Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft
File:                     53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft (raw, json)
Hash identifier:          jb/kyj2RgXYeACZD7zMqtwFMPxWcpyWUdzwAtxiakbY=
Subject key identifier:   38:67:15:26:79:B8:49:CC:36:29:A6:35:9D:0F:B1:63:20:03:CB:EB
Authority key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E
Certificate issuer:       /CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E
Certificate serial:       3D13266FA74EDA0D9A1439EA9BFD2ACAA0387581
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft
Manifest number:          0232
Signing time:             Tue 28 Apr 2026 20:01:29 +0000
Manifest this update:     Tue 28 Apr 2026 19:56:29 +0000
Manifest next update:     Sat 02 May 2026 06:32:29 +0000
Files and hashes:         1: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: Xr1e6YuIMSI5rKzC7+hK1bIDu6gOhNq675X/0EmA45E=)
                          2: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl (hash: JRwSVHNxatMlhgfdMvinMW/nivR13ScOzf4ovSeovlM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:13:26:6f:a7:4e:da:0d:9a:14:39:ea:9b:fd:2a:ca:a0:38:75:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E
        Validity
            Not Before: Apr 28 19:56:29 2026 GMT
            Not After : May  2 06:32:29 2026 GMT
        Subject: CN=3867152679B849CC3629A6359D0FB1632003CBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cf:fb:03:7c:94:0b:b6:91:c3:c2:d0:88:55:
                    45:b1:c6:7d:59:81:ee:c7:36:85:e7:67:97:82:d7:
                    fb:de:ef:44:13:10:49:a2:22:66:da:ab:1a:42:a1:
                    bf:55:f0:4c:4a:6f:13:c5:57:e8:7d:67:65:07:29:
                    e8:e5:16:c5:5f:02:3e:ee:24:d9:72:ec:c4:01:94:
                    7e:b8:1b:9e:34:23:ec:01:3f:b6:66:99:b1:19:b4:
                    aa:31:81:26:62:0b:30:ee:e8:e2:74:26:3f:57:15:
                    a7:29:e0:79:94:0b:18:5b:ac:11:65:4d:67:51:c4:
                    38:9a:04:65:89:6c:f0:a7:b5:be:88:19:58:76:23:
                    70:ba:30:ee:a6:16:95:ad:8f:df:f6:89:6c:b4:4e:
                    1c:6d:ab:7d:37:37:a6:65:bd:f7:b1:ce:8a:6d:3d:
                    a2:81:3f:0a:41:d4:88:f8:b1:bd:e8:34:95:e9:df:
                    c1:23:58:78:e0:af:cd:46:01:7a:99:ad:03:06:af:
                    fb:a9:05:24:6c:9c:a8:6e:39:57:42:f9:67:e2:b0:
                    01:bf:bd:66:0f:09:d1:11:f8:3b:18:21:5b:2f:23:
                    10:62:d5:7f:41:a3:ca:0d:67:d6:d2:b2:f7:b4:b5:
                    a4:25:17:da:6f:03:02:25:09:39:13:72:0f:08:2a:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:15:26:79:B8:49:CC:36:29:A6:35:9D:0F:B1:63:20:03:CB:EB
            X509v3 Authority Key Identifier:
                keyid:53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:72:fa:b4:73:80:4a:54:75:67:ae:de:2e:c3:55:f4:8c:
         f7:fa:eb:df:cc:3c:ac:f3:dc:15:a4:47:1a:d5:e8:95:51:73:
         69:da:2d:4f:99:d2:2b:2a:ce:2a:94:59:9b:54:28:72:b9:07:
         cb:74:c1:33:a1:1b:db:36:ed:8d:aa:c9:b9:71:66:6d:55:85:
         d3:c1:d7:83:02:dc:5a:f7:28:ac:97:7c:f5:91:ff:9f:12:58:
         67:ec:e0:c8:09:9b:73:52:1d:8b:b3:c6:b0:42:1b:24:21:37:
         46:88:cb:76:be:29:97:86:1a:c1:64:8d:3e:03:b2:35:93:98:
         82:97:26:bc:8c:3d:37:ec:26:ba:d6:ac:d3:43:63:11:c5:05:
         86:7b:a6:63:0e:6a:14:0b:12:96:de:06:58:e7:cd:08:6c:7e:
         56:45:94:6f:f5:5b:cb:3c:b6:1e:36:c6:93:18:ba:b1:f3:fd:
         5a:46:0d:cf:cb:0e:4a:60:fc:c4:7a:46:d3:72:b4:97:7f:53:
         fe:9b:a9:d8:ec:4c:c2:c1:96:98:60:d8:6b:97:e5:cc:3d:e6:
         59:05:58:c1:ff:37:f8:e7:1b:97:32:37:29:d0:3e:79:1a:41:
         1e:79:38:fb:ac:02:d4:b6:04:fe:1b:fe:a7:5d:ee:90:28:34:
         bd:15:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:13:55 2026 by rpki-client