Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
File:                     1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json)
Hash identifier:          U8Z0j/d3Mc4/ly6FSVp1ySxwEVzTlgLOoJb9t5x0jdE=
Subject key identifier:   B3:F0:78:73:0A:37:A5:E1:A9:5F:D9:74:94:5C:19:57:20:45:F2:D1
Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA
Certificate issuer:       /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
Certificate serial:       62541BF3BD3B2B13E566589BD82FACD3535BA885
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
Manifest number:          CE
Signing time:             Sat 03 Oct 2026 17:47:14 +0000
Manifest this update:     Sat 03 Oct 2026 17:42:14 +0000
Manifest next update:     Sun 04 Oct 2026 18:58:14 +0000
Files and hashes:         1: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=)
                          2: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: i0jc/riOiMIqXEjfnrSGPd41D2Bedy0m485Clk2J4AE=)
                          3: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=)
                          4: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:54:1b:f3:bd:3b:2b:13:e5:66:58:9b:d8:2f:ac:d3:53:5b:a8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
        Validity
            Not Before: Oct  3 17:42:14 2026 GMT
            Not After : Oct  4 18:58:14 2026 GMT
        Subject: CN=B3F078730A37A5E1A95FD974945C19572045F2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:b5:53:71:88:51:92:b3:92:ee:c8:db:ea:
                    f4:93:99:31:e2:2f:f3:61:f8:37:82:b1:d1:4b:9f:
                    77:a9:1f:b8:13:2c:9a:9b:c4:ab:14:a9:42:94:b9:
                    84:7c:cc:71:04:ab:d4:30:4e:18:0f:89:8f:fe:e4:
                    66:25:e2:09:85:09:8a:1d:04:fa:a8:bf:81:d8:dc:
                    e6:be:c5:84:de:59:a8:60:aa:77:d7:87:fa:5e:17:
                    5a:df:72:7d:51:0e:ed:ca:72:53:73:ef:db:64:a5:
                    4b:18:c4:bf:f1:75:80:46:f5:a8:00:d8:62:c4:47:
                    5f:7c:db:e5:b9:3a:2a:5e:16:bc:0f:6b:8e:49:4b:
                    ca:1a:f5:39:a2:70:14:d3:56:8c:b5:4a:50:0c:2b:
                    3b:29:8c:89:07:d6:47:31:f9:b4:31:e2:09:20:d4:
                    b6:30:18:d8:4b:0e:ff:9f:7d:f7:75:24:2e:2e:1b:
                    60:0f:27:ac:00:0d:41:98:9f:1d:41:2a:ed:76:c8:
                    be:a7:21:46:72:f6:5d:b1:55:09:93:ca:c4:4e:53:
                    77:bf:3e:e1:4b:c5:69:20:0c:79:c2:be:dc:ab:9f:
                    36:5b:46:23:b2:23:92:31:8a:14:5e:59:44:e3:18:
                    c6:bb:42:0b:d8:38:f3:8d:3b:02:c5:db:b5:0b:0c:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F0:78:73:0A:37:A5:E1:A9:5F:D9:74:94:5C:19:57:20:45:F2:D1
            X509v3 Authority Key Identifier:
                keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:14:fd:28:5f:91:71:12:7f:f3:b1:68:30:5c:07:c4:a2:71:
         cc:74:6a:1f:24:8f:bc:44:be:c5:0c:40:0c:c3:a9:56:b6:94:
         c2:68:fb:a8:5a:4a:75:fb:fe:51:77:a1:73:3e:1a:1e:99:57:
         62:22:52:6a:06:44:38:19:15:b5:6d:f6:39:5f:44:b9:f7:38:
         4a:65:6c:d5:40:af:a8:09:8f:48:9e:8b:2b:8f:ff:46:1e:8b:
         fc:5a:7f:d7:f2:2a:9c:6b:2d:89:6d:d8:79:f9:59:22:b5:b9:
         36:2a:ec:da:71:97:ae:ea:cf:80:c9:b3:7b:84:66:10:a6:e8:
         26:e3:b8:0c:6f:ec:84:70:a2:0e:c6:57:91:55:02:cb:46:7b:
         f2:f3:c6:9f:fb:52:68:5f:44:82:e0:dd:00:5e:36:10:f1:d2:
         9f:30:09:05:c4:4b:fa:b1:40:f7:25:11:d4:8e:52:e9:ce:c6:
         db:be:21:cc:52:59:4c:e3:2c:02:18:27:84:d0:57:a5:09:51:
         3f:ca:ac:29:34:ca:f8:3f:47:73:68:2c:93:2a:a7:7b:e1:70:
         ff:19:70:b2:52:29:bd:f5:b5:30:c2:9b:00:0c:64:6e:bc:f8:
         a7:f9:79:86:2a:d6:55:08:bc:d7:fd:16:1b:ce:8a:38:0c:b1:
         37:88:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----