Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft
File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json)
Hash identifier: MimZnA1mee9/xf7g9Q7wF3pXYyw37GN4pnG/O85FBjY=
Subject key identifier: D7:00:F6:5A:89:31:9C:AE:18:36:C0:EB:42:1A:B7:93:43:22:4F:CF
Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B
Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B
Certificate serial: 59D82DE42FCCA752756D3796FE0D9BBDFBDD3F64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft
Manifest number: 026C
Signing time: Tue 28 Apr 2026 16:12:12 +0000
Manifest this update: Tue 28 Apr 2026 16:07:12 +0000
Manifest next update: Fri 01 May 2026 20:17:12 +0000
Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: 81Yavjh0tBgqOD2LG93B99P1R7pxlNeQ3paJ3IfaK4o=)
2: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: PNxA1zoKRlRiJ9bUZJ3/lBgZgzmHU0sutXiCVfUzaXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d8:2d:e4:2f:cc:a7:52:75:6d:37:96:fe:0d:9b:bd:fb:dd:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B
Validity
Not Before: Apr 28 16:07:12 2026 GMT
Not After : May 1 20:17:12 2026 GMT
Subject: CN=D700F65A89319CAE1836C0EB421AB79343224FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:05:28:95:1a:e4:aa:5b:db:8f:8a:5b:3b:
00:aa:23:fc:22:c8:db:1f:13:d6:f3:2e:08:07:78:
fa:f7:ac:b9:08:59:7b:40:be:96:60:fa:eb:7e:d6:
b6:73:71:92:12:9d:cf:cd:9b:b6:f6:b2:2f:82:57:
ad:7e:38:3a:3a:2b:1a:b7:11:04:14:57:7d:e3:8c:
2f:7d:15:0e:16:85:c8:5c:28:49:e5:3d:01:62:f1:
02:6b:cd:ee:4a:47:1d:ce:8e:12:df:48:77:c2:bb:
af:6f:f6:c6:d9:de:8e:15:ea:39:23:5c:e2:52:ea:
42:0a:e4:a7:52:c0:5c:1d:18:e9:27:cd:99:f8:b1:
25:ce:91:b9:21:ac:c3:6d:cc:17:9d:7a:fd:e8:a5:
db:80:a9:ef:dc:62:a5:47:ff:66:b6:23:a6:b4:a8:
44:31:7f:a8:ea:7a:36:62:95:3a:7e:2b:a5:3f:bd:
80:0e:40:c1:37:bd:18:8f:27:50:67:c3:94:4b:7c:
76:36:8a:de:d3:f2:62:26:67:ad:27:4e:0d:f9:ba:
a9:3a:38:47:7d:d8:14:7c:cc:38:c3:c8:11:03:8a:
25:f9:d3:81:89:ab:3a:9b:8e:15:18:86:14:a9:c0:
77:e6:0d:61:05:00:af:16:ba:ef:f7:34:d5:2f:da:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:F6:5A:89:31:9C:AE:18:36:C0:EB:42:1A:B7:93:43:22:4F:CF
X509v3 Authority Key Identifier:
keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:e1:36:5a:0c:ad:d4:67:4f:f9:37:b9:bb:0d:00:af:f0:
69:01:56:85:44:d1:31:df:99:ea:ff:05:6b:42:d5:ad:96:bb:
5b:da:e1:68:b9:4b:de:31:d0:f8:05:00:11:b3:1e:c6:47:99:
b0:9f:9a:a4:6e:9d:4b:48:f6:a4:2e:72:18:18:88:77:d8:3f:
a0:05:49:6f:23:6e:37:3d:5f:d0:64:dc:2f:e0:d4:39:b3:25:
44:1c:c8:60:54:b8:65:78:8b:06:b3:c2:1e:1f:fb:04:e1:38:
39:c1:2d:ed:d6:f5:11:72:08:b2:ff:d1:dd:13:2e:7d:ee:55:
c9:fa:22:a3:31:8e:69:d5:6e:a0:6d:e6:d7:c6:48:3d:0d:64:
aa:f1:14:88:d1:ad:84:e0:2d:e8:63:ca:3c:00:30:6e:d8:74:
d2:f6:40:e3:ff:af:bc:ef:b8:e3:6b:67:f6:c2:15:61:bb:7f:
91:48:5c:c8:c9:40:7b:e6:9d:6a:59:38:0b:ca:ac:7d:eb:84:
e3:3c:ca:e2:ed:29:25:c9:d1:1b:72:c4:19:11:03:6c:95:c1:
62:9c:61:90:cb:38:76:9e:df:46:35:88:e5:95:e5:98:ce:0c:
af:c1:2a:48:3f:0b:ab:ec:0f:f7:4e:41:8e:fd:13:15:f3:8d:
89:bd:fa:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWdgt5C/Mp1J1bTeW/g2bvfvdP2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE
RjVENzM1QjAeFw0yNjA0MjgxNjA3MTJaFw0yNjA1MDEyMDE3MTJaMDMxMTAvBgNV
BAMTKEQ3MDBGNjVBODkzMTlDQUUxODM2QzBFQjQyMUFCNzkzNDMyMjRGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXQUolRrkqlvbj4pbOwCqI/wi
yNsfE9bzLggHePr3rLkIWXtAvpZg+ut+1rZzcZISnc/Nm7b2si+CV61+ODo6Kxq3
EQQUV33jjC99FQ4WhchcKEnlPQFi8QJrze5KRx3OjhLfSHfCu69v9sbZ3o4V6jkj
XOJS6kIK5KdSwFwdGOknzZn4sSXOkbkhrMNtzBedev3opduAqe/cYqVH/2a2I6a0
qEQxf6jqejZilTp+K6U/vYAOQME3vRiPJ1Bnw5RLfHY2it7T8mImZ60nTg35uqk6
OEd92BR8zDjDyBEDiiX504GJqzqbjhUYhhSpwHfmDWEFAK8Wuu/3NNUv2ouxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1wD2WokxnK4YNsDrQhq3k0MiT88wHwYDVR0j
BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE
M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE
NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx
NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2
RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGDP4TZaDK3UZ0/5N7m7DQCv8GkBVoVE0THf
mer/BWtC1a2Wu1va4Wi5S94x0PgFABGzHsZHmbCfmqRunUtI9qQuchgYiHfYP6AF
SW8jbjc9X9Bk3C/g1DmzJUQcyGBUuGV4iwazwh4f+wThODnBLe3W9RFyCLL/0d0T
Ln3uVcn6IqMxjmnVbqBt5tfGSD0NZKrxFIjRrYTgLehjyjwAMG7YdNL2QOP/r7zv
uONrZ/bCFWG7f5FIXMjJQHvmnWpZOAvKrH3rhOM8yuLtKSXJ0RtyxBkRA2yVwWKc
YZDLOHae30Y1iOWV5ZjODK/BKkg/C6vsD/dOQY79ExXzjYm9+qk=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:49 2026 by rpki-client