Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft
File:                     2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json)
Hash identifier:          fsmHMPIdFpIwhprr9PD2dpdz5r9WRk44PslOMJGB3aM=
Subject key identifier:   0B:25:67:B1:44:2C:FE:25:15:1F:8C:E9:FA:75:57:2C:58:F5:A7:AE
Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1
Certificate issuer:       /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1
Certificate serial:       07650D90829D47476ED899036DC48A8A75756F4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft
Manifest number:          02BE
Signing time:             Mon 27 Apr 2026 12:51:23 +0000
Manifest this update:     Mon 27 Apr 2026 12:46:23 +0000
Manifest next update:     Thu 30 Apr 2026 18:03:23 +0000
Files and hashes:         1: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: uSzBN61VjNugxnFtdmn55QCfTiv4UjZL/cWrBYUaKgE=)
                          2: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: 2+dHh7hdBXnoulVtV3vh/aZExde4zlnN/x+FKzsY4DI=)
                          3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:65:0d:90:82:9d:47:47:6e:d8:99:03:6d:c4:8a:8a:75:75:6f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1
        Validity
            Not Before: Apr 27 12:46:23 2026 GMT
            Not After : Apr 30 18:03:23 2026 GMT
        Subject: CN=0B2567B1442CFE25151F8CE9FA75572C58F5A7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:cf:68:c1:a1:cd:0a:8c:65:ec:67:c9:2b:
                    b8:58:14:90:2d:60:f1:f5:2e:32:6f:66:43:0f:8e:
                    6e:09:61:41:aa:71:c3:7a:21:e7:db:c3:48:af:c8:
                    bb:ec:2b:90:b8:15:13:ad:c2:62:f2:42:52:c4:b8:
                    c8:91:b1:43:3a:8f:5b:85:39:6f:45:c2:1e:4d:62:
                    96:e4:04:7d:3b:ea:a2:88:9a:b3:1d:b2:64:ca:97:
                    33:fd:72:01:26:93:70:9a:04:68:1a:15:62:f9:e4:
                    f2:f3:37:4d:f8:ac:a9:8f:40:1b:22:b7:60:48:74:
                    35:b1:32:33:29:ef:96:47:92:91:1a:a4:c3:68:e8:
                    f2:dd:2c:7e:88:ac:48:55:86:85:51:54:e0:06:f8:
                    58:4a:5f:46:2b:90:c9:3d:2f:cb:b9:6c:16:d5:41:
                    df:c4:e4:17:45:61:31:fc:45:23:02:6f:a3:a1:ca:
                    34:d9:06:d0:91:ba:ea:5c:27:81:5c:80:e1:8b:8a:
                    81:d7:db:42:df:03:f6:a3:27:68:62:2c:fd:ea:37:
                    7a:16:02:66:a9:94:e1:21:36:97:85:70:ad:af:a9:
                    28:5c:e3:98:ab:3e:e6:27:e3:b2:30:11:ff:70:66:
                    d1:46:70:73:e0:63:28:0a:c2:79:06:bb:7e:d0:12:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:25:67:B1:44:2C:FE:25:15:1F:8C:E9:FA:75:57:2C:58:F5:A7:AE
            X509v3 Authority Key Identifier:
                keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:29:8b:3c:e5:99:c3:01:4a:ca:54:fb:5e:dc:1a:8d:f8:22:
         a8:f3:06:c1:2b:75:c6:86:94:e6:6b:ab:79:32:05:fe:b7:3f:
         51:70:eb:94:ca:9e:e0:6d:cb:fb:ad:b8:d5:44:32:01:ef:1b:
         a5:e3:a6:38:d0:8c:46:07:cf:ef:69:68:db:00:76:ec:b0:5f:
         ae:09:24:62:ad:de:13:9b:90:7f:8a:ac:ae:fb:03:03:f6:44:
         d3:41:6d:ff:00:bd:b7:c7:42:1f:9f:91:a1:07:96:d7:bc:e5:
         98:1c:8e:f1:7a:2f:29:d5:df:08:f6:20:90:8b:6b:a7:9d:dc:
         bf:90:62:77:5d:bc:8a:75:9c:36:36:7a:84:03:32:8d:bc:8f:
         8d:06:15:6c:03:bb:d6:63:1f:2f:1d:56:0d:02:b8:7a:43:cc:
         60:1d:5a:75:8d:2a:09:9c:c4:61:96:98:11:6b:cc:07:cb:23:
         d8:76:7f:57:46:5c:0a:b7:61:fd:38:e9:69:5f:79:e1:e5:1d:
         5b:04:b6:1d:4a:86:80:c0:2b:26:4f:0f:30:ae:6d:c2:53:ea:
         c5:56:32:7a:e5:84:18:42:2a:fc:3d:24:be:b6:68:af:b3:90:
         6c:ef:5a:5d:e2:f0:11:6a:3d:1d:81:05:42:38:f5:87:8a:45:
         2e:db:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----