Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
File:                     7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json)
Hash identifier:          mh3p3sOGWvEvbFbF6JcB9s7ma8bWDPCce+axyELFHDY=
Subject key identifier:   85:FC:F5:8E:67:91:DE:89:47:57:91:CE:4B:DD:7B:FC:96:E3:C2:2F
Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
Certificate issuer:       /CN=7470038419B67CD1743CE4D96953077ECE6928FE
Certificate serial:       36BCA9B2C90837CA42792FB8D4D47D3EBFAA1415
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
Manifest number:          0237
Signing time:             Mon 27 Apr 2026 12:12:05 +0000
Manifest this update:     Mon 27 Apr 2026 12:07:05 +0000
Manifest next update:     Thu 30 Apr 2026 13:42:05 +0000
Files and hashes:         1: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: mrWkssqQd3aYW2KiHSvPo/X7/OXK1ANdbeMaKA/S9ek=)
                          2: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: XMfcxb2cyU/BTawAea91z/0xjspg0vqpK5L29ZTTMeY=)
                          3: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: PrqwHi6VDGsbOfGzpQVys1jP9vQnIVrI8cB9N7l7cwc=)
                          4: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: tMxmqnyNs+AqUZmzCKA8ba+dMpF5PucwNl1kbWxh19Q=)
                          5: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: pDyawm8Ut1xJC/Kb1Iiv+fIq9ylWhbkOkOXsv+y8R04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bc:a9:b2:c9:08:37:ca:42:79:2f:b8:d4:d4:7d:3e:bf:aa:14:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE
        Validity
            Not Before: Apr 27 12:07:05 2026 GMT
            Not After : Apr 30 13:42:05 2026 GMT
        Subject: CN=85FCF58E6791DE89475791CE4BDD7BFC96E3C22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:39:96:09:61:88:20:61:58:b1:a1:a8:9e:
                    1a:97:66:ab:0c:b7:db:e5:7d:3d:fa:b8:c3:bd:a2:
                    60:9e:fd:ef:1e:02:ab:6c:a4:b9:34:98:04:d8:98:
                    80:26:ee:07:f1:04:2a:52:69:6f:20:65:99:6f:4a:
                    f1:78:92:7c:87:fa:65:28:7e:95:65:66:48:b0:86:
                    75:40:7f:17:d4:40:55:b9:6c:0a:1d:ef:99:a1:dc:
                    15:00:01:38:2d:76:1e:66:df:1a:d9:f9:59:60:56:
                    14:55:0a:69:9b:fc:79:ea:fa:fa:84:5f:72:ed:b7:
                    79:07:82:02:ff:4e:e1:08:d5:39:3c:75:bd:92:9f:
                    76:ac:25:e9:a1:f8:5f:a2:ad:4f:05:37:67:56:1a:
                    06:3c:e2:4f:8c:02:38:20:1a:83:1e:7f:f6:e3:06:
                    b3:cc:f2:52:65:74:d3:a6:3c:81:f8:91:1c:3a:93:
                    08:7b:19:be:c1:8a:ad:63:fd:23:54:ca:b7:a9:27:
                    ac:b1:08:3d:b4:87:14:41:c9:93:8f:51:af:d7:fa:
                    67:ce:5d:64:6a:86:fe:ab:09:ed:11:6e:4d:20:11:
                    8b:bd:fd:b6:5e:ee:35:0e:51:60:56:c3:90:df:2e:
                    2c:d5:3e:38:e2:fb:00:30:e0:19:26:0b:3c:f3:de:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FC:F5:8E:67:91:DE:89:47:57:91:CE:4B:DD:7B:FC:96:E3:C2:2F
            X509v3 Authority Key Identifier:
                keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:c0:70:2c:0f:bc:0f:f8:8b:54:a3:ff:35:ee:fb:20:47:
         64:ed:48:97:cb:f8:99:ae:fd:82:99:5d:1c:59:1d:bb:81:23:
         fd:82:42:f6:eb:6d:84:e0:cd:b1:18:93:03:ca:b5:9f:5f:dc:
         88:cf:df:63:c7:7f:ea:8c:2f:93:72:ca:7f:5e:fa:94:ca:0c:
         69:b1:a1:eb:64:04:84:14:fc:80:9d:79:f5:b6:81:5c:37:e0:
         13:01:9c:e1:e0:42:27:37:4d:05:c8:10:05:4c:c0:93:3d:b5:
         6e:7c:f3:ec:32:b9:d9:ac:b5:a9:2f:ba:11:be:4a:ce:03:29:
         86:27:56:76:34:ed:0d:96:25:3e:3c:8b:c9:d4:18:59:14:56:
         f5:36:5e:aa:be:2e:de:f2:d3:5f:6f:51:2f:6a:27:a6:69:37:
         ef:c4:7b:f8:bc:63:93:3f:16:9a:21:cd:76:62:d4:5d:60:e2:
         4a:f0:37:ee:f0:a9:de:9e:4a:ee:61:a8:2a:7e:3d:04:28:a3:
         43:db:6c:80:20:22:a3:74:32:48:75:20:2a:ad:1a:ae:c8:d7:
         0e:65:c2:f5:4b:c6:0c:95:b1:25:67:61:62:cb:24:a7:4c:39:
         20:d3:8d:ee:49:22:ef:cd:63:9d:c0:74:da:21:48:ab:c5:dc:
         5d:77:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----