Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft
File:                     DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json)
Hash identifier:          3nAiMhub3pFrWsVSE+jheuQvp34UIyjzFYOqPQ/na0c=
Subject key identifier:   48:D5:F0:74:38:63:A0:04:B5:7D:6D:02:4D:6A:95:BF:26:95:C6:EF
Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE
Certificate issuer:       /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE
Certificate serial:       523E944243959007D1702C97065B9D4C7F566557
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft
Manifest number:          056A
Signing time:             Wed 29 Apr 2026 09:31:07 +0000
Manifest this update:     Wed 29 Apr 2026 09:26:07 +0000
Manifest next update:     Sat 02 May 2026 14:03:07 +0000
Files and hashes:         1: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=)
                          2: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: 5MjzA7ggGQNxTqAJbszB9pFHZwIOHylNBWFXz46HLnY=)
                          3: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3e:94:42:43:95:90:07:d1:70:2c:97:06:5b:9d:4c:7f:56:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE
        Validity
            Not Before: Apr 29 09:26:07 2026 GMT
            Not After : May  2 14:03:07 2026 GMT
        Subject: CN=48D5F0743863A004B57D6D024D6A95BF2695C6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:d6:a7:2f:3b:e3:f0:7a:09:3e:90:cf:1c:
                    05:b0:d3:bd:84:a5:a1:1e:39:4c:12:6e:3d:d7:f8:
                    c4:4f:11:f3:68:f9:f1:7e:ef:d7:da:b0:35:58:51:
                    3a:fc:47:68:95:29:cd:ea:3d:b3:09:87:6e:77:8b:
                    f1:6c:f0:2e:fd:3b:53:44:30:7c:0c:87:3a:c5:8b:
                    0a:ae:dc:b7:e7:46:81:ab:a2:82:4c:90:4c:ca:c2:
                    75:c3:8c:a4:73:fb:70:ad:41:0f:76:32:bf:60:3a:
                    ae:eb:aa:e5:37:75:aa:5b:ef:90:19:32:09:be:c8:
                    bc:a6:b5:0a:56:d0:0c:4e:49:2a:6a:c6:26:40:23:
                    9c:fa:81:58:f7:6e:23:5c:94:66:83:93:ae:23:0e:
                    2c:cc:7e:be:8f:42:ae:8f:49:41:3a:1a:ce:bf:aa:
                    a2:9d:0f:77:9f:3f:3b:33:e4:82:9a:9d:ee:13:4a:
                    2f:a9:e7:86:87:e6:25:6b:c7:fa:f9:3c:87:a1:2b:
                    62:27:de:18:e0:e9:ff:f4:8c:6c:0e:a4:c0:cd:5a:
                    20:4f:ed:7e:ce:4d:a2:e0:7d:b4:8d:a0:cd:08:0e:
                    4c:c3:af:03:db:8c:f6:19:8a:25:95:71:ca:36:f9:
                    cb:bb:d9:6f:e0:b8:c9:2b:dd:fe:16:2d:0a:51:59:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D5:F0:74:38:63:A0:04:B5:7D:6D:02:4D:6A:95:BF:26:95:C6:EF
            X509v3 Authority Key Identifier:
                keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:3d:3f:38:f2:52:43:9c:f8:40:8d:2e:76:24:8a:df:26:
         0f:d4:f4:5a:73:ce:23:ce:05:2e:7c:b5:ea:56:6b:5b:05:10:
         fa:fd:a2:92:de:4f:93:9c:9b:fe:4f:51:32:94:80:5e:1a:ff:
         b0:8f:b8:66:21:ae:39:f6:57:85:06:fb:08:72:78:a2:01:b3:
         ed:a8:45:1b:a7:e3:2e:c8:14:c8:08:da:bf:f3:be:76:12:98:
         85:c4:78:47:14:b6:20:ee:b6:38:1a:1a:d8:ee:10:e8:ec:c6:
         88:ea:fa:7b:f9:8a:14:f2:f3:1a:a2:db:b3:5a:e4:a1:97:9e:
         8b:67:b9:4e:95:71:98:01:a6:3c:ac:49:5f:87:3f:f2:42:a7:
         b7:1c:37:fc:28:41:55:80:34:33:84:85:a4:f1:8f:bd:59:35:
         fa:6f:3c:f0:a1:4c:30:56:c6:ca:02:b5:41:3a:72:fa:94:f9:
         7a:b3:ed:16:fe:15:c6:d0:00:bb:03:28:72:7c:17:ab:95:c4:
         43:c7:64:10:d9:02:ae:cc:c3:38:77:f9:15:54:05:f3:c7:62:
         89:3b:03:c5:e8:5f:cd:91:13:6e:4d:ac:30:dc:c6:04:0e:cd:
         f7:1f:9b:2d:1b:3b:a9:da:e6:33:e9:a6:a1:02:cb:c6:ce:8f:
         87:06:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----