Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
File:                     5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json)
Hash identifier:          XXgd3UE21saidwV9cITR+wXf/vEugMvFyPYzCVjXIRA=
Subject key identifier:   09:A3:0D:EB:0F:2F:84:38:A6:EA:BC:C1:D1:1B:59:F5:D6:F7:9E:BD
Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55
Certificate issuer:       /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
Certificate serial:       66A873238127279BEC10212D2D23F3E452F64F51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
Manifest number:          0245
Signing time:             Tue 28 Apr 2026 06:31:21 +0000
Manifest this update:     Tue 28 Apr 2026 06:26:21 +0000
Manifest next update:     Fri 01 May 2026 14:19:21 +0000
Files and hashes:         1: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: ez/A8NtspZYgSm5OFrTtpXQPdXyhXhr/Hk04T9XLp3g=)
                          2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: 77asK98Y6FwjqdnTI49OxJf732MTRMb0e9/FzCcCblc=)
                          3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a8:73:23:81:27:27:9b:ec:10:21:2d:2d:23:f3:e4:52:f6:4f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
        Validity
            Not Before: Apr 28 06:26:21 2026 GMT
            Not After : May  1 14:19:21 2026 GMT
        Subject: CN=09A30DEB0F2F8438A6EABCC1D11B59F5D6F79EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:70:96:66:fc:a6:66:66:8d:23:55:1c:1a:
                    e2:d1:15:6e:01:f9:ec:fe:65:33:ba:cf:9c:32:60:
                    20:20:68:d9:93:a0:de:e6:80:93:04:0b:64:14:9a:
                    08:9d:d7:a0:3c:6b:42:be:49:75:0f:99:8d:ed:61:
                    30:55:2c:a3:30:c0:5f:30:90:41:33:2e:7b:af:d6:
                    53:8c:f4:f5:5e:d4:cf:48:6f:de:56:5f:da:d7:fb:
                    1b:17:85:9d:fd:53:99:01:d3:3f:c9:ad:42:ae:8a:
                    f2:9e:32:69:53:3f:3e:ae:1f:57:c3:62:a1:54:0a:
                    4a:3e:86:82:9e:13:08:bd:2d:2d:83:76:72:b5:c2:
                    95:ca:d9:7b:0d:bd:d5:e0:60:6e:0b:51:cc:f0:36:
                    93:a1:f2:1a:de:ab:78:65:93:33:80:cc:75:e7:d0:
                    97:3d:ce:ae:e4:52:b2:6c:e7:ad:07:04:24:9f:c4:
                    4e:60:b6:dc:7e:6b:e0:9d:a9:1c:24:fc:f3:aa:6e:
                    d6:8b:fc:5d:13:c6:5c:65:37:54:38:35:61:5b:c5:
                    17:24:d9:75:9a:96:6a:c7:33:36:ea:50:b9:a3:11:
                    12:24:77:21:c9:57:3e:b0:68:6d:30:90:4a:b6:cc:
                    ea:6d:86:dd:ba:5c:45:fb:c3:d0:8e:c5:dc:96:47:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:0D:EB:0F:2F:84:38:A6:EA:BC:C1:D1:1B:59:F5:D6:F7:9E:BD
            X509v3 Authority Key Identifier:
                keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:29:6f:54:2c:f9:e7:94:54:47:59:0e:3c:25:1b:68:3f:68:
         2f:8b:71:66:37:84:24:8a:43:d1:68:b3:4a:d5:ce:6c:d0:ff:
         ac:93:29:27:18:78:f4:1c:fa:32:67:d5:db:21:5a:40:b1:76:
         47:03:28:ae:cf:a2:22:e6:07:4f:15:44:f1:40:46:c9:b8:87:
         1f:8b:fa:b1:a7:d7:3c:01:7c:d7:e2:76:42:29:34:c7:4b:76:
         fb:9a:47:d1:1a:f5:85:ec:64:aa:fc:55:3b:38:d6:a5:71:c9:
         3d:06:1a:b4:69:6c:bd:13:ee:53:27:31:7b:15:07:70:0d:da:
         d7:f9:b4:91:71:96:2d:ea:b5:01:b5:5c:1a:6b:51:7c:ae:a0:
         d4:95:a7:2b:98:54:46:21:b2:79:c2:15:62:57:e0:ae:ea:2d:
         2e:e7:19:04:b2:2b:4d:19:33:8c:36:08:81:54:79:c0:65:20:
         05:83:da:0b:c3:0f:d8:14:5a:a9:fc:ef:f1:ab:8f:b9:1d:0a:
         11:27:2f:f6:71:d7:dc:4a:20:6a:5c:5a:16:e5:a8:30:b4:e9:
         b2:d0:e6:e2:36:ea:0a:bc:92:36:1b:06:51:86:c6:45:75:4b:
         3a:f3:88:f7:4a:79:97:8b:14:51:ee:e7:bc:2b:c1:e7:d0:09:
         38:e7:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----