Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json)
Hash identifier: v/Xj2pheLcbt98qlNtTb/UEIWXLhxBI39QAtX9eYPSU=
Subject key identifier: 2F:9B:94:3E:09:FF:3F:C9:D6:DA:8B:2E:07:F7:DB:7B:C9:CC:53:10
Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Certificate serial: 350B215DF6CA169EBED0E072E5187EAF7415E19D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
Manifest number: 0273
Signing time: Wed 29 Apr 2026 02:41:51 +0000
Manifest this update: Wed 29 Apr 2026 02:36:51 +0000
Manifest next update: Sat 02 May 2026 14:16:51 +0000
Files and hashes: 1: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: AhZffh73yX/y4YTn2UUoIfHQAj5P9eFzSW2UI0uRmLQ=)
2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: VJL9KeDerIzVKUdRVsQD4EqmA/+WAY+83Tr9rvd7sMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0b:21:5d:f6:ca:16:9e:be:d0:e0:72:e5:18:7e:af:74:15:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Validity
Not Before: Apr 29 02:36:51 2026 GMT
Not After : May 2 14:16:51 2026 GMT
Subject: CN=2F9B943E09FF3FC9D6DA8B2E07F7DB7BC9CC5310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:71:9a:9f:a8:00:3a:e0:4b:7f:e7:4f:e0:
37:82:11:00:d4:36:9c:6d:55:e9:f4:8c:d1:c6:6b:
6d:cd:b8:67:fa:d9:a1:dc:d6:d5:51:74:89:12:b4:
71:cb:10:72:8f:a7:bd:42:cc:b7:61:b7:9a:90:db:
f6:6d:0c:53:0f:83:a9:03:f7:51:ef:07:a6:16:9c:
5f:39:bc:bd:9b:19:f1:30:3f:3b:8e:9c:02:d2:a8:
10:9e:3a:cc:2c:f8:75:96:06:8f:18:53:35:3b:d4:
75:bf:64:68:01:e9:11:a3:16:73:a8:3b:3f:9d:3a:
9c:fe:7d:04:d0:7f:9c:2f:dd:fe:ce:af:9d:cd:6d:
d2:0a:d3:d7:63:7f:ed:2f:29:77:a5:1e:21:12:c8:
44:e3:0d:79:50:23:6e:9a:d9:d8:6a:e7:6b:a7:ff:
d7:aa:20:64:ae:9f:4e:14:57:49:27:84:4f:b1:ca:
f5:b4:38:a4:a8:9d:46:3c:85:4f:7f:16:fa:5b:f5:
01:35:d8:83:41:b0:20:2f:77:38:65:3f:3e:92:60:
21:54:f0:2f:02:b5:20:c1:75:03:dd:ea:0c:ac:8e:
10:42:96:53:19:e3:0e:80:65:6d:74:bd:41:2c:29:
e5:fb:27:70:15:a0:9c:24:89:24:ac:a5:1c:d8:68:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:94:3E:09:FF:3F:C9:D6:DA:8B:2E:07:F7:DB:7B:C9:CC:53:10
X509v3 Authority Key Identifier:
keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4f:df:6a:1c:25:43:d7:43:d6:99:d8:47:8e:96:db:c6:e3:
59:ab:12:e1:d0:a2:90:fa:ef:09:cc:c6:ae:76:2b:6c:86:57:
e5:ca:f1:3e:33:ec:cc:7b:22:61:7c:85:57:6a:43:fd:7f:c5:
a9:74:21:3b:11:22:53:43:aa:74:a5:a0:42:6f:5a:8f:db:06:
0b:7e:4c:81:55:87:19:c3:4b:16:9a:bd:66:9a:92:26:ca:05:
61:58:d2:fd:dc:39:50:4e:e8:b2:74:36:60:4c:b6:1a:9a:54:
f3:c5:40:6a:8e:26:0e:df:ab:bb:1a:ea:b4:cf:12:71:d6:9e:
3d:a6:46:1f:8a:74:3e:2d:e3:41:14:a3:f7:8b:68:65:d7:4d:
63:14:b8:33:89:04:ba:46:c3:cc:28:8c:f2:95:08:94:43:c3:
37:94:9f:b1:7b:46:51:dc:a4:f6:fb:88:0f:d5:bb:c7:4c:f8:
c5:1e:0a:4a:64:bc:0a:5c:0d:5c:cf:0e:f1:7a:d3:47:11:b5:
b5:0d:06:ce:88:3e:b4:11:d0:5a:ed:8c:71:4f:b5:ca:91:3e:
7d:8a:80:a8:8f:03:dc:9d:be:b3:62:a1:95:c9:f4:cc:ea:8c:
4b:aa:42:df:f4:e5:94:41:dc:2f:2b:3b:ab:a2:e8:4f:14:ae:
17:9b:03:4f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNQshXfbKFp6+0OBy5Rh+r3QV4Z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx
NDM4MDJCNjAeFw0yNjA0MjkwMjM2NTFaFw0yNjA1MDIxNDE2NTFaMDMxMTAvBgNV
BAMTKDJGOUI5NDNFMDlGRjNGQzlENkRBOEIyRTA3RjdEQjdCQzlDQzUzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrnGan6gAOuBLf+dP4DeCEQDU
NpxtVen0jNHGa23NuGf62aHc1tVRdIkStHHLEHKPp71CzLdht5qQ2/ZtDFMPg6kD
91HvB6YWnF85vL2bGfEwPzuOnALSqBCeOsws+HWWBo8YUzU71HW/ZGgB6RGjFnOo
Oz+dOpz+fQTQf5wv3f7Or53NbdIK09djf+0vKXelHiESyETjDXlQI26a2dhq52un
/9eqIGSun04UV0knhE+xyvW0OKSonUY8hU9/Fvpb9QE12INBsCAvdzhlPz6SYCFU
8C8CtSDBdQPd6gysjhBCllMZ4w6AZW10vUEsKeX7J3AVoJwkiSSspRzYaMq1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUL5uUPgn/P8nW2osuB/fbe8nMUxAwHwYDVR0j
BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy
MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4
MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz
ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD
NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACNP32ocJUPXQ9aZ2EeOltvG41mrEuHQopD6
7wnMxq52K2yGV+XK8T4z7Mx7ImF8hVdqQ/1/xal0ITsRIlNDqnSloEJvWo/bBgt+
TIFVhxnDSxaavWaakibKBWFY0v3cOVBO6LJ0NmBMthqaVPPFQGqOJg7fq7sa6rTP
EnHWnj2mRh+KdD4t40EUo/eLaGXXTWMUuDOJBLpGw8wojPKVCJRDwzeUn7F7RlHc
pPb7iA/Vu8dM+MUeCkpkvApcDVzPDvF600cRtbUNBs6IPrQR0FrtjHFPtcqRPn2K
gKiPA9ydvrNioZXJ9MzqjEuqQt/05ZRB3C8rO6ui6E8UrhebA08=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:18 2026 by rpki-client