Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
File:                     528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft (raw, json)
Hash identifier:          fw/wMNKdKQcmt1S61iyYrTnTadpaHU2C7LNlXD6VPwg=
Subject key identifier:   AD:07:AF:DA:CE:8A:23:09:FA:B2:8F:7A:89:77:E0:0B:C8:9C:DD:76
Authority key identifier: 52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB
Certificate issuer:       /CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
Certificate serial:       2FE6755938BA739DC5936058DEF3B2346379D349
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
Manifest number:          0535
Signing time:             Tue 28 Apr 2026 06:40:58 +0000
Manifest this update:     Tue 28 Apr 2026 06:35:58 +0000
Manifest next update:     Fri 01 May 2026 09:55:58 +0000
Files and hashes:         1: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl (hash: /6wGz1ozD9DVFIMal0x6Ab1DOi/CmU9tqvxyxOuF72E=)
                          2: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: hmq0uoHwUsEo+oTXEtyTpYYQCEB74jpeYd9ceOhWLKI=)
                          3: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: /RTTrDt1roX5iqnN5YmyZ+CyR+tqtyybCHqOwLYwxXI=)
                          4: 3130332e3139352e38392e302f32342d3234203d3e203538343034.roa (hash: 8vEqnPeXr9755NhRmkDVV3kvpgE2wfzA2jlzpFzSE/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e6:75:59:38:ba:73:9d:c5:93:60:58:de:f3:b2:34:63:79:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
        Validity
            Not Before: Apr 28 06:35:58 2026 GMT
            Not After : May  1 09:55:58 2026 GMT
        Subject: CN=AD07AFDACE8A2309FAB28F7A8977E00BC89CDD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:47:6d:96:54:72:95:09:87:20:de:87:2d:35:
                    01:5d:4c:f7:be:48:d5:4f:d7:90:ec:49:ac:ec:26:
                    ea:1a:32:44:3e:23:c9:62:ed:00:eb:23:5f:19:27:
                    c6:89:96:41:27:33:95:6e:b1:b5:5c:96:a5:71:77:
                    0d:ba:de:dc:fb:9e:ad:c9:70:fc:ef:7c:98:ef:72:
                    d1:74:7d:82:30:e3:12:d8:ee:ad:0c:04:da:6c:62:
                    10:c1:22:6f:12:bb:d3:56:e4:49:82:e5:d5:32:27:
                    da:f5:7d:1b:c4:2d:92:31:9c:cf:87:a7:f8:f1:22:
                    38:c5:58:3c:de:21:d6:85:d5:39:68:f6:df:78:68:
                    ce:67:a6:0a:c5:67:10:dd:a8:41:b1:45:e2:a7:5e:
                    59:49:31:80:ba:5c:07:51:81:79:ab:cf:b1:ae:5c:
                    49:43:fa:b6:0a:7b:95:bb:d0:49:78:ed:3c:0a:aa:
                    92:78:e5:cf:d6:41:70:15:aa:20:59:14:ee:b2:c2:
                    44:8e:da:8a:b4:4b:9a:8e:46:49:5a:aa:36:d5:fa:
                    0c:9e:57:89:62:f1:21:6c:48:8c:5e:5f:00:f7:f1:
                    38:96:0d:04:75:41:3c:4e:79:35:b9:84:02:b0:8e:
                    73:5c:6d:3d:09:67:93:e2:0d:d6:4d:9b:f5:39:3b:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:07:AF:DA:CE:8A:23:09:FA:B2:8F:7A:89:77:E0:0B:C8:9C:DD:76
            X509v3 Authority Key Identifier:
                keyid:52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:69:32:e3:06:5c:21:4c:18:56:82:e1:a0:12:4a:f6:de:e5:
         e4:8f:27:3c:72:a1:63:73:23:a5:4f:00:9a:7f:f6:40:a3:25:
         cf:1a:ef:aa:81:19:f5:5d:10:61:d6:75:d7:00:cc:c1:71:99:
         48:c5:be:8f:b7:e3:0c:d9:4b:3c:2c:61:7a:a3:4d:b3:95:84:
         ee:f4:40:3d:87:cc:63:f4:4c:e7:ed:e2:6d:17:4c:f8:7f:7c:
         04:8b:6f:70:98:58:da:bc:dc:88:24:be:92:e9:7c:40:65:cc:
         ef:1c:b3:4a:58:18:55:f7:46:cd:fe:8a:8d:7f:4b:a6:8f:bf:
         5e:20:01:35:42:9f:d0:10:ef:05:fa:36:03:3c:fc:92:3a:87:
         d6:07:e2:ad:cf:a3:8b:92:cb:5f:f5:5e:ef:77:0f:95:c0:19:
         4b:89:bd:01:11:b2:8a:6f:75:6e:a6:b9:47:91:b5:43:c6:f9:
         5f:7a:ff:2b:4e:b2:c6:f5:bf:42:b9:e8:4f:b7:33:4e:70:fa:
         a0:c0:cb:12:53:11:d4:03:e2:29:6c:30:b9:8b:e8:32:bc:02:
         3f:62:39:db:d6:a9:0e:29:d6:d4:3b:a3:2d:bf:61:a9:23:5c:
         93:5b:c0:07:5c:da:a1:80:e3:fe:3d:5f:bc:92:70:34:9b:09:
         33:db:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:27 2026 by rpki-client