Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
File:                     8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json)
Hash identifier:          ACuYrkOlwiKcpUfk4cibiSHTlpEHoSPFoVgZjK0EvJU=
Subject key identifier:   E3:B2:6D:94:E2:2B:9B:4B:F5:A0:2E:7C:3D:26:C2:C3:A5:7D:16:10
Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Certificate issuer:       /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Certificate serial:       2769EF07BB69C4D8B0C53A8461C2BFCA8FC9B2C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
Manifest number:          039A
Signing time:             Mon 27 Apr 2026 04:20:03 +0000
Manifest this update:     Mon 27 Apr 2026 04:15:03 +0000
Manifest next update:     Thu 30 Apr 2026 11:24:03 +0000
Files and hashes:         1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: LFSva3ygEmuK1TNTISjRgSlIh/8XReOPrtf/qcBrseA=)
                          2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: h/Lxk4FxrFkB7JYtU4tgduZgScWCYIr0DVE2In9k2Gw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:69:ef:07:bb:69:c4:d8:b0:c5:3a:84:61:c2:bf:ca:8f:c9:b2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
        Validity
            Not Before: Apr 27 04:15:03 2026 GMT
            Not After : Apr 30 11:24:03 2026 GMT
        Subject: CN=E3B26D94E22B9B4BF5A02E7C3D26C2C3A57D1610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:ed:54:46:e2:5e:66:f4:d4:73:96:95:ca:
                    d1:63:7f:0a:2e:dd:a2:7b:31:68:1b:59:97:e7:d1:
                    db:c1:f4:69:6c:15:34:a1:14:27:d0:37:95:df:73:
                    48:9a:ef:16:96:9a:9e:df:e7:aa:f4:38:c2:61:36:
                    b0:ff:dd:cd:57:70:26:e4:9c:e7:0e:ab:41:58:4a:
                    f6:88:28:e0:f5:2d:67:bc:cd:37:e3:fa:7d:76:6f:
                    eb:0f:58:bc:17:06:9b:fc:a0:e6:86:58:85:53:69:
                    38:ba:ad:d4:65:a1:75:be:26:b3:7e:47:07:6f:72:
                    d0:9e:2f:15:a3:c7:f5:fe:d0:bb:d2:f6:8d:f4:ee:
                    b3:27:8f:1a:ce:4a:4e:7c:9a:41:22:28:5f:86:34:
                    c9:5c:4b:54:89:03:33:38:e6:e2:9b:60:d4:85:2a:
                    c5:c1:cd:ce:b7:86:9e:60:d0:92:fd:35:8d:3f:a4:
                    fc:0c:b1:ba:86:74:ae:9d:c4:ab:4b:ab:6a:b9:f9:
                    c7:d4:30:2b:5b:45:f2:e5:2d:9f:a7:03:87:6b:d0:
                    da:6a:c1:f7:8e:aa:e2:f4:07:2f:9f:40:11:63:f3:
                    9f:3b:4f:71:b5:27:d9:2e:f8:2b:de:a7:cc:58:c1:
                    a9:79:22:9a:bf:05:16:6a:04:18:d2:c5:ba:35:dd:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B2:6D:94:E2:2B:9B:4B:F5:A0:2E:7C:3D:26:C2:C3:A5:7D:16:10
            X509v3 Authority Key Identifier:
                keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:68:a6:2b:c0:be:91:f5:47:09:a8:66:ba:91:98:a4:81:1d:
         ce:8a:dc:48:0e:db:46:08:0d:4e:83:bc:9e:07:eb:24:cb:2f:
         91:92:cb:c5:02:02:8b:c7:33:44:00:93:14:92:8d:b7:e0:a8:
         e3:ba:a9:bd:58:c7:15:30:45:48:79:a1:2a:b6:2d:55:24:25:
         3b:0e:12:d6:64:0e:b8:9e:83:72:0e:8a:97:6d:9d:cb:3c:81:
         af:93:2c:a1:ba:5b:77:df:7f:7d:f6:b0:eb:17:ac:92:cf:88:
         aa:28:75:2e:c9:ed:93:a6:75:76:bc:54:43:51:c8:01:c7:04:
         74:a0:67:b8:06:02:4d:5a:5d:33:ac:33:5d:b0:55:cf:91:38:
         8b:aa:1b:b9:db:10:3d:f9:11:dc:9f:21:b7:8a:a2:5a:0f:d3:
         ad:cf:aa:80:28:46:4f:85:e0:62:00:d2:f7:8a:f5:90:eb:fe:
         5d:76:c0:ac:6f:04:d1:7d:0b:7b:1e:df:d8:66:8e:c4:3d:1c:
         1f:c7:84:27:39:dd:05:1c:38:d0:76:d9:fd:50:63:c0:4c:01:
         3e:a3:32:e9:ed:d4:3f:d0:4f:04:73:63:89:75:c3:5d:2c:cc:
         ee:07:ad:5e:d3:57:2a:f2:85:eb:44:65:51:cf:9f:49:00:a5:
         bc:2b:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----