Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft
File:                     52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json)
Hash identifier:          VP4fVJ3qCJx7v91hKm9brHortdQzXXmmcK9NZvyafA0=
Subject key identifier:   D0:96:D2:02:A5:44:FE:62:CE:00:CF:3D:BA:79:BC:6E:78:98:6D:F2
Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A
Certificate issuer:       /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A
Certificate serial:       22E2E1842AE5CFBC9914A154F0AC24AD0EB5132B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft
Manifest number:          FB
Signing time:             Tue 28 Apr 2026 06:40:56 +0000
Manifest this update:     Tue 28 Apr 2026 06:35:56 +0000
Manifest next update:     Fri 01 May 2026 09:00:56 +0000
Files and hashes:         1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: pR6eogbZvQzPFnI0kZLcItGmRoYFBBreikW5pxdST7Q=)
                          2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: 8S5a55zfuBhU11BOPONUrwzBrt3axLmV/yelTJY+0+k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e2:e1:84:2a:e5:cf:bc:99:14:a1:54:f0:ac:24:ad:0e:b5:13:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A
        Validity
            Not Before: Apr 28 06:35:56 2026 GMT
            Not After : May  1 09:00:56 2026 GMT
        Subject: CN=D096D202A544FE62CE00CF3DBA79BC6E78986DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:32:26:39:49:97:89:a3:1c:15:88:a2:c9:
                    f0:aa:94:4c:ba:9a:6c:03:7f:cd:5a:5a:04:e4:48:
                    a4:c5:63:78:20:9d:98:15:f8:b7:1e:d4:e8:6b:76:
                    cb:1e:46:1c:8b:b1:ca:31:fc:fc:da:f0:05:a6:c3:
                    ee:f1:5a:be:b5:6a:00:f6:72:87:55:7b:87:9b:60:
                    24:dd:37:06:aa:fd:ee:f0:ab:6d:f5:20:3f:4f:96:
                    84:3b:78:a9:91:0c:ee:64:23:08:d2:43:1b:c0:c7:
                    bb:18:fc:c2:f8:9d:20:84:89:a3:62:b5:ea:8c:c3:
                    72:62:cb:f8:82:b1:38:27:3f:74:ea:e5:58:27:01:
                    62:01:05:a6:75:5e:6a:e9:6b:bf:f5:bd:e3:2e:65:
                    57:3f:d2:b9:e2:a9:57:54:aa:38:1d:55:82:03:a4:
                    84:a0:4f:b6:ee:82:7a:72:e1:a9:37:6b:de:dc:a8:
                    d1:1e:e8:b2:04:7f:e7:ce:8e:bb:02:c1:2d:9d:31:
                    48:17:e5:84:bf:bd:22:53:95:62:36:21:95:39:f3:
                    e5:71:a6:59:28:60:c8:70:12:f3:77:5c:c4:45:96:
                    16:a1:2f:81:e0:a5:52:9d:5b:cf:46:66:ef:37:52:
                    9f:b1:c1:bd:87:68:2f:d3:71:22:15:0b:fe:92:be:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:D2:02:A5:44:FE:62:CE:00:CF:3D:BA:79:BC:6E:78:98:6D:F2
            X509v3 Authority Key Identifier:
                keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:61:67:1a:26:50:8b:d2:6a:c0:e1:f0:04:95:65:a7:3a:16:
         ed:7e:ce:0c:c4:7f:11:82:63:8d:ce:7b:ee:6c:b0:bd:db:d8:
         66:f9:05:88:c7:ef:09:14:d8:81:71:5f:e8:5d:81:fb:60:83:
         3c:d2:9e:3d:cb:7b:d2:bd:af:eb:81:dd:1d:16:78:85:50:97:
         05:4c:b3:c0:40:c7:f5:38:94:f8:a6:94:86:47:7a:c8:68:7d:
         99:cd:79:17:81:87:f7:23:b8:e6:ec:f3:2e:b4:81:47:c8:ed:
         a7:51:74:d4:f1:c5:14:a6:af:71:9b:0d:2f:2e:48:6c:78:b9:
         99:b2:85:e3:b4:4a:ec:69:c2:df:ab:33:ac:75:3d:fc:10:de:
         7c:3a:5d:30:95:c9:73:2d:8f:f8:0d:9c:1d:54:d8:ae:6a:80:
         0b:d3:60:59:60:3f:2b:74:22:69:01:a4:1c:35:c4:3b:98:d1:
         1a:94:16:e0:9a:b1:18:2f:2d:1f:00:70:21:f1:3a:ea:a1:cb:
         21:20:b1:47:78:c0:c4:63:c2:1f:59:f1:1d:37:a3:7c:6b:4b:
         58:b0:62:7a:5d:f0:01:6d:38:29:2a:a7:63:15:99:e5:58:59:
         fb:2a:06:fb:c8:a5:4d:e2:1e:0a:f5:b9:5a:8f:32:93:1d:14:
         65:5a:2e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:11:50 2026 by rpki-client