Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft
File:                     D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json)
Hash identifier:          Rz83C/47rqCwdh7Orih9EKuPZgjaZzEEvlHANiopEy8=
Subject key identifier:   65:C0:EF:3D:B4:10:F6:38:9B:7D:1D:2D:94:EC:26:EE:C4:38:15:DF
Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB
Certificate issuer:       /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
Certificate serial:       645891D3F2755CF88B54F1E7E7E99450D65B4D30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft
Manifest number:          026A
Signing time:             Mon 27 Apr 2026 13:11:29 +0000
Manifest this update:     Mon 27 Apr 2026 13:06:29 +0000
Manifest next update:     Thu 30 Apr 2026 16:49:29 +0000
Files and hashes:         1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: Q4ueJP8hPhaPFhhhfOdvwx20KlXssYAngYOjQgSj1HE=)
                          2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: 7IqBpxVZHjqfgHzWU3S4QhDBbMlKh+5/MdFRd+vD9Sg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:58:91:d3:f2:75:5c:f8:8b:54:f1:e7:e7:e9:94:50:d6:5b:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB
        Validity
            Not Before: Apr 27 13:06:29 2026 GMT
            Not After : Apr 30 16:49:29 2026 GMT
        Subject: CN=65C0EF3DB410F6389B7D1D2D94EC26EEC43815DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:d3:62:83:35:9d:4c:90:ec:b3:c9:37:4f:
                    bc:fc:8a:b2:75:dc:bc:f3:97:00:54:d1:92:51:f8:
                    6d:f0:0e:63:9d:2f:b8:40:4f:98:70:70:53:5b:28:
                    ab:56:a0:85:5a:78:09:0f:71:fa:6d:04:74:5e:55:
                    d1:e5:bb:1d:01:b9:be:ce:2d:c0:ff:2c:2d:50:35:
                    e7:f4:c1:ac:32:93:96:d0:04:e7:09:c4:f4:89:af:
                    17:e5:35:c2:11:49:30:b9:08:2e:b9:41:4e:cb:d7:
                    9d:e4:fb:f2:15:1e:eb:ad:61:5e:aa:20:11:3f:a3:
                    5d:17:ab:68:5e:63:33:5f:c6:b4:7f:b0:48:02:2a:
                    4f:15:7d:f5:e3:87:d2:7d:59:7a:4c:06:30:93:3c:
                    18:f0:30:63:a0:22:16:bb:4c:39:ea:c9:1e:48:68:
                    d6:b8:b7:78:e7:43:81:c8:19:dc:fc:dc:54:d0:22:
                    70:ee:6c:6f:19:fa:3c:14:bb:8a:ba:3b:12:5c:ac:
                    2a:2d:75:e8:07:7f:7d:eb:4e:1e:1e:8e:74:22:d7:
                    ce:a6:19:48:11:da:21:0d:2b:84:25:52:16:21:38:
                    a6:37:6c:1e:66:bd:2a:49:d0:a4:dc:86:1e:32:c1:
                    f0:b5:73:82:fa:00:4b:0d:f4:9a:c0:4b:1f:16:d0:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C0:EF:3D:B4:10:F6:38:9B:7D:1D:2D:94:EC:26:EE:C4:38:15:DF
            X509v3 Authority Key Identifier:
                keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:58:8d:94:9d:29:cf:dd:6a:2a:f1:09:ad:89:7a:16:8d:89:
         d3:a6:21:b3:b7:22:12:ab:6f:13:bb:0e:f9:7d:24:48:8e:32:
         a4:58:e9:a9:b2:af:89:31:44:78:bf:02:d3:9a:c5:20:01:24:
         ac:fb:66:32:a5:62:76:54:da:26:4d:d7:1a:f2:f8:b6:97:ec:
         b8:28:5c:30:3e:fa:03:ca:3e:26:a2:53:d2:15:f5:ae:f7:75:
         a4:bf:79:80:39:75:84:de:0f:cd:34:7b:28:84:ec:e4:9a:38:
         14:6f:f3:a4:16:b4:d2:9f:53:70:5d:af:22:d9:74:35:62:4c:
         6d:68:7b:ca:36:2f:9d:04:63:42:50:fe:ad:55:f9:e8:f3:1c:
         43:1e:13:eb:f6:8b:57:e4:d4:63:2e:ca:b6:8e:b9:9e:e9:92:
         d1:7b:a1:23:3d:d5:9b:e3:72:73:a6:6f:ca:18:f8:8d:bd:41:
         89:85:7c:a6:ec:5a:0f:25:8c:13:44:98:ab:67:f8:b4:98:c4:
         bf:c1:f2:4f:d9:11:1b:25:f5:78:56:42:0c:de:f8:cc:12:80:
         74:28:36:67:4e:b7:0d:90:c3:d4:0a:c9:84:79:f5:22:01:cf:
         4f:39:db:77:7a:73:ec:a8:8f:62:29:1d:49:5f:c2:03:65:69:
         de:c5:cb:90
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZFiR0/J1XPiLVPHn5+mUUNZbTTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4
MTkxMURCQjAeFw0yNjA0MjcxMzA2MjlaFw0yNjA0MzAxNjQ5MjlaMDMxMTAvBgNV
BAMTKDY1QzBFRjNEQjQxMEY2Mzg5QjdEMUQyRDk0RUMyNkVFQzQzODE1REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9iNNigzWdTJDss8k3T7z8irJ1
3LzzlwBU0ZJR+G3wDmOdL7hAT5hwcFNbKKtWoIVaeAkPcfptBHReVdHlux0Bub7O
LcD/LC1QNef0wawyk5bQBOcJxPSJrxflNcIRSTC5CC65QU7L153k+/IVHuutYV6q
IBE/o10Xq2heYzNfxrR/sEgCKk8VffXjh9J9WXpMBjCTPBjwMGOgIha7TDnqyR5I
aNa4t3jnQ4HIGdz83FTQInDubG8Z+jwUu4q6OxJcrCotdegHf33rTh4ejnQi186m
GUgR2iENK4QlUhYhOKY3bB5mvSpJ0KTchh4ywfC1c4L6AEsN9JrASx8W0FthAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZcDvPbQQ9jibfR0tlOwm7sQ4Fd8wHwYDVR0j
BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF
MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx
MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj
MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5
NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBYjZSdKc/dairxCa2JehaNidOmIbO3IhKr
bxO7Dvl9JEiOMqRY6amyr4kxRHi/AtOaxSABJKz7ZjKlYnZU2iZN1xry+LaX7Lgo
XDA++gPKPiaiU9IV9a73daS/eYA5dYTeD800eyiE7OSaOBRv86QWtNKfU3BdryLZ
dDViTG1oe8o2L50EY0JQ/q1V+ejzHEMeE+v2i1fk1GMuyraOuZ7pktF7oSM91Zvj
cnOmb8oY+I29QYmFfKbsWg8ljBNEmKtn+LSYxL/B8k/ZERsl9XhWQgze+MwSgHQo
NmdOtw2Qw9QKyYR59SIBz08523d6c+yoj2IpHUlfwgNlad7Fy5A=
-----END CERTIFICATE-----