Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
File:                     DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json)
Hash identifier:          r043lB8dyLNo5kkDb+kt3sKOLrAXP9YEUy8CQ7QUKvU=
Subject key identifier:   0C:F5:3B:AD:B4:A7:D6:4C:7C:13:24:1F:95:0B:6E:61:D1:AA:56:2F
Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Certificate issuer:       /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
Certificate serial:       4A0B57EE83177C5BD592B111255F39C6229ACA0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
Manifest number:          0567
Signing time:             Mon 27 Apr 2026 07:31:29 +0000
Manifest this update:     Mon 27 Apr 2026 07:26:29 +0000
Manifest next update:     Thu 30 Apr 2026 14:47:29 +0000
Files and hashes:         1: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 7Q0dwA0Rc1pnpyLnXxos7sM1Wj4t+yMR55gSNZ0dsoU=)
                          2: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: dkwLIgjutNqyS1fEiwY5jB8EjSSH9/0tY66Lo4b2moY=)
                          3: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: HgCBKlg9dj8cwyYCdbOaBqTHVOR+RUvYOr1xNwhUa8Q=)
                          4: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: u7MPei7+iN4f1OLKumfeRBmfOe2wgHqRvP7yaGUByuA=)
                          5: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: BlXsQ1QjfVoT6J0SDJFst3KLhMp6LiWyqHWFZlBXj2o=)
                          6: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: tDRK/Vdz8u2hhC9LdyJ4AT+BwDcg/REr12fUhDIA9Bo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0b:57:ee:83:17:7c:5b:d5:92:b1:11:25:5f:39:c6:22:9a:ca:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
        Validity
            Not Before: Apr 27 07:26:29 2026 GMT
            Not After : Apr 30 14:47:29 2026 GMT
        Subject: CN=0CF53BADB4A7D64C7C13241F950B6E61D1AA562F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:2a:87:90:ae:b0:d5:bd:53:2b:09:88:6b:
                    b2:58:0e:af:53:7f:df:a3:73:3a:cf:fe:18:df:fa:
                    fe:f5:97:66:ac:74:25:3d:ea:ff:01:b7:e7:59:97:
                    00:44:14:2c:ca:d1:60:82:f4:7b:cc:05:3d:c9:3e:
                    be:d6:2e:2e:a4:2d:c7:d8:e8:f9:1c:d0:65:f0:ca:
                    e0:0b:72:96:97:a0:33:7b:1c:fc:1f:bf:1f:b1:0b:
                    d8:f0:7d:26:e6:cd:88:30:84:5d:48:5c:bc:4b:d9:
                    3c:7f:cc:c9:59:e2:fa:88:70:82:e5:f0:b3:0f:97:
                    5e:53:2b:a4:88:90:a1:9f:04:f0:5c:51:a9:7f:0e:
                    24:b7:af:2e:b6:7e:52:05:38:fd:ae:3c:22:fd:28:
                    b9:e4:0a:bc:d6:13:9b:dd:a0:82:ef:3a:6b:c6:56:
                    2f:65:9f:ce:c4:a5:40:0e:6c:a7:d8:d6:41:75:e0:
                    37:ef:25:76:db:63:6f:3d:84:3a:17:79:6f:d2:7c:
                    70:34:df:5c:67:6a:65:08:c7:e1:42:19:e6:90:37:
                    82:13:1e:0b:8d:0e:74:cf:fe:04:2b:5f:f8:b0:f4:
                    ea:95:9c:a3:fd:f8:0b:b0:ed:df:11:9f:c7:c6:f7:
                    9b:ac:7d:c3:d7:20:b4:7b:53:13:47:46:24:bf:93:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F5:3B:AD:B4:A7:D6:4C:7C:13:24:1F:95:0B:6E:61:D1:AA:56:2F
            X509v3 Authority Key Identifier:
                keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:8a:56:7f:d1:a9:5a:62:fa:38:6f:1a:28:d7:0f:74:d6:
         79:42:b7:49:c5:96:0e:ee:ea:a1:28:af:f9:70:e4:4a:85:29:
         64:4c:76:8e:30:79:f0:e1:e6:9a:1e:9b:7d:06:9d:d8:74:b9:
         2a:e6:70:50:5b:3b:71:49:ae:b9:90:e5:87:cb:23:8c:f7:80:
         c3:7f:49:01:22:78:81:6a:76:5e:8d:e6:76:57:75:f1:74:33:
         59:d7:5f:fa:78:28:60:0b:90:b5:da:c4:cd:03:cf:12:32:b8:
         ad:19:54:43:b9:54:5a:6f:55:24:e6:11:96:d3:95:41:f1:5b:
         e1:b4:7b:b8:62:75:d4:1a:32:2b:bf:dc:77:ee:3d:6d:2a:d1:
         25:f4:c4:1f:f8:d9:bc:d9:0e:8d:75:e2:3a:7b:7f:d9:ee:e8:
         d2:55:60:11:ab:a2:9d:14:53:9c:7d:bc:f2:6d:37:b2:f1:94:
         4a:f6:1f:d4:cc:c2:f2:7b:8c:58:66:aa:73:f1:b0:68:42:b4:
         2a:42:1b:ec:d6:9e:a2:f2:69:64:f4:cf:9c:03:2b:8e:88:e5:
         74:31:45:ef:5d:62:fc:1f:18:b2:92:20:57:5b:36:f5:7c:5d:
         56:bf:cb:5e:5a:10:4d:3e:51:ce:99:29:23:cd:35:54:54:73:
         e5:c2:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----