Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft
File:                     665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json)
Hash identifier:          BN0jDy7Cr39/prGsSim++9UC4CkiD4xErI7ketSx/ps=
Subject key identifier:   0D:6A:41:83:02:D2:37:5C:0D:47:98:9D:A9:68:FF:89:59:35:A5:03
Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99
Certificate issuer:       /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99
Certificate serial:       7D308685EF2A6ACEBB41A860508B3C0A9C2AFB26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft
Manifest number:          034F
Signing time:             Mon 27 Apr 2026 19:10:55 +0000
Manifest this update:     Mon 27 Apr 2026 19:05:55 +0000
Manifest next update:     Thu 30 Apr 2026 22:47:55 +0000
Files and hashes:         1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: BHdzZJxDfnBUa7y/N8DHwNblI4A3a2w1WUwDJ6H+cls=)
                          2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:30:86:85:ef:2a:6a:ce:bb:41:a8:60:50:8b:3c:0a:9c:2a:fb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99
        Validity
            Not Before: Apr 27 19:05:55 2026 GMT
            Not After : Apr 30 22:47:55 2026 GMT
        Subject: CN=0D6A418302D2375C0D47989DA968FF895935A503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:c4:5a:b7:1d:f5:2e:58:a6:dd:ce:8a:cd:
                    fa:af:e7:af:63:d1:d5:a0:a3:71:67:ce:30:f0:33:
                    21:d3:82:f8:db:8a:59:9f:27:7e:92:8b:55:6c:18:
                    be:1a:22:4e:34:d3:de:34:66:b6:03:9d:c4:91:f2:
                    ae:1d:76:56:7b:79:dc:72:2f:68:58:55:73:76:b8:
                    d4:3d:f0:a8:b5:34:9b:7f:c6:be:0a:84:a6:96:5a:
                    7e:bb:d3:29:67:82:b9:55:94:d8:1c:48:ad:2d:71:
                    24:bf:09:8c:06:8a:f6:58:95:fa:f0:a1:38:37:19:
                    2e:de:eb:7d:24:4e:ef:c2:78:45:75:f1:60:a4:98:
                    47:a5:25:40:46:03:30:9b:01:51:32:22:f7:56:16:
                    dd:14:9b:e8:3a:85:e0:3a:fb:e8:dd:57:18:74:1f:
                    c8:a7:56:b9:47:5a:95:46:00:64:26:69:04:27:34:
                    35:45:c2:e4:2e:b3:de:16:e7:5f:83:df:f8:18:76:
                    e1:b3:2b:1b:4c:58:0f:23:7d:2e:e2:95:3b:d5:18:
                    0e:e7:19:65:0c:29:61:34:a0:16:5f:cf:1e:28:51:
                    87:d8:28:0a:b7:f1:dd:11:02:15:b4:9a:d4:df:6d:
                    f1:e5:47:84:ab:c5:a1:7e:d8:cc:bb:83:ee:35:e1:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6A:41:83:02:D2:37:5C:0D:47:98:9D:A9:68:FF:89:59:35:A5:03
            X509v3 Authority Key Identifier:
                keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:d8:0b:77:23:6c:91:ff:a5:97:b7:46:a7:44:7a:76:47:
         1f:4a:ea:73:d2:5e:20:1a:a1:ca:15:ce:bb:1e:c8:8c:15:cb:
         07:e8:a9:49:be:a1:1f:b5:fc:c0:a5:a6:dd:ad:52:01:66:34:
         0a:7b:a9:7e:4f:e4:ac:24:80:7a:ab:47:df:14:4c:43:df:0d:
         ed:61:a9:3e:3c:31:d4:4b:b1:82:a5:32:ae:89:a5:29:42:ae:
         79:e6:97:8b:9e:5c:a4:5d:ce:5f:fb:96:45:6d:16:5d:ec:c2:
         99:52:11:12:31:42:3b:24:6f:55:78:7e:68:09:83:18:35:10:
         b5:df:36:2f:7e:de:9d:3a:e7:e0:7a:7d:5c:ee:37:99:a4:e1:
         f2:52:62:31:45:6f:e5:47:86:bc:ee:5e:c1:8f:fe:1f:c0:21:
         7d:e3:ac:58:34:54:66:38:98:3a:34:6b:01:45:5d:d6:47:c2:
         51:dc:bc:72:17:8b:51:83:c2:f3:0b:e3:ff:4f:29:25:eb:d4:
         1b:e4:27:5a:83:4e:62:48:ee:a4:13:cf:5f:f4:40:1c:5f:62:
         6f:57:b1:91:b4:df:3d:5b:66:0c:88:12:78:67:ca:f0:f6:72:
         c3:c4:e2:a2:6a:c2:5d:b2:d5:67:fa:c2:3f:53:2d:8e:8c:f5:
         4c:f6:87:56
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfTCGhe8qas67QahgUIs8Cpwq+yYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB
QjQ0NEQ5OTAeFw0yNjA0MjcxOTA1NTVaFw0yNjA0MzAyMjQ3NTVaMDMxMTAvBgNV
BAMTKDBENkE0MTgzMDJEMjM3NUMwRDQ3OTg5REE5NjhGRjg5NTkzNUE1MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEE8Ratx31Llim3c6Kzfqv569j
0dWgo3FnzjDwMyHTgvjbilmfJ36Si1VsGL4aIk400940ZrYDncSR8q4ddlZ7edxy
L2hYVXN2uNQ98Ki1NJt/xr4KhKaWWn670ylngrlVlNgcSK0tcSS/CYwGivZYlfrw
oTg3GS7e630kTu/CeEV18WCkmEelJUBGAzCbAVEyIvdWFt0Um+g6heA6++jdVxh0
H8inVrlHWpVGAGQmaQQnNDVFwuQus94W51+D3/gYduGzKxtMWA8jfS7ilTvVGA7n
GWUMKWE0oBZfzx4oUYfYKAq38d0RAhW0mtTfbfHlR4SrxaF+2My7g+414TEhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDWpBgwLSN1wNR5idqWj/iVk1pQMwHwYDVR0j
BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE
QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0
NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk
MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE
MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACnS2At3I2yR/6WXt0anRHp2Rx9K6nPSXiAa
ocoVzrseyIwVywfoqUm+oR+1/MClpt2tUgFmNAp7qX5P5KwkgHqrR98UTEPfDe1h
qT48MdRLsYKlMq6JpSlCrnnml4ueXKRdzl/7lkVtFl3swplSERIxQjskb1V4fmgJ
gxg1ELXfNi9+3p065+B6fVzuN5mk4fJSYjFFb+VHhrzuXsGP/h/AIX3jrFg0VGY4
mDo0awFFXdZHwlHcvHIXi1GDwvML4/9PKSXr1BvkJ1qDTmJI7qQTz1/0QBxfYm9X
sZG03z1bZgyIEnhnyvD2csPE4qJqwl2y1Wf6wj9TLY6M9Uz2h1Y=
-----END CERTIFICATE-----