Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
File:                     6A18E24186A3D3ED8D5089777A2464365FF00A27.mft (raw, json)
Hash identifier:          vN6+pu8hj123C0MzaYfmHlRzuySQC0Xijff+xhdtsTw=
Subject key identifier:   71:54:E4:67:96:DC:BA:76:81:F1:0E:8D:9B:56:42:3D:32:0C:DC:E6
Authority key identifier: 6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27
Certificate issuer:       /CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
Certificate serial:       5246CD623D6B90C0895D9AD9AC0978AC05255A2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
Manifest number:          CD
Signing time:             Sat 03 Oct 2026 22:02:19 +0000
Manifest this update:     Sat 03 Oct 2026 21:57:19 +0000
Manifest next update:     Mon 05 Oct 2026 01:33:19 +0000
Files and hashes:         1: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: h3C8yms9g4R1YiVLRu6ZS9/9U4FvJR5pkKQb8FutKck=)
                          2: 6A18E24186A3D3ED8D5089777A2464365FF00A27.crl (hash: Yg6tW+77tZfgda++OMkWn8bdCuxSUh4lQ5uxYF4nD58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:46:cd:62:3d:6b:90:c0:89:5d:9a:d9:ac:09:78:ac:05:25:5a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
        Validity
            Not Before: Oct  3 21:57:19 2026 GMT
            Not After : Oct  5 01:33:19 2026 GMT
        Subject: CN=7154E46796DCBA7681F10E8D9B56423D320CDCE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:63:3e:b8:bf:7a:33:f6:e3:53:40:0f:e0:
                    61:e8:a9:1f:2b:f8:67:d4:ce:7c:6a:fb:5d:a0:ab:
                    80:80:89:31:d5:f3:25:21:71:42:6d:3c:15:4d:78:
                    d5:f6:15:e4:20:23:05:ac:81:01:b4:6a:0f:8a:81:
                    87:ee:03:c7:71:5a:69:92:27:a9:45:6e:67:65:2a:
                    7e:2f:60:42:a1:7a:7e:f6:ac:a1:da:9a:88:17:ee:
                    97:2a:7c:d8:c6:b2:a3:bd:5b:38:a6:df:f8:f3:16:
                    b0:0a:5f:2f:d5:39:af:ff:e8:a7:4b:92:4b:78:9f:
                    97:db:c7:db:65:a3:61:c7:62:44:a6:1c:0f:d2:6b:
                    55:f8:a0:d5:86:45:35:69:3d:14:94:b2:28:aa:8d:
                    11:15:fc:49:09:09:48:a2:ef:5b:01:ff:21:22:3d:
                    a8:cb:83:f4:19:30:2e:5b:4f:d0:c2:44:f0:23:dd:
                    ea:dd:da:9d:87:4b:e2:71:e1:1f:8a:e2:31:6f:5d:
                    bf:4a:a6:ad:27:68:f9:8d:ae:7e:87:51:e7:9d:4d:
                    4b:d3:7d:fa:de:28:2d:a7:60:dc:dc:a6:07:f8:ae:
                    d9:46:ee:04:40:2a:c7:eb:2f:e8:63:92:c0:51:58:
                    4b:37:60:cb:48:7d:17:68:d7:27:b4:39:4f:80:e4:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:E4:67:96:DC:BA:76:81:F1:0E:8D:9B:56:42:3D:32:0C:DC:E6
            X509v3 Authority Key Identifier:
                keyid:6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ac:cc:17:02:c0:d9:e9:ba:66:a5:94:b2:84:1b:b7:b4:07:
         7e:2f:2e:28:21:9a:82:69:9e:ef:83:a3:4c:8d:b1:eb:a5:07:
         ab:c6:65:1b:92:54:32:7b:7e:b2:87:78:05:07:d0:f7:33:45:
         35:be:c7:a0:13:db:67:55:4a:d0:60:ae:28:4c:36:ab:27:52:
         8b:f6:ce:1e:f0:a1:aa:e5:9f:f2:22:ff:fd:3b:43:e3:0a:6c:
         b7:9c:27:ee:32:11:c4:ff:d3:17:72:df:ea:a7:f2:e6:e3:f1:
         48:a7:99:fe:41:36:2d:17:14:d3:db:66:2a:60:05:05:0f:ca:
         7d:a3:a3:b0:5f:75:26:f8:ac:f1:c3:29:08:38:e0:2b:84:0d:
         b9:f7:e1:3f:07:4e:51:1c:8f:42:28:b8:23:d4:61:42:8a:c6:
         cb:bf:8a:34:f5:16:95:7b:9c:06:18:bb:b0:14:65:e6:0a:92:
         3b:d9:c9:b7:a4:2e:5a:71:b8:54:dc:59:1e:b7:0e:c2:b8:a8:
         b3:77:9c:06:55:a6:4f:54:9d:ac:c2:71:89:da:40:cf:f6:9b:
         80:18:d6:61:be:50:e9:ca:39:93:1d:d1:4f:15:31:5c:67:de:
         25:a0:10:b7:dd:00:9d:82:b1:2c:98:d9:2d:0a:b4:e4:0e:e2:
         4b:51:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----