Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
File:                     D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json)
Hash identifier:          TufMPA3AFuG/JQ8ZAQHnS2fNZ8RG3ewL3Gi9lIFkX4k=
Subject key identifier:   BA:78:84:5C:11:89:D5:05:36:AA:14:DE:95:24:06:03:39:8D:7F:9E
Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
Certificate issuer:       /CN=D6729321F95E264CBE7373469790C77F8B57E268
Certificate serial:       5CA1B399FF7F842A945BC171351F979F4D2B342B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
Manifest number:          0318
Signing time:             Mon 27 Apr 2026 06:30:00 +0000
Manifest this update:     Mon 27 Apr 2026 06:25:00 +0000
Manifest next update:     Thu 30 Apr 2026 13:51:00 +0000
Files and hashes:         1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: h9HWpUZjqwuAaP7uxV6EjM70C86M9FZJ3xzAzgOHeaE=)
                          2: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: wVFC1FBGXODCFBzY6nSXzINXfM5wX7bPR0WXMdekzF0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a1:b3:99:ff:7f:84:2a:94:5b:c1:71:35:1f:97:9f:4d:2b:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268
        Validity
            Not Before: Apr 27 06:25:00 2026 GMT
            Not After : Apr 30 13:51:00 2026 GMT
        Subject: CN=BA78845C1189D50536AA14DE95240603398D7F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:24:9a:f9:55:8d:c8:31:f3:ee:b1:a8:1d:
                    ca:84:5d:02:e7:6a:37:18:ed:61:41:c2:fa:15:51:
                    0d:47:c1:c5:ec:9f:42:86:2c:f1:22:c2:c8:1c:1a:
                    ea:0a:fb:c0:8e:8b:47:b9:4f:a0:f3:a5:e6:24:8f:
                    0c:0a:aa:48:83:80:2f:f1:47:f2:c9:3d:88:3f:04:
                    11:68:08:07:d3:fb:2c:a6:b7:04:ed:c8:6a:4a:d8:
                    de:cc:fd:fe:b0:b0:0d:b4:fe:fc:3c:f6:70:30:f4:
                    ba:e4:94:22:41:34:47:28:55:b7:0e:37:7c:71:b0:
                    94:5e:f5:cd:7a:3b:4b:66:a5:a4:65:a2:2b:27:5c:
                    f4:c4:02:0e:cf:8c:47:98:24:b6:53:b5:54:72:0c:
                    2c:3b:c8:40:9f:13:97:99:d3:8d:63:68:b8:16:ba:
                    66:88:4a:21:9f:90:86:2a:31:e5:37:ea:5c:fc:7f:
                    e9:db:28:b9:fb:ef:36:f1:77:71:77:4e:70:76:71:
                    3a:6f:f2:f2:22:2d:70:18:8b:b0:00:85:46:da:33:
                    23:e3:07:c6:db:00:dd:ad:35:31:eb:4f:0c:ec:05:
                    3f:e2:55:55:31:14:e0:7c:38:e2:68:50:bc:7e:0f:
                    cc:12:cc:14:7b:99:ad:6b:99:f6:3b:95:9d:11:5b:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:78:84:5C:11:89:D5:05:36:AA:14:DE:95:24:06:03:39:8D:7F:9E
            X509v3 Authority Key Identifier:
                keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:46:12:54:79:ec:d4:ac:b2:7d:3e:48:03:b0:b5:78:e7:e6:
         3e:b1:f5:43:7a:f7:23:ec:31:a4:87:7c:61:20:7a:84:57:de:
         bb:77:e8:dc:1e:ce:6a:76:e8:37:08:ab:f7:61:4c:73:e0:b3:
         7b:33:55:5f:39:5b:25:c7:5f:b8:ac:7b:4c:98:df:b2:27:40:
         59:86:2b:39:6c:b4:51:b7:83:30:b3:fb:07:d0:e8:0f:10:b7:
         45:f3:3d:ff:24:b3:2b:5f:d6:2c:a2:92:e5:fc:04:dd:e5:15:
         a3:a6:3c:a8:41:02:2d:cf:1e:f9:9b:6c:fd:2f:70:ea:a7:33:
         24:f0:23:28:72:17:44:4d:e1:a8:bc:75:96:e7:bc:bf:df:36:
         62:c6:2d:b6:5a:a0:e5:b1:93:56:45:b3:b3:d6:fe:41:42:cb:
         8e:36:11:2f:34:7b:2b:4f:20:b6:1f:5e:28:dd:b3:ef:5a:f7:
         91:d3:c1:56:62:ae:9f:07:7d:f4:9b:da:ce:06:d5:3c:19:74:
         a6:4b:e0:94:0a:00:71:86:d9:83:5e:21:86:57:e4:c5:c6:01:
         71:a2:9d:8a:55:53:3e:f0:44:11:be:bd:fa:4d:8d:cf:f5:4c:
         2a:cf:0c:d6:c9:d2:e3:41:0c:ac:ff:39:da:f7:b0:ce:84:ec:
         b5:a2:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----