4:76:42:62:44:fb:d1:cb:
         ac:83:06:17:e8:90:5f:f4:6c:ce:b8:75:8e:fb:2e:f8:48:e4:
         1b:0f:4c:bb:7c:82:01:2c:a2:4d:24:94:7f:2a:77:54:45:1e:
         64:d6:7e:ec:07:3d:48:c9:aa:ca:f6:58:3c:10:78:97:14:56:
         f0:97:d7:1a:1a:d4:ec:16:88:c6:60:39:b7:b1:6c:bf:c1:8a:
         65:12:32:07:5d:e1:b0:43:af:43:ef:fa:f4:e6:46:1f:f4:37:
         04:fb:70:4e:75:62:ca:b1:af:08:85:fd:d7:bc:20:c6:7d:2d:
         9c:86:d6:b3:09:7e:bd:cf:3a:7e:7e:ea:88:41:a1:2e:f1:96:
         9a:81:fc:d7:8e:a4:d9:6f:37:6e:e7:18:76:33:59:4d:af:ab:
         8d:e0:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:13:16 2026 by rpki-client