Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
File:                     66B373A1A8E4839699E23D35A5592185C65D4217.mft (raw, json)
Hash identifier:          pPmLTswnThk41tw5/6vM2+JC8lGqt1kbBc6QEaK8Xjg=
Subject key identifier:   73:90:81:44:3C:23:90:1E:75:EB:5B:F6:CB:BF:3A:6A:C8:68:2D:2E
Authority key identifier: 66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17
Certificate issuer:       /CN=66B373A1A8E4839699E23D35A5592185C65D4217
Certificate serial:       4ECAB32DF90AA66B3DC523328F0BFEE5C7A3FE41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
Manifest number:          D0
Signing time:             Sun 04 Oct 2026 04:30:47 +0000
Manifest this update:     Sun 04 Oct 2026 04:25:47 +0000
Manifest next update:     Mon 05 Oct 2026 06:21:47 +0000
Files and hashes:         1: 66B373A1A8E4839699E23D35A5592185C65D4217.crl (hash: bsylc/k7mSZGDpDc2DWCS/CkdnWjMw1eWp0QFRTOWbI=)
                          2: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: WyiqkRr/WwMALxqKWgtBGW8I5DUVuOnXnmofYyW+gKQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ca:b3:2d:f9:0a:a6:6b:3d:c5:23:32:8f:0b:fe:e5:c7:a3:fe:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B373A1A8E4839699E23D35A5592185C65D4217
        Validity
            Not Before: Oct  4 04:25:47 2026 GMT
            Not After : Oct  5 06:21:47 2026 GMT
        Subject: CN=739081443C23901E75EB5BF6CBBF3A6AC8682D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:d6:37:f1:03:db:e9:5b:7d:11:29:30:2c:
                    8e:ba:65:ac:a5:73:07:36:e8:84:da:57:d3:50:8e:
                    1c:93:d9:0e:4b:b4:7d:50:72:c1:d4:06:ce:18:67:
                    7c:3d:db:a2:39:85:e5:1e:a5:8c:11:d1:81:92:26:
                    eb:d1:2e:4c:1b:2c:ba:da:b0:d2:db:b3:e5:9c:a5:
                    b3:1f:4b:6d:88:c4:57:bd:cf:cb:77:cc:70:f4:a4:
                    86:6a:d7:e0:ca:ab:50:a8:bb:3c:66:62:02:4a:43:
                    7c:b6:93:6c:2a:63:32:dc:82:ea:ff:e4:90:58:ef:
                    ce:aa:b9:94:0b:57:2d:12:1f:da:d7:0c:74:c7:3d:
                    e9:de:63:fb:7e:9b:49:e9:00:05:82:38:1d:38:ff:
                    73:2d:26:1e:93:57:a5:78:af:a1:21:bf:a6:df:7c:
                    c7:97:81:21:5f:57:4c:87:ea:09:b8:17:a4:00:99:
                    42:68:dd:6c:5a:40:ba:91:e3:a8:f7:a8:32:df:95:
                    6b:c4:64:c8:d8:27:fc:46:ee:4f:44:03:a1:8e:a9:
                    2f:76:69:97:d4:30:8b:20:37:d6:f6:a7:f8:b5:00:
                    28:a8:d0:0c:6d:cf:bb:70:a1:af:01:e5:a1:4b:c4:
                    d3:36:8c:ec:d2:76:6b:14:ce:3d:85:16:4b:1a:95:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:90:81:44:3C:23:90:1E:75:EB:5B:F6:CB:BF:3A:6A:C8:68:2D:2E
            X509v3 Authority Key Identifier:
                keyid:66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cb:69:54:6a:4a:27:dc:95:d1:5b:f1:b5:38:a2:a3:e8:3c:
         0f:df:ef:63:9b:8a:30:27:11:04:e9:50:c0:ee:9a:e1:87:2d:
         68:a7:77:97:77:4e:ae:65:73:4e:ef:8e:99:fb:a5:2e:64:21:
         69:a7:85:ac:d8:79:78:12:fa:9b:c6:b6:b9:eb:18:fc:7a:e9:
         ee:f8:43:ea:ad:86:28:63:d6:e9:96:ee:7a:2a:a9:23:f9:b8:
         2d:69:84:5e:73:1e:13:7c:cc:8e:6d:99:a8:e5:53:c6:15:fe:
         0c:d5:10:fc:dc:7d:fe:e6:34:16:ef:14:a3:bf:03:1d:26:d7:
         ab:3e:ad:74:2f:f4:5f:1e:22:e9:0c:d5:d9:9a:f3:bd:d6:25:
         6f:e2:51:6f:c0:6b:76:d5:6b:14:a4:a6:5b:32:33:1c:26:12:
         13:f3:4c:5b:15:ee:f0:54:ed:91:67:d8:7f:a6:64:53:e9:68:
         65:9b:4c:24:c4:c5:79:3e:7a:1e:8b:37:b0:cb:af:11:6f:b9:
         83:1c:72:e0:42:e2:41:3c:20:fe:da:6a:fd:0a:0a:8e:a2:02:
         4f:c3:38:93:53:b0:96:8b:75:e6:21:9b:e6:13:53:92:7c:eb:
         03:f4:eb:fb:59:66:3c:af:80:3f:9e:67:3b:c3:47:c9:2d:a7:
         cc:09:fa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----