Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft
File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json)
Hash identifier: tlgBMU5yD6N4XQuBepqby7fn8a4dwC6ngnXzOP1SOas=
Subject key identifier: 2A:59:1A:92:77:82:36:91:7B:84:6F:8B:DD:F6:B4:9F:C2:21:72:7E
Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3
Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3
Certificate serial: 7F09A75B51A008C5239970033F9AD0BA42833075
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft
Manifest number: 04C4
Signing time: Tue 28 Apr 2026 04:41:10 +0000
Manifest this update: Tue 28 Apr 2026 04:36:10 +0000
Manifest next update: Fri 01 May 2026 12:54:10 +0000
Files and hashes: 1: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: gks4E4RAlqsYzpMbY7s86LphrkEHlbXfODEV9a6VKSU=)
2: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: ZtfrmcdIDZFk5FXV0vrgffSS//LC3R042y4pGOoRFVw=)
3: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: or0IGLXP2ZAADysB56nRnOb2vtFyAg9s4Ez4QFTWZ7w=)
4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: 2JYulwUxi2T/jzgAmBWLWpOPU3Z1C06NLPJ2YJd9h44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:09:a7:5b:51:a0:08:c5:23:99:70:03:3f:9a:d0:ba:42:83:30:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3
Validity
Not Before: Apr 28 04:36:10 2026 GMT
Not After : May 1 12:54:10 2026 GMT
Subject: CN=2A591A92778236917B846F8BDDF6B49FC221727E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:20:36:e4:a8:5d:95:7a:06:88:0d:14:a2:
95:54:65:c7:1e:9b:93:3a:44:02:78:02:6f:f9:ff:
82:e9:64:c4:b3:77:15:e2:62:7f:f7:30:ab:4c:57:
15:30:87:3f:29:f4:39:65:95:8a:7b:7c:8e:ca:42:
f5:81:d5:b8:88:1f:3c:90:e4:b8:3c:08:38:bc:10:
f5:ba:bf:e2:b6:e6:d7:48:cf:cb:2b:1e:5b:95:4d:
b1:ec:15:2a:32:6a:e7:ec:3b:d0:dc:7d:13:e9:bf:
1e:43:51:0d:33:05:8b:73:3f:1c:fe:77:a1:ae:07:
1b:4f:dd:f4:ad:74:c1:4f:82:bb:2a:49:52:42:19:
8d:8b:e2:64:f5:1e:11:f3:59:c5:db:be:10:cf:a3:
c3:e5:05:87:81:aa:63:6e:45:de:53:5e:15:46:3a:
7c:80:17:df:e5:fe:2c:56:b5:2b:98:8b:66:32:40:
25:0e:6b:a1:a1:78:d7:b2:9f:bd:0b:1a:c0:03:76:
9c:0d:0b:f4:43:4f:10:e1:7f:70:6a:ef:51:ce:55:
56:91:fe:a3:cc:79:92:73:d6:1e:d0:79:0a:c6:9c:
ce:66:df:bd:fd:1e:ac:43:21:86:b9:8a:ca:67:15:
6f:4b:a3:4f:71:6d:b3:83:dc:f2:a2:71:43:1f:c7:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:1A:92:77:82:36:91:7B:84:6F:8B:DD:F6:B4:9F:C2:21:72:7E
X509v3 Authority Key Identifier:
keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f9:f3:5c:03:16:f6:27:41:4a:3e:a5:b7:7d:bc:99:3a:dd:
7a:08:2f:de:d0:4d:ad:a1:d1:ac:6d:f1:0e:54:dc:e5:bf:80:
bc:3b:28:92:17:58:37:37:f2:fb:39:90:6c:62:4d:7f:aa:39:
07:87:d7:7b:d8:bf:61:c8:4a:80:52:cd:73:cb:6a:86:73:04:
7d:14:ed:3b:f6:dc:68:01:11:a3:17:bb:56:59:2d:9d:97:3f:
6c:f9:ed:70:42:90:79:17:a0:40:81:e5:c5:85:e9:7b:57:cf:
c4:1d:62:30:fe:25:cc:1f:bc:ee:cf:4a:79:0f:d1:d8:6f:4f:
3a:36:3f:44:c7:2b:c8:4a:8d:b3:6a:3f:79:20:a3:b4:74:0d:
38:43:14:ce:35:ec:95:95:81:91:40:71:47:05:1d:2f:71:f9:
d5:07:ba:fb:18:33:ac:70:5f:46:05:e9:30:e1:89:2b:c0:e4:
a9:cf:86:2d:14:1e:9f:6d:4c:84:3c:b3:23:85:fd:7f:9e:f6:
d7:c3:a9:57:7e:69:1a:ba:4b:e3:1f:30:d2:84:01:3b:d4:9f:
88:5a:be:20:da:db:7b:98:e8:d0:e4:57:d3:3e:21:30:57:40:
2c:d2:d4:bb:c2:dd:27:b9:92:49:30:a2:45:a8:36:77:69:33:
97:5c:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:03:29 2026 by rpki-client