Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
File:                     5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json)
Hash identifier:          jy8DAsH95N/CV5FLO/PZFFjXx4MtDtvD8nSIdeFhmqM=
Subject key identifier:   0D:A9:39:F0:48:86:00:FB:77:A2:14:C8:44:DB:63:EF:22:89:FE:58
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Certificate issuer:       /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial:       627104F16A3A09AA6BF9EF66B76FA129CB303094
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
Manifest number:          0402
Signing time:             Wed 29 Apr 2026 08:12:42 +0000
Manifest this update:     Wed 29 Apr 2026 08:07:42 +0000
Manifest next update:     Sat 02 May 2026 13:21:42 +0000
Files and hashes:         1: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: 2Fp4Lwy8mON7FVeMJE/4PvZDu17XhYrM2gPfMF99PL4=)
                          2: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: oWP5SZKl4P0FE7aox6VjmnvLbD1Ix4I34lU7zfT+/f8=)
                          3: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: mJh+Jb4W1Qp0OCB+Vg0qzn9Btmj8AzJYp96qUw9uQnM=)
                          4: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: YBqJEgBScNZE40ToH6Xa8JtZcJ1wwXmCSVUNuGk+Tns=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:71:04:f1:6a:3a:09:aa:6b:f9:ef:66:b7:6f:a1:29:cb:30:30:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
        Validity
            Not Before: Apr 29 08:07:42 2026 GMT
            Not After : May  2 13:21:42 2026 GMT
        Subject: CN=0DA939F0488600FB77A214C844DB63EF2289FE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:fd:c3:18:b9:92:97:f7:b9:93:df:6d:9a:
                    ac:e8:d7:f0:87:b9:63:e6:e5:93:80:ae:b7:7f:bc:
                    b8:2a:4c:45:36:d4:bf:f5:5a:bc:1f:d1:b3:48:5c:
                    da:ee:fe:c3:09:a0:10:5b:ab:88:3f:df:f2:a1:ef:
                    66:ba:f4:24:6f:88:d0:14:77:c0:31:5b:aa:47:5d:
                    6f:95:0c:c8:b7:7f:5b:09:4a:09:e5:4b:d3:9f:17:
                    16:b4:43:5d:f8:60:90:8b:c1:66:22:d2:62:b5:5c:
                    4c:a0:8c:82:91:68:f9:8a:e9:89:78:c5:fd:43:61:
                    fb:fb:47:3f:2e:15:d8:9e:d7:34:31:e8:a6:af:5f:
                    43:38:48:9c:7b:81:b3:ad:22:fa:21:58:e4:bb:33:
                    69:bd:88:b5:d5:01:e3:f3:8e:f0:99:3a:a3:35:99:
                    ef:c8:85:dc:d2:a3:42:8f:cf:b9:3b:48:a4:87:ce:
                    03:83:e0:8a:46:ff:a4:f2:68:7b:60:ba:b2:16:38:
                    14:d4:a3:7a:89:ee:0b:32:7d:af:98:4d:74:da:82:
                    81:b8:d6:c0:0e:44:3a:c9:26:89:70:89:3f:1f:6d:
                    44:a5:03:97:c6:dd:9e:f1:2b:b0:ce:51:94:7c:a8:
                    47:fe:25:02:81:c9:66:c3:6d:8c:35:23:ef:ee:99:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:39:F0:48:86:00:FB:77:A2:14:C8:44:DB:63:EF:22:89:FE:58
            X509v3 Authority Key Identifier:
                keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c5:48:4f:c9:e6:72:75:59:a1:fd:1f:c7:38:11:ac:c9:20:
         5c:69:3e:a9:41:57:9d:70:7e:60:c4:76:ee:b2:f9:ba:e0:71:
         85:62:d7:e9:63:6d:f9:63:6a:c3:6b:9a:2e:62:8b:14:e2:ea:
         8c:7d:8f:87:e3:0f:1e:5b:6c:91:bf:f0:e9:f5:f3:af:ef:e8:
         a3:6d:c4:65:65:84:07:fb:e0:7e:f5:05:e1:9b:c9:e3:ae:8f:
         a7:fd:33:03:fb:d0:fa:6e:a4:27:53:e4:3b:6c:99:25:f8:4e:
         6c:aa:62:53:9c:49:c6:12:70:86:58:07:d3:7c:5e:ae:9c:0a:
         52:61:eb:f9:85:73:38:23:ab:39:7e:b2:a7:0f:41:c8:02:72:
         76:83:67:d0:ba:07:9f:37:48:57:be:e2:26:8d:68:33:08:39:
         82:93:81:ee:5b:93:1c:9b:aa:fb:63:5f:37:65:97:01:37:7d:
         03:d6:a1:5c:9e:d4:27:59:08:36:bc:d6:a2:73:72:2d:4b:8f:
         2e:f0:ce:62:bb:ae:09:3b:58:0a:58:59:cc:f7:b7:66:ec:39:
         51:52:05:59:9d:3c:c5:ca:f9:be:a5:7d:3f:58:88:19:fc:a4:
         9e:1d:6f:fc:5a:eb:15:99:eb:18:34:f6:e1:d3:cd:19:3c:23:
         63:c9:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----