Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
File:                     42467B1885830A9908EAE67935311639B090AA77.mft (raw, json)
Hash identifier:          sDvdBvTGEWyD0I9k7A5bZEREznGAAdwp6RCIx2OZ+Ts=
Subject key identifier:   57:31:41:85:3F:E2:23:50:32:1B:1B:34:34:A7:6A:3E:43:3B:DD:3D
Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
Certificate issuer:       /CN=42467B1885830A9908EAE67935311639B090AA77
Certificate serial:       2E11B768E7553F95D7EFA2B60C146BA047B62721
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
Manifest number:          01A1
Signing time:             Sun 26 Apr 2026 23:42:00 +0000
Manifest this update:     Sun 26 Apr 2026 23:37:00 +0000
Manifest next update:     Thu 30 Apr 2026 11:02:00 +0000
Files and hashes:         1: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: Y4fVP5ByhvGc43h0w5iLu+GnzMT+F6jN4o98rNmWqIc=)
                          2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=)
                          3: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:11:b7:68:e7:55:3f:95:d7:ef:a2:b6:0c:14:6b:a0:47:b6:27:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42467B1885830A9908EAE67935311639B090AA77
        Validity
            Not Before: Apr 26 23:37:00 2026 GMT
            Not After : Apr 30 11:02:00 2026 GMT
        Subject: CN=573141853FE22350321B1B3434A76A3E433BDD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:21:92:0d:a2:10:1d:f3:a7:8a:fc:85:0b:
                    21:90:70:47:b7:03:92:bf:e9:6c:74:19:9b:24:1c:
                    89:66:37:0a:3a:67:05:5c:4d:20:53:c8:77:b5:2d:
                    c6:1d:60:f1:ec:88:5a:3f:e8:be:f1:9f:f1:b0:c4:
                    f1:a5:79:54:b4:97:d1:ad:9f:23:ea:fd:eb:8e:d6:
                    5d:54:67:b9:55:ee:6c:23:fd:5f:a6:e2:0e:46:3e:
                    08:fa:21:95:5c:ea:5c:f8:31:7c:ce:e9:f4:a8:1b:
                    2b:1e:af:18:7b:90:fe:58:15:23:f1:bd:20:c9:45:
                    7e:29:d0:7d:55:80:c3:73:f3:22:3c:18:0d:ef:d0:
                    da:a3:3c:f8:c0:9d:8d:ca:f8:94:37:64:e5:9f:2c:
                    12:20:c4:40:fd:01:43:f9:20:74:f9:ab:d9:1a:a9:
                    48:a4:c9:4c:35:4f:58:cb:3e:48:f7:e6:8f:ea:5d:
                    e3:82:5b:d8:5a:24:80:87:5a:d9:5c:a1:53:e6:e6:
                    e1:1e:b5:4f:30:9c:4a:5f:c2:fd:e0:b3:20:62:f5:
                    3e:3a:51:50:95:44:63:bc:9d:f2:d5:0f:e8:10:4b:
                    d6:b8:d3:f5:e9:4c:be:33:af:29:40:ee:98:ac:95:
                    0b:d1:e0:a1:1d:ba:a4:30:30:7a:0d:63:1c:24:0d:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:41:85:3F:E2:23:50:32:1B:1B:34:34:A7:6A:3E:43:3B:DD:3D
            X509v3 Authority Key Identifier:
                keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:ed:93:60:08:88:20:f8:6b:68:f2:04:78:42:67:41:38:
         5f:2a:c9:f3:23:64:11:5c:a7:d4:b6:f2:cd:06:d0:af:c3:f0:
         0f:a1:25:02:c9:00:4b:76:27:d3:82:7e:d5:07:dc:19:c2:20:
         ad:af:6c:bc:59:51:53:ec:39:70:a8:f9:3a:7f:97:a7:2a:6c:
         a2:25:aa:f7:7a:80:33:63:69:f8:d7:c6:bb:4a:c3:2f:9a:a5:
         03:ce:c6:b8:ab:13:0b:aa:b7:4b:09:c3:cc:6a:f8:a4:8e:a7:
         23:28:d1:ff:63:1a:53:62:9c:e1:6d:42:5d:a9:f2:6c:30:15:
         c2:5e:b1:90:73:63:ca:0c:60:5f:74:df:24:10:0d:1d:96:36:
         d2:7a:3d:5c:dd:0d:22:90:7d:d9:df:0b:48:85:6d:b4:66:d7:
         ed:b0:13:2f:3c:95:d3:03:c4:0f:af:02:be:06:f2:13:ad:a9:
         59:ac:d2:32:e9:b2:3d:f8:e6:45:2d:a6:3b:e5:2f:63:90:09:
         ce:9b:6b:8e:e5:37:48:03:4a:26:f9:b6:0f:83:eb:95:3b:fc:
         ff:8b:62:ec:c1:1f:c5:78:55:7b:1f:8b:38:ed:2f:6e:fe:52:
         35:ea:e5:ad:9f:71:c9:95:ee:eb:33:12:f3:e9:64:57:ca:3b:
         88:e5:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----