Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft
File:                     4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json)
Hash identifier:          ApSB9vvCDeJDgP8fh55x6c+aIA7C4Si4tZX1Z0msjmc=
Subject key identifier:   45:44:4E:3D:B5:7B:90:09:22:43:ED:67:D1:BD:42:FD:EB:68:EF:94
Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42
Certificate issuer:       /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
Certificate serial:       401253F7847DEC53BACE76B11E47E40531BD61F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft
Manifest number:          056F
Signing time:             Tue 28 Apr 2026 23:12:31 +0000
Manifest this update:     Tue 28 Apr 2026 23:07:31 +0000
Manifest next update:     Sat 02 May 2026 02:18:31 +0000
Files and hashes:         1: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: kZ6+BhGljQylz/AhW+5O41yNHq5oDRG+mIs3e+fq18E=)
                          2: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: AgqSIkRIGOrQPc+1mZW5lGFc3zRhyUQtTv3vz8FdAPU=)
                          3: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4=)
                          4: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: PWo05+Z1SpTWVvIbmEStlM4BsV3D05CC19TeobBpXoo=)
                          5: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: AI/USbQ/a0LFBdjZWtV22hxC6HEFmmDia8w1dNa/lbM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:53:f7:84:7d:ec:53:ba:ce:76:b1:1e:47:e4:05:31:bd:61:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
        Validity
            Not Before: Apr 28 23:07:31 2026 GMT
            Not After : May  2 02:18:31 2026 GMT
        Subject: CN=45444E3DB57B90092243ED67D1BD42FDEB68EF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:09:75:68:b3:b0:2c:75:18:d4:5b:0e:ce:
                    c6:83:97:d0:f2:a5:bd:12:f1:c9:28:55:bf:50:83:
                    1d:5f:37:31:6b:2f:ff:2a:f9:a6:13:ed:41:9b:f9:
                    1c:a2:b3:04:ee:1f:55:e8:80:30:5f:08:18:03:ca:
                    73:6c:f8:85:bb:f4:86:24:f9:c6:c3:4a:24:89:1a:
                    f9:61:cc:90:ee:b5:78:83:29:e6:49:44:90:b8:30:
                    3b:87:f8:56:f6:b8:e4:31:fc:e5:f9:57:e7:e5:39:
                    7a:88:89:fd:6b:2f:c1:c9:60:8c:72:ce:81:55:f0:
                    f1:56:72:ff:79:5a:59:88:8c:de:19:06:a4:14:33:
                    5c:3c:be:90:ed:cc:47:4c:98:d9:91:ae:6e:b1:9b:
                    9c:e1:a7:bc:c8:f0:e7:45:bf:83:66:03:5e:d7:4f:
                    60:53:d8:47:4f:05:88:bd:c4:2e:50:97:9f:e3:12:
                    00:f9:f8:ee:b5:6e:f3:84:3c:91:23:ec:19:03:97:
                    49:ce:eb:21:97:37:9f:f8:38:92:19:d8:56:14:e6:
                    d6:7f:76:11:17:ad:70:2e:bf:6d:6f:a1:64:b2:ea:
                    68:71:59:68:d3:db:33:e2:4f:ca:e5:ae:e0:ab:8a:
                    cc:c8:8a:31:4a:98:50:cb:c0:ca:c8:cc:65:d0:11:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:4E:3D:B5:7B:90:09:22:43:ED:67:D1:BD:42:FD:EB:68:EF:94
            X509v3 Authority Key Identifier:
                keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:06:67:07:47:e5:50:84:ea:67:b7:8a:20:69:4c:c4:62:43:
         30:d6:3b:e2:21:92:44:d4:1e:59:ab:cc:81:9c:72:67:06:ce:
         66:df:0b:62:d9:67:0c:6c:94:e6:70:70:fa:15:89:8b:47:07:
         6d:5d:ef:f0:d3:ac:22:19:75:a6:c5:73:d4:34:f3:75:91:38:
         b0:51:e4:b3:3a:9b:78:10:1a:ff:91:a8:a9:0d:d1:6f:12:c8:
         32:97:14:21:39:55:a3:a7:ba:e6:93:0e:43:ea:a0:f9:da:96:
         72:ff:4b:47:4e:54:05:c2:28:80:89:e1:a9:c9:5b:ad:95:d9:
         df:42:56:b3:2e:90:34:9d:6c:8f:10:0f:52:d4:81:1c:1e:b0:
         d3:b1:f2:8f:2c:d6:5f:56:b5:68:74:34:9f:b4:c8:fb:9e:80:
         ae:bb:cd:d8:e5:81:b3:d3:0c:36:40:50:fa:e4:17:48:c6:9c:
         13:68:24:bd:42:41:4a:1e:53:df:8c:7e:91:b7:7f:f6:35:da:
         f0:38:9c:d1:5d:e6:b1:21:47:27:03:4d:2f:89:74:04:6f:87:
         32:27:37:fe:81:a3:f0:8a:7c:23:fe:c1:e6:13:9d:16:df:69:
         3a:15:30:74:30:79:d2:d7:87:5d:55:65:31:98:9a:b5:ae:a9:
         8c:53:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----