Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft
File:                     20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json)
Hash identifier:          t3Gn+tXZ6z6aE82JJbdl2kQREL5fpGHJMMmuC54CLL4=
Subject key identifier:   30:E9:97:F3:CB:AC:ED:20:9A:CF:38:40:5D:74:4F:34:C4:F7:99:E7
Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
Certificate issuer:       /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Certificate serial:       2DFFED4E49E1913964D7934F5B83227ABA534F8D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft
Manifest number:          0278
Signing time:             Mon 27 Apr 2026 17:22:13 +0000
Manifest this update:     Mon 27 Apr 2026 17:17:13 +0000
Manifest next update:     Thu 30 Apr 2026 19:38:13 +0000
Files and hashes:         1: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=)
                          2: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: O7szCS5Q4xS9pTvDIJdtB3kyOm6FzPfgeM+gaLcobJw=)
                          3: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=)
                          4: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ff:ed:4e:49:e1:91:39:64:d7:93:4f:5b:83:22:7a:ba:53:4f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
        Validity
            Not Before: Apr 27 17:17:13 2026 GMT
            Not After : Apr 30 19:38:13 2026 GMT
        Subject: CN=30E997F3CBACED209ACF38405D744F34C4F799E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:49:4d:40:6f:bb:51:8d:28:d7:d9:fb:97:
                    3f:f2:dd:06:39:c1:c2:d5:81:31:9a:19:3a:b4:c5:
                    26:98:d7:dd:fc:e1:b6:43:5e:e1:e9:7a:b9:11:6c:
                    df:25:da:f3:f9:bd:7d:63:36:70:61:bf:13:19:0b:
                    dd:ac:a5:2c:c1:85:3c:0a:1b:27:81:40:bb:08:10:
                    1f:44:d4:8c:56:0b:77:1a:fb:9e:fc:f6:db:01:16:
                    84:19:7f:ba:3c:3a:b8:d1:14:02:f6:8f:1b:77:cd:
                    a0:c2:7b:21:14:b7:83:3a:32:68:ec:13:91:6e:19:
                    cc:2f:6f:95:1a:e8:ed:67:a8:b5:34:c1:38:40:78:
                    82:50:03:27:80:ed:d5:4b:b8:ee:b7:61:65:35:ff:
                    6e:67:b1:c3:4c:bb:cb:a4:ac:7f:d5:a6:4a:04:8c:
                    16:43:54:f8:3b:8c:2c:01:97:8d:3a:d0:37:12:3b:
                    e3:b9:75:38:61:b4:41:6c:67:94:cd:1b:f7:af:7f:
                    d1:a1:c6:46:29:81:a5:49:83:95:a3:2a:cb:c5:f0:
                    bd:6b:14:64:86:c5:01:d4:50:a3:cc:41:8d:09:6e:
                    e7:05:bf:42:4b:0c:91:a4:24:18:ad:36:8f:72:f0:
                    a3:d9:3a:17:9a:8b:cc:6d:9f:f7:c0:02:db:77:2e:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E9:97:F3:CB:AC:ED:20:9A:CF:38:40:5D:74:4F:34:C4:F7:99:E7
            X509v3 Authority Key Identifier:
                keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:0f:fa:5c:a2:05:f3:59:45:65:26:ab:e2:01:eb:0b:53:
         ab:0f:c8:24:e7:c5:a3:f0:6d:0d:ce:ed:01:4f:b1:9e:a2:73:
         5e:11:fb:b1:9f:b3:f5:71:a4:ba:f5:f5:b4:3b:c9:f7:a3:e6:
         cb:3c:9d:8b:0a:6c:15:50:db:3f:27:0d:ef:ee:68:a4:a0:c2:
         39:61:12:73:16:bc:5a:f6:57:26:8c:92:d7:a1:04:b1:2b:ed:
         60:71:70:1d:48:96:0f:0d:e4:48:54:15:87:60:d0:0e:48:b4:
         47:3c:c1:6e:e9:1c:77:d8:1f:a4:ee:87:b9:89:31:f2:2d:27:
         14:f8:7a:a0:e4:1b:54:4d:48:b2:01:f9:35:4b:58:73:c8:16:
         a2:f5:9b:ec:6c:79:f5:77:86:94:e9:87:84:13:f9:0e:27:37:
         40:03:c0:a7:c1:40:e9:cc:c4:cd:0d:d1:70:25:d0:2b:82:ef:
         21:3b:cb:3c:38:79:f7:32:58:79:d6:d1:8b:0a:1b:ec:a0:e0:
         6b:3f:a0:12:8e:d5:ef:45:1c:08:e5:a9:d0:09:43:5e:23:b9:
         d7:0f:16:2b:46:fa:82:1b:5a:3b:f0:c0:6c:cb:8f:ef:c8:48:
         b0:8e:4d:7b:47:e9:4c:59:d7:37:6e:4f:22:77:97:11:70:f1:
         77:3c:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----