Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
File:                     E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json)
Hash identifier:          BYFu6fkC0U2pNRDrywmDQaPsPwCJ4Dhlhz3r3xu9zOs=
Subject key identifier:   CC:F1:18:14:BC:38:4E:C0:C9:23:8F:91:4B:A0:BB:29:4E:91:0F:5E
Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C
Certificate issuer:       /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
Certificate serial:       123A6216CA16D7496E8B083699D39F7DADEA97CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft
Manifest number:          F5
Signing time:             Tue 28 Apr 2026 16:42:16 +0000
Manifest this update:     Tue 28 Apr 2026 16:37:16 +0000
Manifest next update:     Sat 02 May 2026 03:15:16 +0000
Files and hashes:         1: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=)
                          2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=)
                          3: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=)
                          4: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: 7cckoVMOPODYCSXasmaFpSX44UGx6/6eXZfK97JZFUw=)
                          5: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3a:62:16:ca:16:d7:49:6e:8b:08:36:99:d3:9f:7d:ad:ea:97:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C
        Validity
            Not Before: Apr 28 16:37:16 2026 GMT
            Not After : May  2 03:15:16 2026 GMT
        Subject: CN=CCF11814BC384EC0C9238F914BA0BB294E910F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:f3:cd:aa:6e:1a:62:75:47:98:87:c6:c5:
                    3e:1e:23:24:5c:4f:25:23:81:b7:2c:34:c5:fd:36:
                    ba:87:00:03:71:7c:c9:fb:f1:33:72:b3:b5:ec:f5:
                    e2:93:63:48:0b:6b:3f:74:fb:13:05:30:64:90:91:
                    35:10:7e:5a:45:3e:be:43:76:32:19:21:ce:f6:e4:
                    e8:cc:a4:b0:3f:da:c6:04:b4:61:f3:2c:c4:5e:d3:
                    ef:ed:57:fd:b1:0f:81:27:e9:19:d6:91:0a:19:ea:
                    6a:25:99:61:0d:18:4a:96:db:52:cd:e0:cb:0b:e3:
                    52:e4:aa:fd:8b:dc:50:8f:22:e2:1e:e3:ce:d8:1c:
                    a1:4d:e1:db:c0:3a:a6:90:6a:1c:bf:e8:85:75:6b:
                    17:c6:65:68:57:a5:d1:a8:b3:a5:f4:09:4a:90:1b:
                    88:e6:57:dd:1e:5a:92:db:d1:fc:de:b5:4b:3d:61:
                    83:9d:29:82:3e:cf:2e:bb:a9:ac:de:b1:84:65:9c:
                    78:1f:19:b3:50:db:01:2a:62:ed:04:3e:16:1a:59:
                    a6:ea:a2:7e:56:8a:28:0d:45:93:80:64:75:e3:9a:
                    09:0e:f5:84:8c:7f:a2:87:4e:33:74:30:02:93:9d:
                    51:d6:73:ad:2a:bc:ab:3d:4a:c5:da:c5:76:14:c9:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F1:18:14:BC:38:4E:C0:C9:23:8F:91:4B:A0:BB:29:4E:91:0F:5E
            X509v3 Authority Key Identifier:
                keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:31:d7:f5:6d:18:95:0f:03:1e:ae:6e:d3:ff:ca:fe:5c:d3:
         62:4a:c4:96:b7:8a:f4:ca:43:11:c5:a1:d2:8e:ce:32:14:cc:
         17:e5:d0:87:22:95:04:3c:69:0a:63:d6:18:2d:31:e7:27:14:
         d5:c5:03:18:99:cc:be:e6:fa:47:5f:71:ff:c4:cf:ac:c3:ed:
         52:49:88:13:67:ae:54:d5:0d:ea:61:72:42:c8:6d:2b:47:6a:
         b3:8a:51:70:93:a7:3b:cf:0e:36:12:96:9b:bc:4e:40:07:a6:
         12:b7:60:2d:c4:7f:52:c8:1c:b9:f8:50:06:42:1b:97:60:d3:
         9e:a6:c7:84:27:9d:d5:ed:79:f2:16:75:e8:5d:67:d4:be:78:
         67:eb:78:e8:2c:44:87:32:de:8d:e8:9c:a5:37:12:ab:ed:39:
         60:c8:e3:a9:61:33:3c:dc:0f:ab:5c:85:f6:6c:48:55:64:0f:
         85:38:91:53:10:a4:bf:a3:64:73:f5:ab:25:f3:97:8f:94:b7:
         7f:b9:e8:c2:de:eb:77:16:75:24:fb:36:f2:15:60:b5:0d:4e:
         35:fe:a6:1c:99:6c:72:24:f0:76:79:a0:08:f8:c8:bc:1c:92:
         85:a6:17:fe:91:d1:52:9b:4f:6a:de:71:1f:19:b1:61:bb:17:
         60:c4:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----