Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
File:                     F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json)
Hash identifier:          Jo9FnKLvENF9k44ktBINfuiPAIrVVk5eE2qaaYhowwA=
Subject key identifier:   63:29:E9:90:11:AD:B5:28:20:3E:3C:8A:CE:D7:95:5C:32:39:A4:F1
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       48F4A9F007C925A8FF02E5811E838DBD3D0F7D97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
Manifest number:          024B
Signing time:             Tue 28 Apr 2026 09:53:11 +0000
Manifest this update:     Tue 28 Apr 2026 09:48:11 +0000
Manifest next update:     Fri 01 May 2026 18:31:11 +0000
Files and hashes:         1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=)
                          2: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: 2oouebf7UsPHLpt9830VcwSE4wBkUD3e0RYeB8qNtMA=)
                          3: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: f8W5FJ9iU4t8t9EU3XiXSZ62Db4DfGqKJl32gKMiJc8=)
                          4: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=)
                          5: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 1f/T8Rp4kDNe7xFNVY+aeyPqNEObhKmytjK3fag8EPM=)
                          6: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: Zi6vMuaxBt3ol1FUMuN4Lrh8Tmht26qMj8Sdj2sNnyM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f4:a9:f0:07:c9:25:a8:ff:02:e5:81:1e:83:8d:bd:3d:0f:7d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Apr 28 09:48:11 2026 GMT
            Not After : May  1 18:31:11 2026 GMT
        Subject: CN=6329E99011ADB528203E3C8ACED7955C3239A4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:0f:22:d9:57:74:a7:61:1b:20:5c:4d:87:
                    9a:d2:80:ff:ca:e2:8f:6c:af:f2:93:1a:f4:fe:00:
                    29:98:7d:cd:92:89:d3:41:62:94:4b:67:a4:99:a3:
                    95:a9:39:36:3d:4d:2a:0c:d2:60:4b:ac:58:18:70:
                    6b:5e:00:0f:6a:c4:f0:73:79:df:34:59:80:5f:61:
                    b9:1b:18:67:b1:65:3e:35:8b:34:ab:55:87:6f:8d:
                    d8:63:f3:95:09:66:2f:3f:1a:42:04:95:c9:ca:8d:
                    eb:e1:b0:cf:24:33:3d:24:4f:db:46:0c:cd:e7:6b:
                    bb:53:e1:23:77:e7:b5:1d:52:91:83:a0:88:e5:0f:
                    37:f0:f1:87:e6:04:08:07:66:20:50:56:65:36:d0:
                    c0:ea:77:c2:fe:42:ca:d3:82:b7:e9:05:0b:11:a1:
                    e2:d1:97:c2:f2:a9:e1:a9:b6:b2:9b:46:0e:5c:75:
                    1f:47:0d:31:0c:68:06:91:50:c6:62:11:44:90:75:
                    b1:99:02:64:af:f6:e0:b1:dd:0c:41:cb:07:b4:ed:
                    40:10:95:1c:a0:32:c1:2d:b3:31:78:85:d5:ca:35:
                    bd:3d:02:6c:4c:4c:f8:15:63:4d:56:b7:01:d7:f2:
                    63:7f:8f:f6:6f:24:7f:d8:04:32:f8:53:7d:e3:84:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:29:E9:90:11:AD:B5:28:20:3E:3C:8A:CE:D7:95:5C:32:39:A4:F1
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:41:c2:f3:85:40:6b:fd:23:6d:1e:c9:b0:2f:d2:70:be:fc:
         d7:16:4f:1c:6a:ae:f3:7f:6a:ae:fe:16:a9:a7:ed:a3:7d:a4:
         78:89:cd:6e:38:e1:74:0d:67:a8:c5:42:87:fa:cf:bd:13:6d:
         d3:28:11:da:69:84:55:8e:c5:e8:5c:bf:68:38:eb:62:b8:2f:
         a4:3a:81:c2:d7:de:50:d2:e7:7b:44:79:66:b2:de:54:50:53:
         03:79:fe:cc:2b:08:f4:c7:9c:ff:99:8a:3a:0e:fc:4b:f2:d9:
         64:bf:99:2d:49:fd:ae:96:0e:58:4e:8c:86:eb:d1:6a:74:b6:
         7a:6c:2b:da:ce:fa:70:3a:d6:6c:13:04:5d:60:84:1b:b4:29:
         96:d7:76:3b:32:b1:4b:72:3e:4f:02:7c:a4:2a:bf:c7:17:24:
         5f:b3:73:b1:3d:85:91:e5:f9:73:09:33:20:89:2b:48:13:ff:
         3d:5a:da:18:5d:82:dc:ae:76:03:66:ba:f7:bd:d0:43:dd:18:
         a5:84:84:1d:a0:6a:9d:91:3d:b0:fa:48:25:a6:1b:fe:52:67:
         e4:3e:e8:ce:87:eb:0e:07:74:ab:63:3c:83:e7:fc:54:e5:94:
         1f:0a:24:cd:1d:31:f3:e4:60:b0:36:32:8f:a5:ed:80:0d:22:
         bc:ca:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----