Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft
File:                     8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json)
Hash identifier:          mXxIMUonQ63xA8c2bgN/BETssSizB+jKepC4ZenCu2c=
Subject key identifier:   A3:4A:83:41:46:E4:AA:21:C8:D2:DF:99:49:E6:67:DA:2E:CD:41:9F
Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB
Certificate issuer:       /CN=8A54C81A444D07051A24AACF743F01863F8129AB
Certificate serial:       3622D36B6F4380D98CC6C06BCA0A4B7092136FAC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft
Manifest number:          034C
Signing time:             Mon 27 Apr 2026 14:10:45 +0000
Manifest this update:     Mon 27 Apr 2026 14:05:45 +0000
Manifest next update:     Thu 30 Apr 2026 17:59:45 +0000
Files and hashes:         1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=)
                          2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=)
                          3: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: QCRtVGQSKV1UAbKPKJEaJYOe4zm6xV0+xKXBeBpACz8=)
                          4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:22:d3:6b:6f:43:80:d9:8c:c6:c0:6b:ca:0a:4b:70:92:13:6f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB
        Validity
            Not Before: Apr 27 14:05:45 2026 GMT
            Not After : Apr 30 17:59:45 2026 GMT
        Subject: CN=A34A834146E4AA21C8D2DF9949E667DA2ECD419F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:be:a0:49:d7:81:d8:93:7b:f2:0a:6d:c6:
                    c3:8d:8e:62:31:bb:70:61:28:80:8c:31:3f:6f:04:
                    ea:27:ae:19:ef:fe:27:94:cb:8c:50:fc:a8:80:43:
                    c6:01:0f:cf:a8:51:b1:69:d5:55:54:95:9b:48:49:
                    a8:cd:32:01:2d:6d:dd:b7:0c:a0:96:ae:9b:7c:20:
                    c5:98:03:57:96:5c:c2:bf:ec:cd:24:88:e4:d2:30:
                    91:f9:bc:a9:1e:4c:e3:a8:bd:f4:d0:fc:92:21:59:
                    08:b6:a0:d8:e3:08:fa:cd:ac:f4:57:41:f2:e1:fb:
                    26:66:c7:c8:71:cd:2a:64:2b:e9:38:65:7a:87:15:
                    5c:ff:f4:c6:e6:58:06:bd:48:0b:93:ec:d7:63:b6:
                    e6:98:b8:d5:b3:1b:6d:fc:41:c2:5b:98:67:3e:63:
                    31:a7:84:af:41:8b:2e:0c:09:4b:5f:75:aa:88:a3:
                    1c:7e:dd:83:e1:60:9c:b3:58:06:d4:3e:e5:b0:c9:
                    ac:ab:52:e7:63:97:82:ef:64:94:83:0b:ee:93:fb:
                    19:a5:f0:78:1d:9f:db:95:c2:9d:64:fb:1d:5b:19:
                    bd:d6:9e:b7:dc:03:f0:98:20:f9:41:2a:7e:49:24:
                    ec:a5:72:34:9c:b2:7f:3e:7a:7a:68:49:8a:d0:c1:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4A:83:41:46:E4:AA:21:C8:D2:DF:99:49:E6:67:DA:2E:CD:41:9F
            X509v3 Authority Key Identifier:
                keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:74:18:fb:e6:bb:8a:c9:e7:f4:ce:77:b4:32:6e:63:3b:
         29:ad:11:7e:c3:13:10:7a:fb:17:15:d6:7d:af:73:fe:bc:c9:
         fb:b3:e7:f3:8e:34:8a:d0:96:de:ac:8b:c9:4f:1d:63:78:29:
         d2:5a:43:21:a3:1e:b2:a1:9f:55:68:fb:d7:7d:0b:6e:41:23:
         18:2c:52:3b:e6:9f:38:ba:1d:fb:8d:f7:b6:cf:24:52:a3:49:
         7b:13:c8:26:e1:e6:94:31:22:01:86:b9:f0:a3:ed:83:9d:a6:
         e5:b1:1c:16:ac:e1:99:c7:e9:e6:e1:47:59:93:88:90:f3:fb:
         71:91:e3:e5:d0:b8:12:12:54:47:41:23:56:95:29:39:61:8d:
         48:d1:c2:72:c2:91:08:ea:eb:06:74:da:46:55:6e:05:8d:08:
         7b:fa:b9:7a:99:28:72:d0:c0:ed:2f:69:28:4a:a8:9a:7a:0b:
         d9:13:24:1d:c1:99:bf:76:f0:c9:0a:8d:d6:4e:f5:9e:94:9d:
         a5:3d:4a:64:68:7b:5f:2f:2c:11:41:37:df:0c:58:1a:ab:93:
         b9:16:33:ea:dc:c6:08:b2:6f:9e:41:95:a2:cd:38:38:a7:81:
         06:4a:de:c1:42:90:57:30:9b:80:fd:93:b3:55:39:a9:44:e2:
         a6:8e:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----