Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
File:                     5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json)
Hash identifier:          tjckOL6lQnHT5aMMcqteY6RQ/IV88R9uXDPVZaI9K7o=
Subject key identifier:   3C:32:27:C2:6F:4F:2E:34:15:28:FD:19:21:9D:22:73:F0:74:A5:2F
Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21
Certificate issuer:       /CN=5EC928AFD73AFC70F10C468E21482031920DF521
Certificate serial:       0B053F1C3357A23671EA68D6060A12060C4F2C60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
Manifest number:          0182
Signing time:             Mon 27 Apr 2026 12:50:45 +0000
Manifest this update:     Mon 27 Apr 2026 12:45:45 +0000
Manifest next update:     Thu 30 Apr 2026 17:55:45 +0000
Files and hashes:         1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=)
                          2: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=)
                          3: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=)
                          4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: pVKh1ox9d0l1J4pgF+iDQr92S3HG+W5WEui5huUgJXk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:3f:1c:33:57:a2:36:71:ea:68:d6:06:0a:12:06:0c:4f:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521
        Validity
            Not Before: Apr 27 12:45:45 2026 GMT
            Not After : Apr 30 17:55:45 2026 GMT
        Subject: CN=3C3227C26F4F2E341528FD19219D2273F074A52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:ee:f1:3e:2c:b9:37:b9:6b:c5:69:fe:18:
                    c5:4f:70:ca:5a:98:e6:69:79:30:39:6f:ec:ec:a0:
                    5d:88:0e:3e:a9:8a:c8:18:07:ae:cf:67:2a:a5:2c:
                    91:62:31:3d:60:7e:8b:af:08:72:be:78:85:0d:ea:
                    18:9c:3e:0c:82:af:22:b5:27:88:7b:71:0e:18:48:
                    58:e4:fa:c8:12:a1:17:b1:7f:47:e3:ae:03:1f:e3:
                    e5:0b:55:6e:11:ad:85:b7:a0:98:f9:0c:0f:d9:75:
                    da:ae:f7:d9:9d:c2:58:90:f3:fd:fe:39:bb:a3:20:
                    f9:c5:48:e0:fd:3a:09:1b:05:7d:f5:3f:cf:bf:79:
                    25:5f:e4:dc:6b:cc:be:5c:d5:57:a6:b4:0c:48:03:
                    85:63:f1:b0:21:ee:cc:5e:a0:5b:37:7c:2c:7d:c1:
                    03:ee:33:a5:49:a3:a2:97:ec:55:14:13:3b:ac:23:
                    fc:61:c3:69:87:6f:fc:0f:0c:c2:75:9b:4b:76:2a:
                    c6:20:ad:97:78:e9:5e:c0:3d:b2:4a:f9:f7:77:fa:
                    e9:33:23:3a:0d:26:c8:8d:f9:49:35:49:d6:bb:02:
                    80:3a:f0:91:9f:8b:47:46:8c:12:8e:b9:aa:bb:67:
                    21:53:72:1d:c7:17:b0:2d:98:b8:32:9f:35:64:da:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:32:27:C2:6F:4F:2E:34:15:28:FD:19:21:9D:22:73:F0:74:A5:2F
            X509v3 Authority Key Identifier:
                keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:4d:1f:61:73:c4:55:9b:60:a8:63:67:c0:7a:db:21:6f:
         c2:fe:31:30:b5:77:78:58:4d:2e:a8:f8:84:eb:1e:15:66:86:
         8e:d7:37:4b:b2:ae:61:39:a6:fe:65:63:2b:c7:f7:65:3c:fa:
         28:ea:f9:a7:6f:46:8a:8d:57:4f:ec:cd:86:32:e7:70:c4:95:
         5a:66:04:43:0e:49:17:6b:da:21:1e:0c:03:df:a2:01:a8:e4:
         f0:c0:6a:18:a0:94:a2:eb:9a:3c:b2:80:6e:15:c9:e8:20:11:
         5c:13:59:d1:b2:ce:0b:a8:a4:7f:56:42:5d:aa:28:20:44:5a:
         fa:b0:e2:09:74:9e:81:86:5c:fc:ee:18:13:60:4c:0d:64:2a:
         15:ab:44:9e:53:1a:14:ef:77:5e:0f:22:b8:48:3c:6a:7d:7a:
         ba:67:d2:98:21:b5:39:31:7a:c6:97:b4:1a:02:2d:5b:d4:e8:
         0c:c9:74:3f:83:81:70:b3:83:e4:7b:d6:b4:74:a1:c3:44:1e:
         f0:aa:6b:ea:c3:6b:cd:60:48:98:1b:de:f5:ad:02:c5:d1:62:
         3a:80:77:48:26:04:c2:6a:e9:7b:d5:c2:72:fc:e9:45:2a:7b:
         ce:03:83:ba:0a:7f:d6:7d:de:60:e6:68:e4:10:2f:70:3e:16:
         33:21:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:11:04 2026 by rpki-client