Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft
File:                     8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json)
Hash identifier:          tc8poYkmg5x00VjsIILIV4ZvYgKoQzLpGBwrgMKP+30=
Subject key identifier:   7A:C9:BA:CC:86:9D:9B:82:FA:AD:C0:65:DE:68:E6:9E:60:9E:23:48
Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA
Certificate issuer:       /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA
Certificate serial:       1EC2C07F0615DFCF44D0BE4CDCAF2BCDBE734E4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft
Manifest number:          023B
Signing time:             Tue 28 Apr 2026 21:42:21 +0000
Manifest this update:     Tue 28 Apr 2026 21:37:21 +0000
Manifest next update:     Sat 02 May 2026 00:44:21 +0000
Files and hashes:         1: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: mvjYp+1vrLLE5z7eCg/M+MdscRpVan6q1wn/N7ffyk4=)
                          2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=)
                          3: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: cEf+iVPqdW7qI4Ipy+bN0p+XFU8d51JZ9QNIzoj/x8I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c2:c0:7f:06:15:df:cf:44:d0:be:4c:dc:af:2b:cd:be:73:4e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA
        Validity
            Not Before: Apr 28 21:37:21 2026 GMT
            Not After : May  2 00:44:21 2026 GMT
        Subject: CN=7AC9BACC869D9B82FAADC065DE68E69E609E2348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:a0:8f:95:b2:d4:8d:52:23:44:0c:52:b0:
                    81:8b:80:74:5e:75:e3:2f:b5:18:a3:9e:4b:b6:56:
                    12:fd:12:fc:7c:87:83:25:b6:0e:aa:3b:53:b8:19:
                    cc:2d:3c:14:c0:03:5d:9a:eb:60:2e:2a:dd:e3:79:
                    d4:05:2a:4b:c3:a1:29:94:0c:30:48:23:d0:2a:b1:
                    12:f5:e5:ab:81:f1:fe:2a:04:5a:c2:8e:be:75:69:
                    65:e0:83:d1:56:d7:38:ab:9d:19:df:41:02:9a:9c:
                    ad:6a:01:1e:85:f5:4f:82:ab:b1:f3:87:75:c1:53:
                    fb:94:8a:bc:ff:4f:00:42:9d:48:6a:f4:0f:72:cd:
                    1b:ad:5d:b2:f4:b4:f7:3b:b5:27:da:b3:95:95:1f:
                    6c:15:69:b3:89:06:82:34:44:e7:a1:ef:04:a5:41:
                    a2:f5:c8:f8:61:4a:14:02:28:9b:cc:2a:48:4f:d6:
                    b1:8e:d8:df:cc:8f:fb:5f:5e:ff:82:0e:42:72:e4:
                    81:79:8e:49:8e:f3:57:13:26:24:d0:ce:89:21:8c:
                    91:8c:ae:7b:54:86:a5:1f:87:36:3e:ed:4a:5b:2f:
                    c1:0c:89:8b:8e:1f:97:73:fb:d0:ab:7f:04:47:74:
                    76:aa:80:5e:9c:24:f5:02:53:ab:73:ef:bc:c5:a6:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C9:BA:CC:86:9D:9B:82:FA:AD:C0:65:DE:68:E6:9E:60:9E:23:48
            X509v3 Authority Key Identifier:
                keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:f1:b0:5b:87:75:1b:a9:68:93:26:82:97:a8:4d:90:a2:
         78:81:b8:9f:fc:49:2b:92:20:b6:95:47:bf:d3:31:cc:2f:2e:
         c9:c6:4a:ae:23:31:99:cb:73:d5:04:48:a7:5b:e3:b4:81:a5:
         05:ac:02:d9:64:5a:62:00:68:9d:67:48:52:49:5a:d4:cb:5f:
         4d:52:ab:f3:d7:1b:eb:4c:45:1e:ee:c0:38:3d:77:ab:9e:30:
         9d:e3:bb:67:0b:c3:cb:44:11:72:d0:8c:06:35:22:7a:6e:83:
         6a:d9:3b:e9:f2:f7:ac:14:d2:0d:74:a0:d5:41:6b:fc:f3:8a:
         2b:71:dc:01:45:bb:5d:60:ec:7f:02:8a:b2:2d:90:55:f4:ec:
         75:bf:ae:4e:00:49:75:a3:3e:45:fe:c8:fa:13:b8:c4:39:5e:
         a6:02:55:7f:33:e4:4a:e6:3d:66:41:67:45:f0:fe:e4:bf:25:
         f7:98:02:61:ca:6d:53:2f:40:89:28:3f:1f:53:00:3f:0d:b6:
         47:1e:5e:3d:85:71:89:87:5e:ef:20:7e:7a:36:6d:1f:32:2e:
         45:8d:f3:da:0a:62:6d:97:33:58:96:40:74:01:3e:e5:c6:0a:
         8a:a6:2d:71:29:44:29:41:a0:23:b1:03:fb:87:ad:a4:02:a8:
         5c:08:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----