Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
File:                     7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json)
Hash identifier:          BNYxtuopYROmDz50xTStfs3vj+56hOFgoVGsGIRToMg=
Subject key identifier:   32:7B:5D:FA:87:F9:2B:9C:48:4F:6F:B7:A9:7B:21:4D:2C:A1:25:88
Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99
Certificate issuer:       /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
Certificate serial:       56F9839F9B0FAC1C35CAF0603EE86FB97AD2B60B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
Manifest number:          01A0
Signing time:             Mon 27 Apr 2026 23:32:00 +0000
Manifest this update:     Mon 27 Apr 2026 23:27:00 +0000
Manifest next update:     Fri 01 May 2026 10:27:00 +0000
Files and hashes:         1: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: AGikL5mf3R6SUcLntlNendJ/c7wVC1wVAVxWd0F74Ys=)
                          2: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: 8IFHywzDvbojmdPSpGEacL1Js0pKLQWTfIzP2x0P4gE=)
                          3: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: L1QXmmmYL7avongM7Z18LqYgTBveJl41ce19oTEBc90=)
                          4: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: YOGZVl1pxBeHfHLB3kw7JsNB/ueNC1i2F+bIqbAKZQY=)
                          5: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 0CJAWZ02vSckzRoE57ZpZjjAeFM8kHecSgDHcs3TTPQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f9:83:9f:9b:0f:ac:1c:35:ca:f0:60:3e:e8:6f:b9:7a:d2:b6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
        Validity
            Not Before: Apr 27 23:27:00 2026 GMT
            Not After : May  1 10:27:00 2026 GMT
        Subject: CN=327B5DFA87F92B9C484F6FB7A97B214D2CA12588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:11:ce:7d:5b:bf:81:91:04:11:3f:1b:a6:
                    6a:b0:4e:d9:9a:d9:15:92:35:f6:be:81:44:6a:ac:
                    f0:dc:23:a2:5c:4f:b3:6a:12:fc:a6:3d:2a:2b:94:
                    30:6e:11:bf:d0:6b:a4:8a:30:7e:08:9c:e6:b6:47:
                    39:a7:39:22:06:02:93:8c:48:88:9e:bb:8d:6e:ff:
                    6b:37:a2:c8:c1:21:c7:e0:55:ab:cc:b3:1d:71:0a:
                    40:e8:7a:59:05:49:de:f9:c3:18:f9:1c:86:ec:12:
                    14:ff:a6:23:07:a1:8a:05:95:e5:0a:44:6b:42:41:
                    04:05:34:18:33:bf:1b:eb:b9:3c:be:0c:4f:cd:ee:
                    75:26:07:53:6a:9a:95:84:8c:7c:cb:03:83:26:7c:
                    ec:ac:24:2c:5f:77:78:4c:d8:ef:6d:e9:7e:1d:e5:
                    d6:7c:93:c2:95:28:28:84:24:36:12:b0:53:cd:2c:
                    59:81:85:2a:93:62:21:df:ad:c4:2a:29:74:37:46:
                    17:2d:a9:40:3a:76:e7:00:0a:d4:9e:c4:11:bc:a5:
                    3c:26:75:06:e2:28:96:0e:a7:b6:cd:1d:c5:fb:65:
                    b6:78:fc:25:35:ba:75:da:25:6c:54:4c:f8:f9:9c:
                    61:fa:9e:14:1c:3f:c9:66:c4:50:4c:1c:f3:91:15:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:5D:FA:87:F9:2B:9C:48:4F:6F:B7:A9:7B:21:4D:2C:A1:25:88
            X509v3 Authority Key Identifier:
                keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:43:d9:b1:27:5d:58:96:e9:da:37:cc:8a:c4:1b:57:ca:
         a4:f5:a9:2c:45:45:3f:d5:0f:0c:4f:f7:32:f5:91:42:c7:f6:
         f1:bd:45:d2:94:a8:51:7f:26:dd:e4:5e:72:b7:7e:ea:ad:22:
         97:8e:01:1c:dd:c7:64:dd:bd:56:fc:a8:11:82:60:cb:31:de:
         6e:9d:bb:d7:2c:6b:14:8e:d2:3f:b1:50:c3:dc:e5:79:60:7e:
         d4:39:37:40:3e:ed:a1:27:30:5f:a3:b3:a7:5d:2e:19:d9:aa:
         8c:57:35:2c:a7:53:34:52:9c:34:a4:de:b4:f1:09:3a:e2:d0:
         c0:c7:09:df:6d:9b:06:2c:6c:9e:12:4c:d0:01:f6:86:7e:59:
         64:fd:cb:01:1f:7b:3d:51:9c:92:07:ad:e3:6f:4c:28:4c:10:
         7e:79:6c:81:0d:80:d4:85:cb:b9:55:50:d7:fd:80:30:e4:f0:
         fa:f4:0d:01:b5:bb:c0:8d:99:ac:04:e3:4a:50:13:04:cd:bc:
         20:84:2c:b9:5f:2e:e9:6e:bf:8d:8d:4d:f1:f8:25:eb:a0:44:
         83:53:e1:da:71:a5:47:22:ce:52:a4:bf:8c:29:3f:55:01:34:
         82:f8:c0:b7:c7:a5:2d:64:7a:cd:7a:ec:00:a3:36:a7:a5:66:
         ed:bf:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----