Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft
File:                     D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json)
Hash identifier:          /ClF4OK0J2Qez/WMwxeLjiBR3yGqtENV2uQsR9NJ2j4=
Subject key identifier:   0F:A6:FF:C4:49:68:D4:7A:B0:C4:0A:4D:D7:3A:6F:88:CE:BD:01:ED
Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68
Certificate issuer:       /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368
Certificate serial:       63D7070BAF90820BE81F2D123A07B926930AD4D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft
Manifest number:          DA
Signing time:             Wed 29 Apr 2026 08:34:39 +0000
Manifest this update:     Wed 29 Apr 2026 08:29:39 +0000
Manifest next update:     Sat 02 May 2026 17:03:39 +0000
Files and hashes:         1: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: 9CCDWYyp+q8jsFDm7z0V1CAEIoGe+JJCsokHBfVSuOo=)
                          2: 3135372e32302e3132302e302f32342d3234203d3e20313534343130.roa (hash: 2l2Mce3IIODsuV65WJPoKh9ocEJfKs6B1PPle50ZAFk=)
                          3: 3135372e32302e3132302e302f32332d3233203d3e20313534343130.roa (hash: lmVngEBe+ol/9b06ya+bCPv6lgMDxsavw+P3OiEfjPk=)
                          4: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: kToxDWGLAx7wPnTumpRERHYAC4YJ3ZjsOgXXR/j0FWs=)
                          5: 3135372e32302e3132312e302f32342d3234203d3e20313534343130.roa (hash: esrMCJUxCJv07GSY+ByORyNcBz/84VLcd99qgdERooU=)
                          6: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: OSAo9QWqyVe1VudNV/7NSJlH0xk8Gb3rIp16xTTxTOk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d7:07:0b:af:90:82:0b:e8:1f:2d:12:3a:07:b9:26:93:0a:d4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368
        Validity
            Not Before: Apr 29 08:29:39 2026 GMT
            Not After : May  2 17:03:39 2026 GMT
        Subject: CN=0FA6FFC44968D47AB0C40A4DD73A6F88CEBD01ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:d3:4c:3f:b5:42:48:e2:5c:33:ff:f6:45:
                    93:46:da:10:29:48:14:85:5a:ea:d1:5a:56:28:46:
                    ba:44:4c:ac:87:55:3a:b2:87:51:b1:f5:b9:a3:f6:
                    1e:f6:2e:5d:22:7c:23:e6:33:e9:f1:39:b1:48:2c:
                    d4:2d:b7:b6:69:e6:6e:30:b0:e2:14:cb:c4:d8:51:
                    35:00:8e:99:7d:f8:a9:6f:7a:ef:ca:2b:06:e3:40:
                    b6:4c:16:ed:09:78:c1:c7:88:63:a7:24:c2:77:9c:
                    63:1c:a5:e2:57:d3:6a:df:34:c1:84:e9:25:5f:7d:
                    17:45:54:71:36:b4:88:b6:10:05:cf:c2:d9:bc:18:
                    4a:b5:e7:24:4d:38:f9:03:05:4d:a2:2c:07:d3:7a:
                    c4:5c:d4:b4:86:e1:65:11:39:1e:99:10:7f:09:a3:
                    04:49:2c:72:52:dc:fb:ed:1e:f0:a2:1f:8c:d2:94:
                    be:28:e7:ed:6c:db:c3:9c:b8:e2:a4:9f:7c:2a:60:
                    32:c9:9d:da:ad:fb:c9:6d:e8:1e:5e:58:e1:b9:ce:
                    7c:da:84:14:a2:fe:8e:ee:a3:de:77:05:c2:c0:99:
                    38:82:74:dd:db:0c:78:40:ab:ac:07:d6:a9:91:2b:
                    3b:ea:e5:97:3e:f6:a6:0d:ab:bf:26:41:2b:1e:26:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A6:FF:C4:49:68:D4:7A:B0:C4:0A:4D:D7:3A:6F:88:CE:BD:01:ED
            X509v3 Authority Key Identifier:
                keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:96:9f:57:a2:2e:e9:6e:17:ed:92:f5:9f:75:94:6e:ef:0b:
         f5:1e:27:c3:54:d8:14:df:77:93:d3:9f:a7:5c:89:0d:6e:e2:
         d7:52:74:a8:09:ab:93:e2:98:11:23:9f:db:26:fa:02:b8:ae:
         f5:88:e0:97:34:c4:dc:0e:3d:c1:87:c3:f9:e8:03:57:fc:41:
         33:2f:11:f3:13:1e:11:03:d5:6e:73:fa:61:4e:0b:0e:ca:d7:
         a9:f4:a8:8f:90:7f:86:ec:0a:c6:cc:1f:70:01:c4:92:bf:33:
         b6:8e:d1:43:1a:ea:d9:26:a9:1e:6d:19:be:3d:5a:f4:43:9d:
         77:5e:df:46:1e:6a:3f:9b:83:33:58:cd:2f:a6:cd:3d:57:25:
         fb:f0:4b:66:60:e6:bc:b2:41:d1:77:53:f4:11:d2:9a:d0:2f:
         04:d4:7e:7d:0a:65:c2:9c:88:b9:27:31:64:2d:f0:1f:a2:67:
         eb:b8:54:ee:17:49:bd:81:86:3a:b9:81:14:7c:3b:28:04:44:
         7e:ed:72:18:36:dd:50:63:0c:1e:da:b7:f1:a0:14:d4:82:5b:
         70:41:10:7d:6b:90:d4:f3:ef:61:fd:b4:d3:0e:5d:30:bf:3e:
         3c:38:49:60:60:ed:aa:c7:71:aa:83:99:81:2c:29:00:68:7b:
         54:63:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----