Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft
File:                     D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft (raw, json)
Hash identifier:          AJQz70CHqClaI1JCu5fmhPIJ1lcbs3ru6xvzZLXt7hM=
Subject key identifier:   29:3B:E9:CC:66:D4:A8:41:D5:FB:BB:B7:01:33:D4:63:4F:A4:F6:75
Authority key identifier: D9:23:80:7D:26:71:17:27:AE:46:83:EA:63:AB:E3:CC:FC:B9:F1:E8
Certificate issuer:       /CN=D923807D26711727AE4683EA63ABE3CCFCB9F1E8
Certificate serial:       71C116663CF88526E8A8FCE4FAD6D430B7F15EDC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft
Manifest number:          09
Signing time:             Sat 03 Oct 2026 20:46:07 +0000
Manifest this update:     Sat 03 Oct 2026 20:41:07 +0000
Manifest next update:     Sun 04 Oct 2026 23:58:07 +0000
Files and hashes:         1: D923807D26711727AE4683EA63ABE3CCFCB9F1E8.crl (hash: tX9RKalb6YC+YF017IPNIL6C1F7mkfAVCyoP9znlWow=)
                          2: 3138302e39342e31302e302f32342d3234203d3e20313339343436.roa (hash: BuIlszzbvWcauUBCBgYhL883K9NBeeatO59HysL2Fm0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:16:66:3c:f8:85:26:e8:a8:fc:e4:fa:d6:d4:30:b7:f1:5e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D923807D26711727AE4683EA63ABE3CCFCB9F1E8
        Validity
            Not Before: Oct  3 20:41:07 2026 GMT
            Not After : Oct  4 23:58:07 2026 GMT
        Subject: CN=293BE9CC66D4A841D5FBBBB70133D4634FA4F675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:25:54:e5:98:55:69:47:3c:99:50:9f:60:
                    e9:38:f4:cd:0a:00:64:00:50:ac:f0:79:11:24:d6:
                    bb:c1:17:6e:b2:81:c0:62:81:87:3c:cf:ed:4b:f4:
                    c2:c4:2d:b0:c7:3d:95:0d:c3:7d:e2:42:04:e3:d5:
                    b5:d9:aa:aa:37:cd:23:9b:7e:bc:69:e0:ea:20:83:
                    79:ea:46:a2:7b:57:32:d9:ab:31:c1:fc:1a:36:9d:
                    ca:19:73:a6:b7:9e:af:c4:02:8c:4e:23:6e:c6:12:
                    c7:c5:d3:30:08:bd:7e:7f:eb:d0:84:42:0a:51:9f:
                    45:f3:44:d9:f2:c1:cb:5a:97:d1:5b:a1:41:d0:aa:
                    fa:fc:cc:cf:27:77:af:4f:2d:d9:a2:48:ce:bf:f4:
                    c6:97:7f:a1:86:2b:22:c0:e9:cc:86:f3:d7:e0:72:
                    f0:dc:0e:90:80:48:4e:d6:d7:98:9f:a8:cd:3b:0a:
                    a6:20:9e:d8:9e:0b:6a:f8:8b:bd:a0:55:5f:fe:93:
                    e4:b6:22:f1:d7:72:a3:d3:5c:21:b0:87:9a:d2:54:
                    7f:cf:93:96:e4:e3:03:4a:d7:19:8f:0c:c0:f1:1d:
                    da:90:ba:e1:9c:19:fe:3a:ef:1a:2f:d4:db:87:5c:
                    ea:f6:70:69:8a:51:63:e0:65:63:56:ec:e0:2e:3e:
                    fb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:E9:CC:66:D4:A8:41:D5:FB:BB:B7:01:33:D4:63:4F:A4:F6:75
            X509v3 Authority Key Identifier:
                keyid:D9:23:80:7D:26:71:17:27:AE:46:83:EA:63:AB:E3:CC:FC:B9:F1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/755e7f0a-7d90-4cb5-94be-ffe46f6c6145/0/D923807D26711727AE4683EA63ABE3CCFCB9F1E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:a4:65:3a:79:8b:56:c4:e5:38:b3:f8:21:36:59:46:0c:
         2d:e4:a5:1e:11:f0:a2:84:af:e7:21:fc:15:18:50:a0:ac:8e:
         9d:50:e6:60:24:7e:d6:07:d0:4f:5c:a6:db:d8:b2:f5:2d:c8:
         70:c3:15:c6:4f:a8:15:db:c0:00:c9:50:5e:77:64:9a:f2:a4:
         38:01:e1:b2:03:37:fb:5a:d3:a9:b7:d7:af:ca:6d:0b:57:5a:
         aa:b8:6a:d6:d3:e1:c6:e7:41:5c:bd:6c:15:4e:90:00:69:5e:
         2f:58:2c:80:79:97:f3:65:bf:29:c1:20:f8:b9:69:68:a3:8d:
         a6:ea:80:91:e2:d0:0d:8e:bc:b5:06:4d:ab:b5:d4:84:e6:f3:
         8e:d0:db:a3:06:0b:63:f9:71:af:54:18:f6:cd:15:b3:fa:77:
         2c:8d:d0:73:d0:3d:f1:bf:5f:1e:e1:e4:13:f2:a6:6f:04:e7:
         21:61:46:b2:5e:f9:4a:fb:eb:79:64:92:89:87:3d:c2:6e:db:
         5e:62:5f:ce:a4:26:b7:3b:e5:4d:5e:f9:dd:03:d3:66:98:88:
         ae:64:6d:8d:3e:27:72:c3:68:87:34:23:ab:30:43:f0:36:ee:
         18:62:ad:76:ba:eb:09:2f:cc:ac:d9:d3:dd:76:59:f3:36:0c:
         70:c8:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----