Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft
File:                     E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json)
Hash identifier:          r7z4ez3ghdTr477935cODFIgKZ4CFGnye1Mw1n0E6F0=
Subject key identifier:   8F:1F:22:FA:73:68:5B:F4:D2:8F:3C:BD:48:B3:68:FA:2B:04:38:42
Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE
Certificate issuer:       /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
Certificate serial:       2061189D9B40791D1CAC8A7AECFD5667B1309E18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft
Manifest number:          014B
Signing time:             Wed 29 Apr 2026 09:42:40 +0000
Manifest this update:     Wed 29 Apr 2026 09:37:40 +0000
Manifest next update:     Sat 02 May 2026 12:14:40 +0000
Files and hashes:         1: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: x6+W2ew2IGDif/4oRa7+ByCqRu3t4mPWFyouIb6H2v8=)
                          2: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: IyPHx8aV4XIvWehNSAX5HTGcu8KRFs0fdi9byvOJbdI=)
                          3: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=)
                          4: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: fD+JsAF5IMBZc8QZtWqpSCsBTsofz/k3tLOOnt504Pc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:61:18:9d:9b:40:79:1d:1c:ac:8a:7a:ec:fd:56:67:b1:30:9e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
        Validity
            Not Before: Apr 29 09:37:40 2026 GMT
            Not After : May  2 12:14:40 2026 GMT
        Subject: CN=8F1F22FA73685BF4D28F3CBD48B368FA2B043842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:2b:b8:ee:10:e5:54:dd:58:dc:8b:72:1f:
                    96:0a:9f:bf:9f:87:6f:2b:0d:d8:cb:96:08:87:61:
                    2c:a7:47:60:c4:cc:89:7d:00:ec:76:15:9a:ca:b4:
                    4b:e2:dc:a8:2c:e7:20:a5:1f:aa:00:42:d7:62:a7:
                    40:a2:b2:50:05:f8:12:ac:49:0d:20:3a:47:59:f3:
                    fc:d7:17:6e:1d:40:b8:8e:a3:9f:d4:55:c0:3b:a6:
                    04:cf:3c:8d:9a:48:46:59:a8:17:d2:9d:a2:29:5b:
                    c1:80:6e:9e:bb:dd:61:1e:f9:64:30:f2:b1:bc:0c:
                    7c:25:40:9e:fb:0c:61:78:e2:fa:02:f1:15:61:c1:
                    13:a2:9e:6c:6d:2f:0b:e2:61:30:3f:44:1e:fe:0c:
                    f6:73:49:f8:13:da:c0:d5:11:d6:bc:12:a6:32:9c:
                    c1:0e:23:f6:28:a8:15:f7:c0:7b:b7:cf:24:fa:ec:
                    b9:d4:c1:ff:b6:cd:bd:c0:dd:ee:cf:df:c6:72:94:
                    91:57:14:48:29:ec:1d:bf:b4:a9:3b:4a:70:b3:7b:
                    55:71:9f:fc:ce:00:d6:ab:0a:93:86:a1:6c:aa:12:
                    37:64:cb:9e:dd:be:36:d8:86:99:d9:45:bc:0a:cf:
                    ab:e7:c9:cb:ab:cc:1f:f0:1e:29:5a:a8:e1:ff:b8:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:22:FA:73:68:5B:F4:D2:8F:3C:BD:48:B3:68:FA:2B:04:38:42
            X509v3 Authority Key Identifier:
                keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:31:f3:5f:45:2e:e8:6c:dd:b5:03:28:bd:38:86:f1:7f:
         ce:f8:7d:2b:db:19:1b:d3:c7:c8:8a:f0:55:6b:50:95:52:78:
         85:79:a8:30:dc:1e:df:ae:5d:a8:02:64:bc:d1:5d:9d:5e:87:
         c2:c7:42:d1:c0:b7:62:9e:f1:e2:81:74:25:bd:82:65:09:bc:
         e3:c5:84:4d:ae:0c:e8:61:87:15:af:56:2d:7e:da:66:8b:4b:
         ed:91:73:48:b8:56:2e:da:53:08:ac:32:97:1a:63:8f:29:65:
         63:4c:d3:9e:36:a7:58:e2:a7:d7:9d:39:5d:cf:b9:d3:43:ba:
         a7:a9:0b:e7:4d:f2:2c:84:4a:d8:c6:38:1e:9b:c2:4e:17:80:
         fd:66:e7:7d:3b:8c:0b:97:9b:42:60:21:fa:41:6c:19:f0:0e:
         93:e0:c3:b1:54:6e:ec:2f:98:c3:4f:5b:23:7d:e1:3c:d9:06:
         70:7f:73:72:34:ad:5e:67:42:26:5c:23:f2:7a:71:f1:ab:28:
         57:d8:b6:d9:7d:a9:11:74:dc:7a:10:1d:77:38:91:3f:a5:f4:
         fe:a3:4b:e5:09:bb:f1:00:a8:89:9f:ac:be:31:36:f2:b9:b0:
         3d:e6:91:e3:81:1c:e5:18:8d:6a:7a:86:fe:2b:b7:f5:54:a8:
         a0:b7:02:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIGEYnZtAeR0crIp67P1WZ7EwnhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF
ODIxMkRERTAeFw0yNjA0MjkwOTM3NDBaFw0yNjA1MDIxMjE0NDBaMDMxMTAvBgNV
BAMTKDhGMUYyMkZBNzM2ODVCRjREMjhGM0NCRDQ4QjM2OEZBMkIwNDM4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUiu47hDlVN1Y3ItyH5YKn7+f
h28rDdjLlgiHYSynR2DEzIl9AOx2FZrKtEvi3Kgs5yClH6oAQtdip0CislAF+BKs
SQ0gOkdZ8/zXF24dQLiOo5/UVcA7pgTPPI2aSEZZqBfSnaIpW8GAbp673WEe+WQw
8rG8DHwlQJ77DGF44voC8RVhwROinmxtLwviYTA/RB7+DPZzSfgT2sDVEda8EqYy
nMEOI/YoqBX3wHu3zyT67LnUwf+2zb3A3e7P38ZylJFXFEgp7B2/tKk7SnCze1Vx
n/zOANarCpOGoWyqEjdky57dvjbYhpnZRbwKz6vnycurzB/wHilaqOH/uEy1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjx8i+nNoW/TSjzy9SLNo+isEOEIwHwYDVR0j
BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4
RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx
MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5
YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB
NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHsKMfNfRS7obN21Ayi9OIbxf874fSvbGRvT
x8iK8FVrUJVSeIV5qDDcHt+uXagCZLzRXZ1eh8LHQtHAt2Ke8eKBdCW9gmUJvOPF
hE2uDOhhhxWvVi1+2maLS+2Rc0i4Vi7aUwisMpcaY48pZWNM0542p1jip9edOV3P
udNDuqepC+dN8iyEStjGOB6bwk4XgP1m5307jAuXm0JgIfpBbBnwDpPgw7FUbuwv
mMNPWyN94TzZBnB/c3I0rV5nQiZcI/J6cfGrKFfYttl9qRF03HoQHXc4kT+l9P6j
S+UJu/EAqImfrL4xNvK5sD3mkeOBHOUYjWp6hv4rt/VUqKC3AqE=
-----END CERTIFICATE-----