Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
File:                     7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json)
Hash identifier:          HiA9t4uSOKeMJsp6CRaUvwcRF+de3urntNVffG9m3AM=
Subject key identifier:   43:86:E4:95:9B:53:93:67:58:6B:4F:10:A9:55:75:FB:00:F9:A1:AD
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Certificate issuer:       /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial:       0A0D655F1F9F93B87C63F40619FE33700188829C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
Manifest number:          0214
Signing time:             Wed 29 Apr 2026 10:04:25 +0000
Manifest this update:     Wed 29 Apr 2026 09:59:25 +0000
Manifest next update:     Sat 02 May 2026 11:58:25 +0000
Files and hashes:         1: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=)
                          2: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=)
                          3: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: m/12zNgc5GQUzOBJaeH1WHKO0MMy3ujPJuaqkaXC3+w=)
                          4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0d:65:5f:1f:9f:93:b8:7c:63:f4:06:19:fe:33:70:01:88:82:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
        Validity
            Not Before: Apr 29 09:59:25 2026 GMT
            Not After : May  2 11:58:25 2026 GMT
        Subject: CN=4386E4959B539367586B4F10A95575FB00F9A1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:f5:e2:9b:e3:07:8e:ad:00:70:89:93:4b:
                    3d:55:b6:15:92:a3:9f:19:ca:de:9c:90:09:fc:8a:
                    a6:77:51:17:f7:6c:6c:ce:20:e9:49:1b:1f:6c:a0:
                    ad:7c:ad:b6:6b:1a:dd:61:83:04:88:2a:7e:f9:8f:
                    6d:34:44:33:79:d8:66:67:ea:bb:49:8d:05:da:d5:
                    3f:bc:6b:a4:97:21:1a:39:26:a6:28:23:8e:27:4f:
                    34:67:53:1d:34:5b:19:ea:2f:81:ae:ca:c8:71:ae:
                    96:1f:93:c8:65:54:91:b6:43:61:ae:32:60:13:6e:
                    43:5a:02:b5:c3:b4:bc:93:b3:e8:ea:d5:c7:d7:a4:
                    f9:a6:d7:6a:27:17:8e:01:cf:42:98:d1:a0:09:5e:
                    0d:a6:2a:1d:3d:55:3b:8c:be:0e:01:e9:78:61:31:
                    03:f7:2a:e7:37:3a:f4:c1:b5:95:bd:f5:c3:b7:0a:
                    07:85:c9:e9:7a:0e:6c:fd:8b:37:98:5b:12:6f:25:
                    be:98:05:94:b5:f8:c2:41:b8:75:f8:92:70:67:48:
                    5c:1c:37:5d:39:ae:f4:f8:bc:cb:11:8e:fd:56:5d:
                    aa:8c:66:4c:f3:f0:a9:22:ea:72:7f:a2:ac:8a:98:
                    1f:c6:1d:bb:da:5b:80:0c:b8:62:ed:32:f6:03:ce:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:86:E4:95:9B:53:93:67:58:6B:4F:10:A9:55:75:FB:00:F9:A1:AD
            X509v3 Authority Key Identifier:
                keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:47:69:8b:bd:4f:fc:54:89:14:79:93:35:17:1b:8b:e2:
         94:ba:d4:a5:a0:39:fd:dd:6c:4b:ba:99:80:73:37:bd:8a:ad:
         49:08:1c:12:a4:53:44:c2:46:3a:50:f5:43:c8:ed:d7:d7:b7:
         c0:74:68:31:a7:04:99:85:41:ef:da:92:fb:d6:3f:91:9a:3b:
         f0:ee:58:88:60:e3:14:2c:7b:0b:69:8e:2f:4a:c4:66:45:9f:
         bc:c7:88:3f:82:20:d1:45:f0:b9:de:84:5e:f0:a0:d5:04:e2:
         39:72:43:bc:78:75:28:1b:6d:81:74:4e:22:b3:72:b2:5f:a8:
         29:3d:f4:ac:cd:75:ee:b5:c2:a4:12:70:60:c0:56:65:92:da:
         a4:ef:ff:19:14:05:39:7d:4a:dc:0d:d3:c2:76:9b:0b:18:97:
         e6:4d:ec:41:47:8e:f3:01:04:72:a0:aa:98:88:d8:30:16:6b:
         86:81:85:c1:84:06:b8:44:2d:0a:28:46:d7:f3:0f:e8:d5:51:
         6c:a9:ef:15:4d:9f:9f:22:e0:3a:e9:90:56:6f:f4:25:ca:a0:
         7d:7a:5e:f2:4c:72:fe:2b:4b:36:24:78:03:46:8a:5f:92:4d:
         39:23:ae:4d:97:82:35:17:44:40:af:e4:4d:63:2b:43:ba:d9:
         61:d5:10:fd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCg1lXx+fk7h8Y/QGGf4zcAGIgpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAy
MTQ0MzNGNDAeFw0yNjA0MjkwOTU5MjVaFw0yNjA1MDIxMTU4MjVaMDMxMTAvBgNV
BAMTKDQzODZFNDk1OUI1MzkzNjc1ODZCNEYxMEE5NTU3NUZCMDBGOUExQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdA/Xim+MHjq0AcImTSz1VthWS
o58Zyt6ckAn8iqZ3URf3bGzOIOlJGx9soK18rbZrGt1hgwSIKn75j200RDN52GZn
6rtJjQXa1T+8a6SXIRo5JqYoI44nTzRnUx00WxnqL4GuyshxrpYfk8hlVJG2Q2Gu
MmATbkNaArXDtLyTs+jq1cfXpPmm12onF44Bz0KY0aAJXg2mKh09VTuMvg4B6Xhh
MQP3Kuc3OvTBtZW99cO3CgeFyel6Dmz9izeYWxJvJb6YBZS1+MJBuHX4knBnSFwc
N105rvT4vMsRjv1WXaqMZkzz8Kki6nJ/oqyKmB/GHbvaW4AMuGLtMvYDzj65AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQ4bklZtTk2dYa08QqVV1+wD5oa0wHwYDVR0j
BBgwFoAUfKJSTG2CVQtdIcExgr2cwCFEM/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NWVjNmNmOC05NjU1LTQzNzktYmYzNi0zNzI3MTQzOGQwM2EvMC83Q0EyNTI0QzZE
ODI1NTBCNUQyMUMxMzE4MkJEOUNDMDIxNDQzM0Y0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAyMTQ0
MzNGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm
MzYtMzcyNzE0MzhkMDNhLzAvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlD
QzAyMTQ0MzNGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAALQR2mLvU/8VIkUeZM1FxuL4pS61KWgOf3d
bEu6mYBzN72KrUkIHBKkU0TCRjpQ9UPI7dfXt8B0aDGnBJmFQe/akvvWP5GaO/Du
WIhg4xQsewtpji9KxGZFn7zHiD+CINFF8LnehF7woNUE4jlyQ7x4dSgbbYF0TiKz
crJfqCk99KzNde61wqQScGDAVmWS2qTv/xkUBTl9StwN08J2mwsYl+ZN7EFHjvMB
BHKgqpiI2DAWa4aBhcGEBrhELQooRtfzD+jVUWyp7xVNn58i4DrpkFZv9CXKoH16
XvJMcv4rSzYkeANGil+STTkjrk2XgjUXRECv5E1jK0O62WHVEP0=
-----END CERTIFICATE-----