Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft
File:                     CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json)
Hash identifier:          eDRti4EcXJNL0kFxXbBSZZ2ZPvx6yr5DM/NJAoEiMIc=
Subject key identifier:   0D:B9:5A:61:72:0F:24:98:18:8D:D8:F1:2A:70:4B:67:34:05:39:89
Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB
Certificate issuer:       /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB
Certificate serial:       54AE427C34E341F95A841C96CE806412A6F8DDF3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft
Manifest number:          056B
Signing time:             Mon 27 Apr 2026 16:41:15 +0000
Manifest this update:     Mon 27 Apr 2026 16:36:15 +0000
Manifest next update:     Thu 30 Apr 2026 23:39:15 +0000
Files and hashes:         1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=)
                          2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: hSrybOjNSU24RxGmVh2OTE7rFEbpbQHhoCzHvzLGUk0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ae:42:7c:34:e3:41:f9:5a:84:1c:96:ce:80:64:12:a6:f8:dd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB
        Validity
            Not Before: Apr 27 16:36:15 2026 GMT
            Not After : Apr 30 23:39:15 2026 GMT
        Subject: CN=0DB95A61720F2498188DD8F12A704B6734053989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:7d:ab:61:6b:bb:7f:1d:cd:07:e5:22:c5:
                    e8:86:98:d1:3f:7d:d8:ac:64:52:8f:37:10:20:87:
                    84:20:4c:b3:52:89:ca:d6:07:56:38:a0:54:d0:76:
                    b3:f4:d2:c5:1f:75:b3:b0:bd:bc:40:5e:b3:e1:53:
                    e5:17:9c:86:b9:35:77:24:54:e5:76:96:0f:25:8e:
                    76:de:a0:bf:77:08:27:0d:8b:32:67:da:19:32:3f:
                    42:30:f0:ea:52:7b:3b:62:24:de:78:84:85:b9:dd:
                    3e:ac:44:3f:a9:e8:64:1b:d7:3c:69:f1:ce:93:90:
                    97:f1:2b:95:52:00:e5:43:ac:aa:0f:1c:0f:04:ca:
                    34:a4:40:fb:ae:55:35:38:04:23:86:8d:c0:1c:8a:
                    4c:f7:5f:38:cc:e3:6e:2f:24:9e:7a:9c:63:24:97:
                    8b:67:7f:fb:5f:0e:ec:56:91:bc:ff:f9:68:82:91:
                    89:f4:1a:5e:ce:52:72:b7:f7:f1:90:19:e2:8b:7b:
                    52:9d:52:b2:c0:28:f5:2d:b7:4c:b8:4c:4e:81:29:
                    80:45:91:06:5d:a0:40:13:75:b6:37:5b:0e:47:4e:
                    f9:d9:0f:48:c4:26:76:14:14:f2:b0:9c:5c:27:07:
                    0e:4e:55:35:b4:4c:e8:d8:98:34:79:64:4c:20:a7:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:5A:61:72:0F:24:98:18:8D:D8:F1:2A:70:4B:67:34:05:39:89
            X509v3 Authority Key Identifier:
                keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:59:a8:94:3a:de:03:d7:7b:e7:70:d1:93:51:41:c5:d9:bf:
         9a:64:e9:c1:51:e1:25:39:14:e3:0c:d8:3a:8a:f4:db:6d:53:
         9f:91:d7:44:19:a2:af:90:3a:91:97:3e:3a:e2:31:b2:6c:7e:
         d8:aa:0c:d7:dc:70:d1:23:51:0c:62:a2:6c:60:b4:a0:47:68:
         e4:53:c5:0f:69:3a:a5:2e:5c:c7:af:b4:c2:f5:e3:88:53:e0:
         71:8b:7a:d3:b8:93:fa:ff:19:cf:dc:f1:1a:de:d6:13:70:66:
         2d:27:bb:f5:a6:2a:d1:8c:63:cc:25:4e:81:ba:7f:8d:03:69:
         f8:0e:26:65:fa:c2:9f:49:92:6b:f8:7f:e7:e3:57:dc:11:1a:
         58:2a:f3:ba:56:41:c9:1e:96:f1:4f:aa:07:3a:89:6a:e5:78:
         2f:f7:23:71:02:54:50:3a:f5:1d:48:64:0b:d1:cb:51:ee:7a:
         dc:45:22:ab:e9:31:39:b2:12:4c:a6:d5:7b:75:92:a0:21:ad:
         1e:d4:5d:9c:6a:b1:c0:51:c7:2d:79:54:11:88:01:1a:5a:c6:
         d5:77:fd:f0:5a:22:0f:69:04:f0:a1:fa:af:fa:42:6e:52:78:
         2f:50:ae:aa:37:0c:ba:32:40:fa:2c:f6:ab:47:b8:d4:2c:1c:
         9f:f7:f1:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVK5CfDTjQflahByWzoBkEqb43fMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0
OEUxNkVEQjAeFw0yNjA0MjcxNjM2MTVaFw0yNjA0MzAyMzM5MTVaMDMxMTAvBgNV
BAMTKDBEQjk1QTYxNzIwRjI0OTgxODhERDhGMTJBNzA0QjY3MzQwNTM5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUn2rYWu7fx3NB+UixeiGmNE/
fdisZFKPNxAgh4QgTLNSicrWB1Y4oFTQdrP00sUfdbOwvbxAXrPhU+UXnIa5NXck
VOV2lg8ljnbeoL93CCcNizJn2hkyP0Iw8OpSeztiJN54hIW53T6sRD+p6GQb1zxp
8c6TkJfxK5VSAOVDrKoPHA8EyjSkQPuuVTU4BCOGjcAcikz3XzjM424vJJ56nGMk
l4tnf/tfDuxWkbz/+WiCkYn0Gl7OUnK39/GQGeKLe1KdUrLAKPUtt0y4TE6BKYBF
kQZdoEATdbY3Ww5HTvnZD0jEJnYUFPKwnFwnBw5OVTW0TOjYmDR5ZEwgpyoRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDblaYXIPJJgYjdjxKnBLZzQFOYkwHwYDVR0j
BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC
Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx
NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj
ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy
QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEdZqJQ63gPXe+dw0ZNRQcXZv5pk6cFR4SU5
FOMM2DqK9NttU5+R10QZoq+QOpGXPjriMbJsftiqDNfccNEjUQxiomxgtKBHaORT
xQ9pOqUuXMevtML144hT4HGLetO4k/r/Gc/c8Rre1hNwZi0nu/WmKtGMY8wlToG6
f40DafgOJmX6wp9Jkmv4f+fjV9wRGlgq87pWQckelvFPqgc6iWrleC/3I3ECVFA6
9R1IZAvRy1HuetxFIqvpMTmyEkym1Xt1kqAhrR7UXZxqscBRxy15VBGIARpaxtV3
/fBaIg9pBPCh+q/6Qm5SeC9Qrqo3DLoyQPos9qtHuNQsHJ/38ds=
-----END CERTIFICATE-----