Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft
File:                     8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json)
Hash identifier:          RgvMfKsX2spTcFrA9qSEoWCcXFNyTg1D16SQAPW/cgo=
Subject key identifier:   AB:5B:50:68:24:F8:3F:97:01:18:91:12:A5:52:98:6D:8D:87:14:AC
Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02
Certificate issuer:       /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302
Certificate serial:       71097D0DD8E2DB08E3AE0B8EA7E827B66A15D4DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft
Manifest number:          BC
Signing time:             Tue 28 Apr 2026 22:11:52 +0000
Manifest this update:     Tue 28 Apr 2026 22:06:52 +0000
Manifest next update:     Sat 02 May 2026 00:15:52 +0000
Files and hashes:         1: 3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa (hash: 1xGJ7Y9+wtKG60b+Nh0uIMBhRuIEyt2WbpPoMcvYL7o=)
                          2: 3230322e39302e3139342e302f32342d3234203d3e203435333233.roa (hash: E3gl245QWUOSrRvQIfs41ST6vQLNBujKh2hLnsJBzx8=)
                          3: 3230322e34332e36342e302f32342d3234203d3e203435333233.roa (hash: QMLhhMof4VF5mj1KbH8X8D62Tgsr930WAMkn5u0Mz/k=)
                          4: 3230322e34332e36342e302f32332d3233203d3e203435333233.roa (hash: R1BApOZiP80MX6CZbFZb/y1Snxa1IgmqoJi9dsGzcJk=)
                          5: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: MiiuAw6pFPMDSsyqaG2PhycTAMXz4iZCP0fzr2pecJA=)
                          6: 3230322e34332e36352e302f32342d3234203d3e203435333233.roa (hash: znONXNfdUZs1z0T4FfZkepx5iWfKvvzcCFqNNlG3IZM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:09:7d:0d:d8:e2:db:08:e3:ae:0b:8e:a7:e8:27:b6:6a:15:d4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302
        Validity
            Not Before: Apr 28 22:06:52 2026 GMT
            Not After : May  2 00:15:52 2026 GMT
        Subject: CN=AB5B506824F83F9701189112A552986D8D8714AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:56:b1:38:42:5b:c5:fb:eb:82:d3:5f:9a:
                    8c:0d:dd:1a:b9:3a:bb:44:2a:85:cc:e0:dd:8c:a9:
                    fa:d1:02:37:ca:18:63:87:1f:68:b9:42:09:35:2a:
                    1b:15:92:93:a9:cf:da:54:b9:37:52:00:c9:d1:42:
                    3a:95:b8:f7:18:de:83:64:4c:57:fc:2d:84:20:8e:
                    38:b2:ef:3f:66:95:df:c3:79:d9:d9:32:b7:cf:29:
                    62:f1:12:25:13:8f:dc:94:d5:61:03:cf:8e:f9:54:
                    50:31:2e:13:29:67:89:e2:46:0d:05:56:f1:e2:3d:
                    ae:9f:50:90:ce:ab:46:72:d4:fa:70:29:ee:0d:2a:
                    e7:56:d4:32:e3:94:99:50:2f:76:0d:7c:9d:22:b2:
                    ed:ee:d3:51:6e:57:1d:6f:8a:da:99:b4:51:c8:77:
                    43:9b:a4:41:7b:47:6a:eb:80:f3:4e:75:6b:97:f0:
                    b9:d6:f7:d9:ac:cf:91:94:9e:83:a3:fc:0b:b4:23:
                    52:03:13:cd:30:d9:8f:5d:a2:71:13:d1:42:f7:48:
                    7b:8c:25:75:fb:e8:78:08:76:c2:25:69:5b:49:64:
                    78:d7:e5:f7:1d:7b:18:36:65:20:63:68:11:41:ee:
                    d7:19:c0:f0:f6:7d:7b:f5:fa:ca:9f:fc:ec:ee:33:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5B:50:68:24:F8:3F:97:01:18:91:12:A5:52:98:6D:8D:87:14:AC
            X509v3 Authority Key Identifier:
                keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fa:18:3d:24:37:06:01:84:70:d4:2c:63:97:b5:fa:5e:4a:
         c5:ba:fa:9b:fb:d4:f3:ed:53:30:f3:a9:ae:3c:c1:64:f0:f5:
         ee:69:54:30:41:e3:f9:20:06:fe:a4:c2:15:98:d5:3f:80:20:
         18:8e:41:45:01:00:f2:75:f3:52:fe:f4:0c:7c:f4:36:03:d8:
         b7:80:5b:45:05:d3:b6:1b:50:92:f1:16:c0:8d:d5:7b:fc:7b:
         07:96:57:4f:f3:a8:c8:d3:ee:18:4e:8f:1c:d6:d3:d4:cf:5a:
         9c:72:cf:da:7e:64:cb:62:6b:15:68:51:84:12:2f:34:f0:b8:
         ca:e2:54:45:19:a1:e0:a8:f4:cc:a3:a0:8c:0f:a5:ee:fc:7b:
         4d:2c:98:7c:e1:09:32:8b:15:2f:eb:3b:ab:14:b6:d9:db:dd:
         aa:d4:82:8f:0f:be:db:46:b2:3e:de:5e:f3:34:87:70:77:d9:
         d3:c8:0d:fb:c3:44:fe:b2:58:d5:e2:64:aa:fd:8c:41:d2:a8:
         2a:f9:b8:7c:fa:ea:f5:5f:50:c1:e7:38:d9:2f:fa:e4:23:aa:
         6a:27:7a:f0:8a:b6:c9:59:ba:8e:b1:9c:af:a4:e9:3c:94:49:
         b5:67:75:36:83:f6:a6:28:df:87:32:13:ee:03:72:04:8b:ef:
         b1:ee:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----