Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft
File:                     121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json)
Hash identifier:          7TNxR4TwtrMiz2YDKVoFkiihIwlnQBAec0o7DR61y1s=
Subject key identifier:   F1:5E:10:C2:FD:87:CF:F1:D9:28:80:B8:6E:DF:0C:AE:97:D0:D1:AD
Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C
Certificate issuer:       /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C
Certificate serial:       552E8535DB836DDD816563D83E3364B32CE9108C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft
Manifest number:          0198
Signing time:             Tue 28 Apr 2026 13:41:01 +0000
Manifest this update:     Tue 28 Apr 2026 13:36:01 +0000
Manifest next update:     Fri 01 May 2026 21:29:01 +0000
Files and hashes:         1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: CZmhiD3pNNVhXDmWXdrNebeHy9+MUS1iWLoYcwdBGEU=)
                          2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=)
                          3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2e:85:35:db:83:6d:dd:81:65:63:d8:3e:33:64:b3:2c:e9:10:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C
        Validity
            Not Before: Apr 28 13:36:01 2026 GMT
            Not After : May  1 21:29:01 2026 GMT
        Subject: CN=F15E10C2FD87CFF1D92880B86EDF0CAE97D0D1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:ed:b8:66:31:3e:94:cc:bc:08:88:5d:be:
                    37:2b:af:c6:66:ff:f9:c2:1a:74:09:58:46:54:85:
                    26:5f:06:6f:ba:d1:3e:13:f2:65:e8:6a:34:37:a9:
                    a2:eb:0f:a5:6c:b0:dc:18:af:c1:7b:75:d0:ca:90:
                    c0:da:68:e9:d0:0b:fb:59:1f:61:ec:23:5e:af:19:
                    ed:5c:0e:d2:df:fc:91:5a:48:86:47:34:0a:99:7c:
                    9c:b6:22:d6:08:11:83:e4:96:e2:9f:48:ba:af:71:
                    a7:47:bc:23:ca:a3:cd:5a:2c:1e:dc:7a:73:de:72:
                    61:e1:49:fe:3e:b8:25:23:29:a8:d5:44:1c:b3:e7:
                    c7:16:98:78:e2:d9:db:6d:bf:e8:aa:11:7c:91:39:
                    61:26:13:b5:e8:91:0c:10:85:95:82:e1:38:50:3b:
                    8a:f0:45:d7:07:b3:f5:fb:48:bd:09:56:ba:1f:a5:
                    03:91:c8:49:b1:21:17:80:bf:54:e8:55:9b:e9:16:
                    40:e0:25:c8:e6:2d:57:6e:d4:3e:2e:ff:d0:6f:21:
                    50:bb:e8:5f:da:9e:29:9f:9d:ce:b7:67:9b:3b:23:
                    e1:65:19:31:3a:1f:9b:f2:a4:8c:20:0b:2c:a9:52:
                    f9:fa:9f:1b:b7:70:4b:42:2d:d4:ab:c7:09:76:97:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:10:C2:FD:87:CF:F1:D9:28:80:B8:6E:DF:0C:AE:97:D0:D1:AD
            X509v3 Authority Key Identifier:
                keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:20:2f:fb:0b:96:d3:53:c0:65:74:17:35:0e:54:3e:5f:eb:
         60:83:e5:af:90:44:5b:29:4e:46:7f:a0:84:c9:83:ff:59:c1:
         71:c3:b4:97:06:b2:54:b3:6c:c9:c9:ea:d7:af:1d:c9:38:d9:
         b8:b2:7c:60:28:41:2f:30:f1:f6:77:5c:cf:13:8c:07:9b:18:
         2c:1f:7a:13:15:5d:71:32:2d:07:3f:fe:80:35:d1:4b:b5:39:
         b8:7e:aa:b5:35:cf:bd:1c:e0:4b:55:ae:9e:80:85:df:67:42:
         1d:c6:79:c8:d5:a1:37:52:0e:1a:93:ed:73:78:9b:5c:08:e9:
         9a:55:4e:d6:2b:e8:65:10:af:b2:ed:36:60:43:99:11:68:f9:
         f2:fb:ee:54:e2:62:d6:32:73:79:5c:36:01:86:c9:37:08:28:
         8f:b1:c2:87:13:28:8e:de:00:c7:e8:e9:ed:f3:25:cc:e8:e6:
         46:31:97:31:12:a5:9b:7a:dd:58:6d:63:62:b0:8e:0e:b6:41:
         5a:bd:9a:cf:b1:8f:dc:24:88:31:da:91:81:92:95:6b:be:e7:
         3f:03:e2:fc:37:20:bb:bf:51:86:18:94:22:3a:a1:e6:42:cc:
         8f:e0:c8:bc:eb:c7:40:38:74:fb:e2:6e:f5:07:09:29:ca:d1:
         d6:4d:19:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----