Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft
File:                     36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft (raw, json)
Hash identifier:          MOv5z95RFmBoCfjEzuvUj0yKH6TR86oz30pwVJ5n5VY=
Subject key identifier:   AE:3D:C8:B3:D2:09:01:91:16:22:C6:46:51:EA:6F:98:39:BE:CF:ED
Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17
Certificate issuer:       /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17
Certificate serial:       64FB2F1E7D717362F9FB3BAA04DFA96461E2FB45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft
Manifest number:          03C3
Signing time:             Mon 27 Apr 2026 21:51:45 +0000
Manifest this update:     Mon 27 Apr 2026 21:46:45 +0000
Manifest next update:     Fri 01 May 2026 00:22:45 +0000
Files and hashes:         1: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl (hash: JDSEQfN80qSDyJ6NssMrSFp9M4o9Lfmf3jVsIaqtAZU=)
                          2: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: mdAnNzPQX1fBQRxqx/liQc+y8HoOIQ1ZRmWeSXm/9lE=)
                          3: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: XIli98cQ5DslYaylLZi+5Ts9pki82Z8fAKzqEWLUjbk=)
                          4: 3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa (hash: OqgAqdXTkd1D2NhPAZ/UZhCfurgUG69NUxmVZKteHcQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fb:2f:1e:7d:71:73:62:f9:fb:3b:aa:04:df:a9:64:61:e2:fb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17
        Validity
            Not Before: Apr 27 21:46:45 2026 GMT
            Not After : May  1 00:22:45 2026 GMT
        Subject: CN=AE3DC8B3D20901911622C64651EA6F9839BECFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:ba:1a:69:b8:b4:70:f5:7f:4f:7e:27:37:
                    9a:c3:ee:81:7e:f5:c0:20:bb:a4:5c:c4:a3:7d:c3:
                    6d:35:97:3c:fe:aa:9d:0b:d7:a1:66:33:be:05:3c:
                    8d:4c:3c:e1:95:37:f0:9e:2c:e7:76:a2:3d:43:12:
                    01:92:a0:d8:44:76:11:35:ce:91:5a:f5:64:2b:3b:
                    73:84:e8:06:aa:c7:ea:2d:af:39:56:29:ee:33:50:
                    dd:25:e9:3b:fb:c0:04:8c:15:60:ec:4f:21:6f:4b:
                    4b:42:56:c9:a7:ae:c3:89:3b:0b:38:2d:d6:61:8d:
                    b6:a4:6a:13:0c:2f:7d:e7:ad:63:d2:7f:63:46:10:
                    62:74:52:3f:54:99:48:b6:9f:f0:42:fd:f1:26:20:
                    7a:4c:11:12:9d:91:0f:4e:3a:6d:f9:7d:3b:08:d7:
                    ee:46:6f:5c:0d:8c:dc:6a:5c:b8:c3:59:63:42:9f:
                    72:38:f0:b0:ad:47:2f:82:26:bb:71:f5:fc:6f:fe:
                    f5:09:97:72:d2:f1:b7:5d:b4:37:de:6c:43:f2:fd:
                    22:e0:fa:01:7a:28:1d:49:30:f2:8a:13:66:36:13:
                    00:b1:64:16:e0:16:79:01:51:a3:fb:8b:66:23:1c:
                    33:15:5e:cd:fc:37:e8:d0:fa:73:23:c9:dc:58:44:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:C8:B3:D2:09:01:91:16:22:C6:46:51:EA:6F:98:39:BE:CF:ED
            X509v3 Authority Key Identifier:
                keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:61:9a:01:cb:55:7c:bc:0b:e1:55:7a:fa:d9:9b:1e:c3:7e:
         08:15:9f:d2:df:9f:83:1e:9a:64:6e:c3:c4:7b:df:6d:60:74:
         53:f1:8a:34:18:49:f8:e9:e4:99:c0:88:4d:86:39:ad:50:54:
         22:00:20:a8:5f:81:12:9b:d1:f1:f5:a5:ba:cf:35:cf:04:ff:
         a4:d4:25:cc:50:fd:9d:8f:ef:2a:44:3e:91:d5:43:55:df:1e:
         3f:f8:c2:e0:31:41:39:28:78:e5:76:8a:5c:f0:5a:07:22:d2:
         e6:06:25:0e:48:35:7a:44:b7:b2:b0:3f:a2:8e:bb:b0:9b:22:
         dd:00:b9:47:ed:a4:1e:f3:7c:14:3e:a4:58:c8:7a:5d:48:01:
         9c:ac:cf:9e:64:a3:7f:c4:c4:bc:08:61:5a:d3:6c:c4:df:38:
         a4:f7:6d:6d:e7:da:84:50:17:d9:5d:e0:4f:a2:46:d3:9a:ef:
         9d:4b:ad:bb:5d:2a:df:51:bf:b7:69:fb:d9:b2:a6:aa:9f:06:
         b1:e1:38:81:2a:b5:14:c5:ea:d4:fa:4e:6a:b9:6f:78:65:5f:
         dd:ae:d5:55:61:14:3b:63:e5:27:b1:78:1a:20:aa:b6:bf:14:
         e8:6a:0a:a0:b8:67:da:3c:16:4c:23:3d:f8:92:0c:c3:85:a2:
         b3:d8:a5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----