Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
File:                     A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json)
Hash identifier:          mR6oXxdBUFpGouI5ACJaLKZPhEo4xu5t8AdGD7n7Du0=
Subject key identifier:   33:8C:E9:C7:44:D8:6D:E0:D5:C6:97:2E:BD:D6:AC:7A:1E:43:98:1E
Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46
Certificate issuer:       /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
Certificate serial:       5C8A6818A09E4EBE729A20B2931E19EC56851DF9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
Manifest number:          018F
Signing time:             Mon 27 Apr 2026 10:41:37 +0000
Manifest this update:     Mon 27 Apr 2026 10:36:37 +0000
Manifest next update:     Thu 30 Apr 2026 12:23:37 +0000
Files and hashes:         1: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: GLLR66b6H+eY55WrSOG4zbGHgPSecAz4DbW3UqZs5pc=)
                          2: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=)
                          3: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=)
                          4: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=)
                          5: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=)
                          6: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=)
                          7: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=)
                          8: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: uRfUQhVw2ch7VqXxR20eCaHEC59WymM8VUU6S8pSv3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8a:68:18:a0:9e:4e:be:72:9a:20:b2:93:1e:19:ec:56:85:1d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
        Validity
            Not Before: Apr 27 10:36:37 2026 GMT
            Not After : Apr 30 12:23:37 2026 GMT
        Subject: CN=338CE9C744D86DE0D5C6972EBDD6AC7A1E43981E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:53:51:3a:e2:79:5f:a7:8c:b3:fc:c4:35:
                    9f:4e:92:33:8f:8e:b9:02:5f:53:1a:bf:02:0c:38:
                    b2:92:77:46:2b:45:3f:46:0c:0e:b0:fb:bb:2b:af:
                    40:e4:ef:bb:53:da:2a:33:92:bb:c2:33:bc:05:ec:
                    0a:f4:40:7d:71:ff:8d:e0:cf:ea:f4:54:bd:a9:e8:
                    fa:18:98:ee:03:48:eb:5d:eb:ca:fe:0b:17:2b:4a:
                    78:38:d7:d7:75:24:2c:03:ee:43:fc:da:cd:a7:f4:
                    40:98:81:aa:f7:b3:6f:c8:55:92:6e:c2:82:d1:30:
                    3b:81:ee:62:80:bb:fe:18:c7:b1:25:80:4f:bb:ca:
                    88:19:d4:bd:ea:fa:33:18:38:49:03:44:cf:83:41:
                    76:6e:d3:ba:fe:df:ac:eb:80:0b:e9:c2:da:22:af:
                    a2:9a:50:af:4a:24:2c:61:53:42:4d:06:62:39:83:
                    91:38:1f:eb:9e:06:fb:54:96:1d:cc:bd:5a:fd:67:
                    0a:62:42:13:a3:2e:6e:97:01:91:bb:d7:1e:58:f4:
                    54:01:74:35:77:c0:22:5c:26:10:43:b4:db:0d:c6:
                    fb:f6:f8:f2:a9:1d:3d:9a:7b:4b:8d:1e:e1:de:09:
                    9d:bc:5f:34:0e:84:a6:cb:9f:48:ad:6b:68:3c:d9:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:E9:C7:44:D8:6D:E0:D5:C6:97:2E:BD:D6:AC:7A:1E:43:98:1E
            X509v3 Authority Key Identifier:
                keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:bd:17:21:5c:75:34:50:f7:6f:1e:97:d6:08:39:9b:c4:
         b8:b3:e2:17:11:53:f1:5d:9d:5b:c1:d4:de:c8:3e:ef:f7:61:
         20:28:22:0b:ba:9f:c9:b4:b3:c9:3c:ae:7e:60:75:10:4a:54:
         cb:59:cd:e5:0f:92:bb:53:64:26:db:0f:5a:66:39:2f:c8:d9:
         f8:34:a6:ab:6d:5c:e6:c4:14:1d:ee:15:ee:3f:f4:80:d3:b5:
         54:b8:15:84:88:70:ac:0a:65:71:3b:00:f6:b5:56:3a:30:d3:
         56:c5:d8:d6:ae:bf:66:70:c6:5f:24:97:7c:7b:bc:f7:71:fd:
         b3:11:45:3d:df:b2:86:7e:2b:ed:37:38:6c:8f:da:44:c8:7e:
         5f:db:91:9a:e1:5b:2f:17:97:39:48:bc:ab:6c:10:17:e0:8f:
         b9:11:10:42:38:f5:be:20:78:94:56:3e:ee:69:07:3b:21:04:
         fd:f3:20:ca:60:54:1f:d7:37:ab:40:03:d9:0e:9f:f2:e0:42:
         80:8e:39:fc:5c:bc:01:af:b4:e4:b3:53:90:ee:8e:df:1e:7e:
         ed:c3:44:87:8b:aa:45:53:fc:80:1d:c9:89:a6:9b:e6:d6:04:
         54:30:c4:07:98:f1:b3:19:08:16:55:9b:37:43:6e:1c:16:12:
         1b:aa:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----