Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
File:                     3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json)
Hash identifier:          Fhlw9Ir2lQ8hCP+ZBK7vLUyhPBQ64MYN1c91IoUHxXY=
Subject key identifier:   B4:09:FF:0D:17:D7:34:AA:29:E5:C0:F2:6A:D4:C4:6D:73:31:3C:26
Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70
Certificate issuer:       /CN=3CA825E93FE8830376EF386786BF847CB239BE70
Certificate serial:       34C0749AC38F5DD79BCFBF5F274828A2665E965C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
Manifest number:          056D
Signing time:             Tue 28 Apr 2026 23:11:59 +0000
Manifest this update:     Tue 28 Apr 2026 23:06:59 +0000
Manifest next update:     Sat 02 May 2026 06:54:59 +0000
Files and hashes:         1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: KvZoNGcjde4fxc4dwIAFIrhHYnWKVx5Z9p4TY+XxkP4=)
                          2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=)
                          3: 3230322e3138322e35362e302f32312d3234203d3e203234323133.roa (hash: DlnKcd87VD3rZuVTk+tNhtDr4vaeUIcVlv5lIcH6uws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c0:74:9a:c3:8f:5d:d7:9b:cf:bf:5f:27:48:28:a2:66:5e:96:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70
        Validity
            Not Before: Apr 28 23:06:59 2026 GMT
            Not After : May  2 06:54:59 2026 GMT
        Subject: CN=B409FF0D17D734AA29E5C0F26AD4C46D73313C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:53:40:fb:28:b2:01:bc:e0:e0:da:46:bb:
                    34:d9:75:46:23:a9:a8:97:c4:4b:3b:49:e7:f9:13:
                    17:a4:fc:5e:47:94:ed:33:c5:2d:1b:4f:18:79:b9:
                    00:0a:4d:fa:86:90:5f:1e:3f:0b:0d:ba:29:27:28:
                    a9:8e:71:e2:dc:15:46:bf:c6:e2:d4:e2:a5:da:27:
                    75:b6:97:bf:ab:3d:16:1c:40:e0:17:f6:b0:7d:bb:
                    07:31:93:e8:e3:0f:89:30:52:d0:68:83:0e:73:8f:
                    ae:70:90:17:bc:65:1a:7f:2e:09:74:ce:e4:cb:1f:
                    19:64:9f:d1:b7:77:98:89:05:e6:18:8a:7a:c2:c6:
                    ba:b7:02:07:b0:8e:5e:c5:78:99:71:82:d0:2f:d3:
                    4c:de:be:43:e2:e9:eb:45:41:12:78:5a:d1:62:da:
                    92:bb:e0:39:20:e6:8c:3c:66:18:9d:16:3f:8d:3d:
                    3b:d5:c7:ca:c9:5a:72:5e:42:0b:0c:e2:2d:51:fd:
                    35:25:ad:79:48:1a:6e:5d:9f:f2:71:13:1f:6e:9e:
                    05:b3:1e:cb:c2:ad:0d:fe:0c:74:b2:8f:03:a8:ab:
                    7e:5f:c3:36:00:18:af:ae:44:64:52:87:a4:a3:cf:
                    1b:c1:ac:97:7b:80:e6:57:85:40:ef:7c:92:53:d6:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:FF:0D:17:D7:34:AA:29:E5:C0:F2:6A:D4:C4:6D:73:31:3C:26
            X509v3 Authority Key Identifier:
                keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:58:b1:1a:70:fa:9f:dc:31:d3:45:38:df:06:8d:46:d7:a5:
         88:64:b1:56:8c:7c:31:32:d6:c9:1a:06:30:af:c8:d3:4f:5a:
         8b:ac:fe:f1:51:14:fb:19:bc:9b:d6:e9:fd:8f:e3:9e:d0:fe:
         6a:9b:c6:9d:46:0d:83:11:e8:7a:68:06:63:f3:37:39:17:4a:
         74:eb:da:e0:d6:70:76:1a:cd:a4:a0:f9:28:af:6d:22:3d:0f:
         1a:38:76:b9:fb:8e:af:2d:d8:ed:fb:24:6c:cd:17:a5:1a:e2:
         10:aa:da:7e:3b:0d:06:1c:3d:e5:22:ac:26:a1:9d:d7:94:1e:
         38:7d:73:97:b3:39:e3:a6:54:fd:5f:6f:04:60:b1:76:9f:d5:
         6f:c3:10:7b:01:a1:a5:38:08:6b:0b:2c:40:36:49:c3:b1:cc:
         22:52:9a:bf:39:b4:c9:d4:15:32:08:f5:57:10:a9:3d:ad:dc:
         b9:ac:31:bb:6c:28:3b:a7:f5:0a:b9:36:5b:4e:af:f3:b2:21:
         02:cf:b4:1c:65:84:b3:4c:f5:a5:27:43:ac:22:c0:ed:25:81:
         08:4d:e9:48:1c:9a:22:02:47:aa:e7:81:8b:e5:2d:56:33:b9:
         c5:bc:1a:98:61:a9:78:57:3a:32:69:8a:09:57:98:5a:88:75:
         67:b5:44:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----