Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
File:                     F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json)
Hash identifier:          z17IF8YGDxFr1f/45crFWHdTgVD1ZYgl/BOChbj3bkg=
Subject key identifier:   86:C5:BA:A0:59:8A:11:EF:00:D3:89:06:83:EF:30:B6:F2:C8:90:FD
Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB
Certificate issuer:       /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB
Certificate serial:       2A9965AE65276E232BAC828A83017B2BE328B918
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft
Manifest number:          0129
Signing time:             Mon 27 Apr 2026 15:12:25 +0000
Manifest this update:     Mon 27 Apr 2026 15:07:25 +0000
Manifest next update:     Thu 30 Apr 2026 22:05:25 +0000
Files and hashes:         1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=)
                          2: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: nH75ndBXtay0JQ8xglSQZzvbPpnSW/fkpFVIJwp31F4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:99:65:ae:65:27:6e:23:2b:ac:82:8a:83:01:7b:2b:e3:28:b9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB
        Validity
            Not Before: Apr 27 15:07:25 2026 GMT
            Not After : Apr 30 22:05:25 2026 GMT
        Subject: CN=86C5BAA0598A11EF00D3890683EF30B6F2C890FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:27:bf:a9:8b:8a:59:d9:29:d5:d7:9c:96:
                    88:1b:44:d8:5b:6c:f8:a4:9c:f9:2f:e7:73:d3:86:
                    05:7e:0c:cf:40:c0:33:88:53:ab:0c:cf:48:29:10:
                    99:e8:37:64:d0:bc:31:48:ae:30:6e:a1:07:c5:63:
                    85:34:cf:36:f0:36:f3:84:65:83:fd:05:03:6b:79:
                    f5:14:be:8c:3c:cf:53:15:db:08:0f:a2:25:40:cb:
                    6a:17:41:c6:ed:c1:a0:93:2f:a8:56:10:81:03:1f:
                    5e:7c:f9:bf:01:f8:02:ff:ae:c7:64:bc:ea:38:aa:
                    3a:b5:e6:c8:84:66:fd:c8:91:36:f9:e3:93:50:94:
                    c4:4f:f2:b3:01:c6:c8:f3:93:c9:28:57:96:e1:54:
                    63:55:9b:15:37:0a:6f:20:c2:cb:02:5e:76:a7:30:
                    a1:41:24:22:04:78:72:67:7d:b4:1c:03:7f:82:98:
                    6d:75:90:cc:93:81:0f:b9:b7:60:b5:48:ee:f0:3d:
                    62:4b:92:8e:89:42:1b:1e:65:9f:ae:90:4a:aa:c0:
                    4f:48:c4:fe:50:c7:3b:21:2a:ac:94:c5:a6:10:50:
                    e2:a4:f6:fa:45:69:2a:8d:fe:51:99:e4:0a:28:52:
                    c6:77:02:b8:8d:21:ec:23:65:4f:aa:a0:3f:da:6f:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C5:BA:A0:59:8A:11:EF:00:D3:89:06:83:EF:30:B6:F2:C8:90:FD
            X509v3 Authority Key Identifier:
                keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:86:6e:a8:9a:3f:d6:ca:f7:7b:0d:86:9a:69:e1:c2:cf:
         7c:f1:16:35:05:f1:4f:c8:91:b5:e8:dd:9f:fa:aa:79:17:7b:
         d1:a6:bd:25:b5:80:d9:7d:c3:53:d7:22:01:0e:8b:c9:93:94:
         56:a4:18:98:2b:00:13:d7:67:dc:6d:0f:5e:5b:f5:f5:11:64:
         36:e9:71:0c:a5:d6:46:d3:ca:cd:9a:c9:26:ae:11:81:2b:c6:
         8b:3f:ac:22:eb:9b:c5:e1:da:5d:3c:c0:51:68:ed:d4:cf:be:
         58:07:68:d6:13:f2:64:1b:50:69:db:8d:27:4e:ba:63:27:f2:
         a2:94:0e:19:1e:29:29:ae:b5:bd:00:cc:7a:a8:9d:02:88:2a:
         ff:af:1a:69:18:77:d6:91:16:a1:b5:fa:e4:85:f9:84:42:11:
         81:f9:9a:85:a4:fe:04:9f:6e:4c:7c:63:c3:11:38:29:53:f7:
         b9:da:8b:8d:65:3e:3f:ba:de:24:84:ed:62:17:b5:af:81:05:
         5e:57:1c:5a:70:c5:96:00:74:fe:43:10:ce:3a:c9:40:82:05:
         74:dc:24:21:ca:a4:9f:3a:16:da:4d:a8:eb:10:5c:7d:4e:25:
         05:fd:c4:ac:b5:2d:a5:cd:7d:1b:bd:a2:35:72:a5:b7:89:6b:
         4b:51:6b:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKpllrmUnbiMrrIKKgwF7K+MouRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC
ODQyODlGQjAeFw0yNjA0MjcxNTA3MjVaFw0yNjA0MzAyMjA1MjVaMDMxMTAvBgNV
BAMTKDg2QzVCQUEwNTk4QTExRUYwMEQzODkwNjgzRUYzMEI2RjJDODkwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChNye/qYuKWdkp1declogbRNhb
bPiknPkv53PThgV+DM9AwDOIU6sMz0gpEJnoN2TQvDFIrjBuoQfFY4U0zzbwNvOE
ZYP9BQNrefUUvow8z1MV2wgPoiVAy2oXQcbtwaCTL6hWEIEDH158+b8B+AL/rsdk
vOo4qjq15siEZv3IkTb545NQlMRP8rMBxsjzk8koV5bhVGNVmxU3Cm8gwssCXnan
MKFBJCIEeHJnfbQcA3+CmG11kMyTgQ+5t2C1SO7wPWJLko6JQhseZZ+ukEqqwE9I
xP5QxzshKqyUxaYQUOKk9vpFaSqN/lGZ5AooUsZ3AriNIewjZU+qoD/ab6ALAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhsW6oFmKEe8A04kGg+8wtvLIkP0wHwYDVR0j
BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF
N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy
ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl
ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF
NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJDNhm6omj/Wyvd7DYaaaeHCz3zxFjUF8U/I
kbXo3Z/6qnkXe9GmvSW1gNl9w1PXIgEOi8mTlFakGJgrABPXZ9xtD15b9fURZDbp
cQyl1kbTys2aySauEYErxos/rCLrm8Xh2l08wFFo7dTPvlgHaNYT8mQbUGnbjSdO
umMn8qKUDhkeKSmutb0AzHqonQKIKv+vGmkYd9aRFqG1+uSF+YRCEYH5moWk/gSf
bkx8Y8MROClT97nai41lPj+63iSE7WIXta+BBV5XHFpwxZYAdP5DEM46yUCCBXTc
JCHKpJ86FtpNqOsQXH1OJQX9xKy1LaXNfRu9ojVypbeJa0tRa1s=
-----END CERTIFICATE-----