Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
File:                     74968D237E4D28CC12725975DFEBE487B0EAA72F.mft (raw, json)
Hash identifier:          ZAxVqk3kYzwdXWQflYEFdL4hzAHXU47NejX/Plw+JYc=
Subject key identifier:   AA:47:09:8A:BD:12:E0:5A:57:4A:3C:31:86:1A:9B:A8:13:DD:98:26
Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
Certificate issuer:       /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Certificate serial:       69AEF240CEE87C5387B98B3925632BA40C4668DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
Manifest number:          CF
Signing time:             Sun 04 Oct 2026 07:54:53 +0000
Manifest this update:     Sun 04 Oct 2026 07:49:53 +0000
Manifest next update:     Mon 05 Oct 2026 09:51:53 +0000
Files and hashes:         1: 74968D237E4D28CC12725975DFEBE487B0EAA72F.crl (hash: Fwg0xlh6/l4F9Wgjtv6V9YfpYSP5Htou/gb58XH7mi0=)
                          2: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ae:f2:40:ce:e8:7c:53:87:b9:8b:39:25:63:2b:a4:0c:46:68:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
        Validity
            Not Before: Oct  4 07:49:53 2026 GMT
            Not After : Oct  5 09:51:53 2026 GMT
        Subject: CN=AA47098ABD12E05A574A3C31861A9BA813DD9826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:11:fc:69:16:62:a3:a4:55:eb:5f:fd:91:
                    e9:73:33:e3:d3:7e:5b:ad:ef:da:30:e6:e3:b8:eb:
                    79:8f:8f:a6:d5:a0:ad:a3:dc:58:a0:0d:ed:12:91:
                    66:4d:48:e9:a4:63:81:80:6e:93:63:3e:c0:e0:4e:
                    83:f2:c3:b2:6c:49:b4:81:bf:d4:5a:df:b8:9a:8f:
                    61:98:2d:b1:9c:09:9d:5d:06:19:ef:94:7a:b1:c9:
                    af:12:ea:77:fd:69:75:50:f4:8c:d5:88:75:37:01:
                    b8:75:c7:ba:84:13:97:28:44:d0:6c:25:ba:61:41:
                    dc:9b:78:75:2c:e5:ff:bf:4a:d4:5e:b7:b3:8b:7c:
                    ea:c1:16:e9:b9:f5:8d:7b:45:95:79:ea:19:c2:da:
                    23:a9:b2:47:4c:d2:07:78:b1:40:6e:a1:d9:87:ae:
                    74:65:21:b6:c2:99:d6:38:40:d9:48:93:93:da:d4:
                    ba:e9:76:7c:b3:c2:36:11:de:1e:82:71:27:37:c7:
                    ff:ad:6e:12:cb:57:4b:3c:d8:47:6f:a7:5b:87:3c:
                    25:a2:e8:42:60:21:61:01:a5:1b:59:1c:79:a4:7b:
                    4e:f8:0f:52:5e:7a:12:22:b1:75:58:c9:a4:b7:58:
                    d7:39:86:2a:34:03:a9:e4:27:80:a2:0d:91:86:44:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:47:09:8A:BD:12:E0:5A:57:4A:3C:31:86:1A:9B:A8:13:DD:98:26
            X509v3 Authority Key Identifier:
                keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:57:cf:af:de:01:df:df:de:ce:ad:e8:86:45:5e:60:3f:b2:
         16:58:36:76:f8:86:a7:f3:aa:0d:b3:63:90:04:53:5c:ce:16:
         cb:68:82:99:53:e9:f0:65:82:4d:1d:a8:33:f7:9f:67:cc:6f:
         67:ac:cd:7e:6a:1c:80:01:62:d3:17:fd:69:cf:6d:4a:bb:8d:
         1d:de:a7:05:37:3c:ec:6b:d6:ee:61:9c:58:5b:be:d7:05:9f:
         d8:70:7d:05:3b:c0:1c:39:06:fe:26:c0:b1:48:f1:78:0a:b5:
         bf:43:58:6a:b1:d1:b8:38:00:73:03:9e:2d:a1:1e:50:80:14:
         b4:a5:69:4c:91:70:e3:07:eb:9d:0d:80:eb:56:74:97:e7:32:
         0a:d8:c6:5e:49:3c:41:ac:65:a3:4d:25:3d:f0:11:13:35:0b:
         ce:83:d6:a7:df:95:df:86:e1:05:4a:da:2c:9b:6d:24:48:67:
         25:be:28:3f:f8:3c:b6:e5:57:20:7d:a7:45:2f:95:4c:f7:18:
         09:bb:d4:b8:3e:eb:48:b3:4d:da:10:47:89:01:2e:93:f2:8b:
         0a:a9:f4:88:b2:67:ed:71:c6:6c:f8:57:d2:8e:54:71:3c:12:
         7b:e9:6a:07:2e:60:a8:ba:7b:79:10:52:55:01:d3:ca:86:0c:
         26:77:72:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaa7yQM7ofFOHuYs5JWMrpAxGaN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ5NjhEMjM3RTREMjhDQzEyNzI1OTc1REZFQkU0ODdC
MEVBQTcyRjAeFw0yNjEwMDQwNzQ5NTNaFw0yNjEwMDUwOTUxNTNaMDMxMTAvBgNV
BAMTKEFBNDcwOThBQkQxMkUwNUE1NzRBM0MzMTg2MUE5QkE4MTNERDk4MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQdxH8aRZio6RV61/9kelzM+PT
flut79ow5uO463mPj6bVoK2j3FigDe0SkWZNSOmkY4GAbpNjPsDgToPyw7JsSbSB
v9Ra37iaj2GYLbGcCZ1dBhnvlHqxya8S6nf9aXVQ9IzViHU3Abh1x7qEE5coRNBs
JbphQdybeHUs5f+/StRet7OLfOrBFum59Y17RZV56hnC2iOpskdM0gd4sUBuodmH
rnRlIbbCmdY4QNlIk5Pa1LrpdnyzwjYR3h6CcSc3x/+tbhLLV0s82Edvp1uHPCWi
6EJgIWEBpRtZHHmke074D1JeehIisXVYyaS3WNc5hio0A6nkJ4CiDZGGRJzJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqkcJir0S4FpXSjwxhhqbqBPdmCYwHwYDVR0j
BBgwFoAUdJaNI35NKMwScll13+vkh7Dqpy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjM5ZWFkODEtYWMxMi00NDc5LWIyZmItOTk4ZTAxODU0NTUxLzAvNzQ5NjhEMjM3
RTREMjhDQzEyNzI1OTc1REZFQkU0ODdCMEVBQTcyRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NDk2OEQyMzdFNEQyOENDMTI3MjU5NzVERkVCRTQ4N0IwRUFB
NzJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy
ZmItOTk4ZTAxODU0NTUxLzAvNzQ5NjhEMjM3RTREMjhDQzEyNzI1OTc1REZFQkU0
ODdCMEVBQTcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAVXz6/eAd/f3s6t6IZFXmA/shZYNnb4hqfz
qg2zY5AEU1zOFstogplT6fBlgk0dqDP3n2fMb2eszX5qHIABYtMX/WnPbUq7jR3e
pwU3POxr1u5hnFhbvtcFn9hwfQU7wBw5Bv4mwLFI8XgKtb9DWGqx0bg4AHMDni2h
HlCAFLSlaUyRcOMH650NgOtWdJfnMgrYxl5JPEGsZaNNJT3wERM1C86D1qffld+G
4QVK2iybbSRIZyW+KD/4PLblVyB9p0UvlUz3GAm71Lg+60izTdoQR4kBLpPyiwqp
9IiyZ+1xxmz4V9KOVHE8EnvpagcuYKi6e3kQUlUB08qGDCZ3cl4=
-----END CERTIFICATE-----