Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft
File:                     215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json)
Hash identifier:          IJZkZpnqNFPTUgirWqAbI2VWSERQV3UXN9rNeqG/FSU=
Subject key identifier:   1C:B7:9B:28:FD:4C:4C:9B:BB:B7:11:FE:A7:2F:63:12:0B:B1:D5:CF
Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE
Certificate issuer:       /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE
Certificate serial:       4C6EC48FB5B92D3045C54D9A57DBE4BF3DB05FD5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft
Manifest number:          0183
Signing time:             Mon 27 Apr 2026 08:01:16 +0000
Manifest this update:     Mon 27 Apr 2026 07:56:16 +0000
Manifest next update:     Thu 30 Apr 2026 12:15:16 +0000
Files and hashes:         1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: qKtc40b4lQF3hAURWdkBNRY70djjte8YqcsMlRaaEzM=)
                          2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: ChFu4zHjfpKotPvEpey8zOpkOihQ9cCta9H0lNkeB8k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6e:c4:8f:b5:b9:2d:30:45:c5:4d:9a:57:db:e4:bf:3d:b0:5f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE
        Validity
            Not Before: Apr 27 07:56:16 2026 GMT
            Not After : Apr 30 12:15:16 2026 GMT
        Subject: CN=1CB79B28FD4C4C9BBBB711FEA72F63120BB1D5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:7e:5e:19:bb:6b:0b:55:ee:90:da:74:61:
                    16:56:e4:fa:67:b5:ee:e1:ce:e5:47:73:e3:6f:3a:
                    9a:14:f9:08:57:71:63:74:27:20:fb:12:66:92:50:
                    57:e4:56:ff:84:bf:f7:aa:b6:27:59:58:1d:9a:18:
                    d7:6a:d4:07:ba:39:35:e3:b6:34:88:8d:af:ae:7b:
                    48:d1:84:d5:40:98:dd:01:a6:ae:83:31:3a:da:83:
                    2f:d4:04:f4:4b:cb:03:72:e4:9e:a3:7d:bf:25:89:
                    4b:e7:58:43:8b:e0:33:a2:61:8b:f6:61:c5:03:b7:
                    8b:c3:b0:a1:92:22:a1:92:79:84:e6:d4:0c:5e:f7:
                    22:02:1c:f8:fa:31:15:d6:e9:04:2b:c3:8a:aa:15:
                    97:b2:3e:67:97:1b:2d:85:64:92:bd:0b:c4:02:29:
                    00:82:5d:b9:b3:10:98:2c:36:8d:04:15:e3:81:d7:
                    44:12:01:e3:25:26:13:6a:ad:5d:bb:37:bd:57:df:
                    eb:d8:85:3c:2b:c8:93:15:fe:d2:df:3a:ba:93:7d:
                    87:20:7e:61:c6:6e:23:ed:96:c1:06:01:e4:5f:f1:
                    92:52:aa:e3:70:d3:fb:4d:67:33:97:f4:84:af:5c:
                    18:c2:43:5c:82:d9:60:9b:70:28:ae:50:69:b0:61:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:9B:28:FD:4C:4C:9B:BB:B7:11:FE:A7:2F:63:12:0B:B1:D5:CF
            X509v3 Authority Key Identifier:
                keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:13:26:d3:57:a5:08:0a:e0:95:aa:e1:04:e0:dc:91:46:fa:
         50:dc:aa:67:a3:c6:4f:25:1c:1c:87:24:a4:13:6c:62:f1:49:
         cb:15:0e:38:65:fd:02:38:ed:82:eb:92:2f:7b:3d:ed:03:f4:
         83:b9:2f:ad:f5:fd:5a:f8:8a:8a:d1:db:98:e7:22:9a:f1:c4:
         79:77:7f:c9:ea:83:4e:b6:e3:0e:09:d2:a5:58:fb:ff:1c:af:
         03:6c:a0:8d:cc:e7:e6:af:9a:68:2e:91:41:4f:61:3e:7e:e2:
         61:27:4b:d2:ad:f6:6e:aa:31:ab:c0:8e:2c:12:3d:4d:b7:28:
         06:7f:ec:ea:27:78:a5:47:22:ee:0c:0e:9a:c2:d8:95:62:6b:
         bc:8e:ce:9d:87:7e:a6:59:13:bf:80:38:3f:39:cc:f0:f2:bd:
         22:10:e5:60:f0:e7:76:e5:f2:37:df:11:76:7c:49:e9:6f:ee:
         45:6f:6f:f1:fe:70:92:af:87:22:54:88:39:1e:07:53:cf:93:
         c9:f2:ff:ed:0b:e2:c0:5e:49:2a:bb:5c:66:d7:06:9a:94:8f:
         5c:f8:1a:1d:91:b1:14:ce:b1:48:59:aa:ad:70:bc:a8:a5:21:
         06:55:90:fd:35:4f:5a:9c:6d:7d:a3:0f:2e:ec:40:29:a7:9d:
         ee:9b:10:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTG7Ej7W5LTBFxU2aV9vkvz2wX9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy
ODUzRjVCRTAeFw0yNjA0MjcwNzU2MTZaFw0yNjA0MzAxMjE1MTZaMDMxMTAvBgNV
BAMTKDFDQjc5QjI4RkQ0QzRDOUJCQkI3MTFGRUE3MkY2MzEyMEJCMUQ1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCn5eGbtrC1XukNp0YRZW5Ppn
te7hzuVHc+NvOpoU+QhXcWN0JyD7EmaSUFfkVv+Ev/eqtidZWB2aGNdq1Ae6OTXj
tjSIja+ue0jRhNVAmN0Bpq6DMTragy/UBPRLywNy5J6jfb8liUvnWEOL4DOiYYv2
YcUDt4vDsKGSIqGSeYTm1Axe9yICHPj6MRXW6QQrw4qqFZeyPmeXGy2FZJK9C8QC
KQCCXbmzEJgsNo0EFeOB10QSAeMlJhNqrV27N71X3+vYhTwryJMV/tLfOrqTfYcg
fmHGbiPtlsEGAeRf8ZJSquNw0/tNZzOX9ISvXBjCQ1yC2WCbcCiuUGmwYV4fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHLebKP1MTJu7txH+py9jEgux1c8wHwYDVR0j
BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4
RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz
RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw
YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE
ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFcTJtNXpQgK4JWq4QTg3JFG+lDcqmejxk8l
HByHJKQTbGLxScsVDjhl/QI47YLrki97Pe0D9IO5L631/Vr4iorR25jnIprxxHl3
f8nqg0624w4J0qVY+/8crwNsoI3M5+avmmgukUFPYT5+4mEnS9Kt9m6qMavAjiwS
PU23KAZ/7OoneKVHIu4MDprC2JVia7yOzp2HfqZZE7+AOD85zPDyvSIQ5WDw53bl
8jffEXZ8Selv7kVvb/H+cJKvhyJUiDkeB1PPk8ny/+0L4sBeSSq7XGbXBpqUj1z4
Gh2RsRTOsUhZqq1wvKilIQZVkP01T1qcbX2jDy7sQCmnne6bEI4=
-----END CERTIFICATE-----