Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft
File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json)
Hash identifier: bsHM639fkRHLRXEi6YeGM2svIDsNqYCDKRHZOYvnmBY=
Subject key identifier: EB:EE:28:79:D1:29:E8:D8:7B:DE:D1:AB:5D:83:8E:E3:43:F4:DC:B5
Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0
Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0
Certificate serial: 028AD5D2DA1DB34A6F4088C27D8577C1DB7F5ACC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft
Manifest number: 0242
Signing time: Mon 27 Apr 2026 05:41:03 +0000
Manifest this update: Mon 27 Apr 2026 05:36:03 +0000
Manifest next update: Thu 30 Apr 2026 16:41:03 +0000
Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: /Ll9XnZwq9kQ7KqFTm1tz2GQbHOFyxKz40lfWdvRTyg=)
2: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: Q4o71jeTV80A1Kcs2rXwd40dCqE8n3Drpr6hWhmrWZg=)
3: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: +MSCwdylvlsk4VUNNuTnN7rJCIiypTymyP9f1GMAVH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8a:d5:d2:da:1d:b3:4a:6f:40:88:c2:7d:85:77:c1:db:7f:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0
Validity
Not Before: Apr 27 05:36:03 2026 GMT
Not After : Apr 30 16:41:03 2026 GMT
Subject: CN=EBEE2879D129E8D87BDED1AB5D838EE343F4DCB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:19:46:de:73:8d:2e:d2:db:ff:95:fd:64:
59:24:4a:18:0d:d8:a3:ac:37:b8:e3:0a:e2:16:4d:
44:d7:24:e2:1a:7e:bf:13:0e:01:df:cb:11:ec:c9:
4b:e0:77:80:1e:43:26:c0:da:ab:31:02:e1:51:d0:
9d:77:43:5d:b8:07:18:a2:d6:6d:36:50:67:02:b4:
f9:ac:bb:dd:be:d6:eb:3d:ae:4b:a9:92:1d:96:f7:
91:fa:fb:c5:5f:fb:c5:49:f8:14:d1:2b:e4:4a:fe:
40:fd:c0:cb:cf:b3:75:d2:15:d9:f9:e7:9f:b4:7f:
38:ee:00:3f:16:e8:d3:77:d3:df:58:14:8c:cc:35:
55:c5:6a:20:b7:32:bc:cb:cd:89:7e:38:70:91:df:
95:17:88:55:de:8b:55:88:c4:bb:44:22:d5:12:84:
47:ce:59:e7:de:e1:47:8c:e7:ea:41:9d:af:87:21:
75:b0:c2:57:a2:6c:2d:60:73:fd:44:4f:ca:e6:8d:
f4:8f:14:06:e0:54:66:13:13:36:cb:fa:84:a1:78:
97:6b:76:05:a3:3b:00:f3:d0:40:61:bf:f4:f8:4d:
8f:08:1f:8b:4b:43:33:b7:be:96:da:31:98:29:d7:
47:2b:11:ac:90:ca:90:2a:23:11:91:7e:81:93:7c:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:28:79:D1:29:E8:D8:7B:DE:D1:AB:5D:83:8E:E3:43:F4:DC:B5
X509v3 Authority Key Identifier:
keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d5:de:fb:c3:18:21:51:42:35:b5:20:7c:73:4c:d9:a2:84:
d9:77:52:32:2c:75:10:b8:b5:db:c4:97:e3:38:72:c8:52:35:
d0:a0:69:be:7a:2b:91:93:6d:af:d8:2c:8a:99:d6:81:c0:eb:
72:b0:ca:b7:b8:40:17:a2:6d:1f:1e:9d:2b:da:bf:28:dc:1f:
2f:7d:35:db:a4:d9:cd:2c:99:5f:fa:d3:d6:d3:e6:35:a5:41:
a6:97:cc:95:3a:0d:a9:d5:7a:d1:e3:b4:31:73:21:88:d6:17:
5d:ad:58:3e:eb:8f:b4:72:9c:26:54:0c:0d:20:86:41:73:a1:
94:f9:10:94:e5:5c:df:b9:3d:37:a9:3e:da:0b:9e:4b:44:c6:
2b:da:5e:77:d2:a2:09:91:f5:83:91:74:13:a0:a1:b7:d3:cb:
8e:39:c6:36:85:d2:2f:7e:e1:79:01:5a:27:40:bc:59:38:23:
57:7b:fd:3f:77:6e:4c:71:2d:11:fe:2f:00:87:72:c4:8c:88:
2e:fb:30:46:1d:2c:13:17:e3:f6:6f:fd:de:55:70:43:3b:07:
5d:a6:98:75:05:1e:26:c4:30:32:3d:0d:50:9d:c6:05:da:b1:
31:31:42:10:31:d9:fe:3c:c4:9c:6e:85:1b:c7:2d:34:ca:44:
cc:72:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:55 2026 by rpki-client