Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
File:                     9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json)
Hash identifier:          S39cZLrwwklGpn2cjbHy5ek25mSwtiorqgpXE0Zb8qo=
Subject key identifier:   CC:BA:63:6B:66:D8:AF:D6:AB:5C:36:88:70:F4:92:39:FD:86:44:06
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Certificate issuer:       /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial:       6CA8C3B911908B796090D3E869D1F98085DBE1D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
Manifest number:          056D
Signing time:             Mon 27 Apr 2026 09:12:12 +0000
Manifest this update:     Mon 27 Apr 2026 09:07:12 +0000
Manifest next update:     Thu 30 Apr 2026 17:39:12 +0000
Files and hashes:         1: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=)
                          2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=)
                          3: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: aR42pu9GoDkomDlGzkoNCUXdURGDJbWiNMxEfpkk7yk=)
                          4: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a8:c3:b9:11:90:8b:79:60:90:d3:e8:69:d1:f9:80:85:db:e1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
        Validity
            Not Before: Apr 27 09:07:12 2026 GMT
            Not After : Apr 30 17:39:12 2026 GMT
        Subject: CN=CCBA636B66D8AFD6AB5C368870F49239FD864406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:a0:38:d2:76:35:61:4f:fc:b6:15:7c:70:
                    86:62:1f:b6:db:dd:e4:ad:d9:97:06:63:40:47:79:
                    84:2b:00:1b:15:7d:76:34:93:99:10:dd:68:83:bf:
                    51:09:54:17:08:27:19:85:b2:44:fe:9b:d9:1d:2e:
                    9f:e4:81:da:02:a7:00:93:41:d9:b3:f9:55:de:60:
                    19:7a:0a:05:43:91:95:c3:8a:fd:68:09:4f:61:11:
                    d4:e0:ff:f3:11:e1:ee:91:63:fb:4b:31:fc:4c:0a:
                    d8:be:9c:9d:17:c2:db:0b:d7:22:71:83:1e:b1:6a:
                    a8:6c:dc:be:d9:5d:b6:70:67:fb:30:25:3d:e6:e3:
                    b5:29:61:a0:df:1f:2c:2c:de:a3:02:b4:2e:28:c6:
                    76:8c:9e:fb:60:83:76:9d:42:0e:13:de:d8:bd:2a:
                    65:9e:7b:5b:63:d1:94:ed:2b:5e:78:ca:fe:81:d7:
                    51:23:7a:94:d5:80:2a:e2:a6:3a:a2:38:06:22:e6:
                    ff:9d:1b:89:9e:6c:a6:7a:d0:fe:7a:30:e1:d6:fb:
                    15:07:7c:02:43:f9:66:ca:67:ae:ab:d8:46:bd:06:
                    5d:67:26:94:da:23:a5:ad:14:f1:5c:db:15:55:7d:
                    6e:36:51:31:1e:a2:1e:01:22:3b:a3:cd:6b:cd:0f:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BA:63:6B:66:D8:AF:D6:AB:5C:36:88:70:F4:92:39:FD:86:44:06
            X509v3 Authority Key Identifier:
                keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:63:c6:94:4d:b9:19:b6:d3:28:1b:1e:01:04:73:e3:7d:2e:
         cc:78:bb:46:28:4d:ba:d0:9f:a9:a6:e7:c4:90:2a:83:cc:c0:
         f9:31:c7:00:90:a8:a2:fa:c4:db:d2:f3:9c:44:ab:be:04:23:
         6f:55:fa:1e:51:37:fe:75:fa:aa:04:86:c5:05:0f:d2:81:59:
         fb:d1:ad:44:cc:05:48:12:4f:f0:ae:dd:91:43:e3:01:b8:37:
         e4:b0:e3:48:3c:dc:e4:c0:d8:dc:82:d1:3d:e0:37:07:b3:87:
         69:80:c5:49:e3:a3:aa:e7:2f:27:05:76:86:9c:0d:aa:88:0f:
         4a:95:7e:59:6f:06:f1:34:ff:41:e4:08:51:4c:2f:13:14:94:
         19:fc:8c:61:f9:27:b9:d9:e9:eb:0f:67:63:d2:92:06:e6:83:
         e0:75:b2:c5:dd:8c:93:15:e5:91:4c:e0:2f:b4:9c:81:72:05:
         72:4b:ff:b1:16:06:04:18:21:be:63:02:37:fa:ff:15:45:ac:
         32:59:b5:5b:5e:07:99:2c:ca:aa:6d:71:32:e7:49:5e:34:d3:
         00:0d:81:fd:b8:27:0e:be:65:e8:47:fc:39:80:6d:97:e8:eb:
         c3:31:14:43:ae:76:25:a8:37:31:56:e3:f5:9a:d4:34:1a:e4:
         18:00:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----