Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft
File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json)
Hash identifier: 0sSI6kOljK27b+u9ZENWhuwo1PoBGOjKzXcDNnf7o8Q=
Subject key identifier: E0:74:C7:C9:42:E9:A4:FE:87:FB:58:28:C8:76:27:E4:3A:34:A7:82
Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E
Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E
Certificate serial: 643D89110CA9CDE06C8282077A9B948EB1607AF1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft
Manifest number: 03BD
Signing time: Tue 28 Apr 2026 21:41:58 +0000
Manifest this update: Tue 28 Apr 2026 21:36:58 +0000
Manifest next update: Sat 02 May 2026 06:16:58 +0000
Files and hashes: 1: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: ZYG1EXg2CjFh3omINnANd4iNip5/TbDleRfU4F6+kIo=)
2: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: e/Bq2CrKECYQUXTLwg8QdvXYRxGRsqF7NPWZlVVMe4Q=)
3: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: iQ7YQnxzP6pWS/l4KyUqRAWACU55mIZqolbsC+VsHJc=)
4: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: prp/RTlbRPybyV0igGS7nt0DzxnEW5FgfG14tUvDo6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3d:89:11:0c:a9:cd:e0:6c:82:82:07:7a:9b:94:8e:b1:60:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E
Validity
Not Before: Apr 28 21:36:58 2026 GMT
Not After : May 2 06:16:58 2026 GMT
Subject: CN=E074C7C942E9A4FE87FB5828C87627E43A34A782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:80:17:02:d8:e8:1d:c4:41:fc:19:49:37:
48:bb:91:a2:c4:33:c9:d7:f1:e4:72:0a:aa:33:1d:
e5:1a:d1:55:3a:b4:f3:4e:80:6b:25:3d:54:8e:8d:
ce:47:99:44:d4:60:84:4a:e6:28:f1:5e:8d:ae:9e:
a8:35:fd:19:fe:80:9b:64:77:86:70:0b:39:5d:6a:
78:3a:a9:04:39:fc:ab:34:d0:5c:f5:5b:ec:fc:bd:
19:9a:b2:d8:c7:bd:81:3d:3c:d0:0b:79:e2:fa:6f:
af:43:56:cd:77:0c:21:50:7e:8d:30:aa:da:12:c2:
de:5e:c9:e6:01:fa:57:5e:f5:9c:bb:2f:a7:8c:73:
d7:c3:30:62:a8:51:a7:18:5c:48:4d:12:46:73:c8:
a4:d7:be:44:cd:1a:7c:b8:1f:49:5b:41:41:66:1b:
f5:8f:c9:df:21:fb:4b:df:6c:07:d8:3c:76:c9:a3:
74:9a:b0:a9:05:a9:bd:71:72:e6:b3:82:19:89:f6:
7c:f7:43:1a:36:7e:e4:92:26:b9:67:e7:07:8e:e5:
4d:b1:fe:2e:bc:ae:ae:7e:b9:a3:59:4c:01:44:84:
ea:bb:81:0e:5c:54:df:94:fb:57:da:e5:61:6e:b4:
1b:fb:45:f0:4c:83:38:78:03:e1:05:f2:5e:17:a7:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:74:C7:C9:42:E9:A4:FE:87:FB:58:28:C8:76:27:E4:3A:34:A7:82
X509v3 Authority Key Identifier:
keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a9:e3:32:d7:2a:37:75:92:5c:50:fb:d1:d8:2f:87:05:e4:
03:cd:f6:33:cb:bc:63:aa:ab:aa:1c:4d:5f:7b:13:d6:a4:a4:
7d:89:60:92:d4:b0:ec:eb:5d:ac:a3:27:5d:d7:8f:54:46:0b:
69:ac:6e:82:c5:a3:35:9d:c7:bf:e8:9b:4e:19:c4:ab:b0:14:
6d:5c:09:62:a2:1b:72:55:18:21:70:de:81:b2:59:77:cd:04:
c9:68:d4:3b:84:7f:9a:2c:fb:c3:24:4f:16:53:b9:ff:7c:12:
a5:ce:ee:81:f2:7e:c8:bd:9d:ed:fe:a2:b1:d8:a1:d5:23:42:
24:a2:5d:46:5f:14:16:5e:cf:4a:65:02:31:7c:ac:ca:ea:cc:
36:ae:df:c9:ba:08:b9:01:48:e3:bb:e4:fe:13:5d:ba:93:00:
9b:e9:46:b3:6a:ef:ff:da:9b:6c:cd:a2:3a:e8:92:57:a0:41:
84:ac:b2:61:a4:86:80:74:86:0a:43:ec:a0:5f:31:35:bb:19:
ee:00:31:8c:67:fe:7d:25:76:99:e2:36:24:f1:61:58:3b:f1:
bd:9c:15:cf:27:5a:75:a2:ac:ae:ba:3f:8c:6e:38:a2:fc:44:
0a:bb:4d:66:e5:25:9b:86:df:47:fe:f7:91:29:6e:09:99:4b:
c5:a2:bf:ae
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZD2JEQypzeBsgoIHepuUjrFgevEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5
NDREREIxRTAeFw0yNjA0MjgyMTM2NThaFw0yNjA1MDIwNjE2NThaMDMxMTAvBgNV
BAMTKEUwNzRDN0M5NDJFOUE0RkU4N0ZCNTgyOEM4NzYyN0U0M0EzNEE3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2IAXAtjoHcRB/BlJN0i7kaLE
M8nX8eRyCqozHeUa0VU6tPNOgGslPVSOjc5HmUTUYIRK5ijxXo2unqg1/Rn+gJtk
d4ZwCzldang6qQQ5/Ks00Fz1W+z8vRmastjHvYE9PNALeeL6b69DVs13DCFQfo0w
qtoSwt5eyeYB+lde9Zy7L6eMc9fDMGKoUacYXEhNEkZzyKTXvkTNGny4H0lbQUFm
G/WPyd8h+0vfbAfYPHbJo3SasKkFqb1xcuazghmJ9nz3Qxo2fuSSJrln5weO5U2x
/i68rq5+uaNZTAFEhOq7gQ5cVN+U+1fa5WFutBv7RfBMgzh4A+EF8l4Xp+wrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4HTHyULppP6H+1goyHYn5Do0p4IwHwYDVR0j
BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4
MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE
REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2
YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3
MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB+p4zLXKjd1klxQ+9HYL4cF5APN9jPLvGOq
q6ocTV97E9akpH2JYJLUsOzrXayjJ13Xj1RGC2msboLFozWdx7/om04ZxKuwFG1c
CWKiG3JVGCFw3oGyWXfNBMlo1DuEf5os+8MkTxZTuf98EqXO7oHyfsi9ne3+orHY
odUjQiSiXUZfFBZez0plAjF8rMrqzDau38m6CLkBSOO75P4TXbqTAJvpRrNq7//a
m2zNojroklegQYSssmGkhoB0hgpD7KBfMTW7Ge4AMYxn/n0ldpniNiTxYVg78b2c
Fc8nWnWirK66P4xuOKL8RAq7TWblJZuG30f+95EpbgmZS8Wiv64=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:46 2026 by rpki-client