Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json)
Hash identifier: Ca9/FKkriBGk9BfHyiX+YoEDKRjEtK9/JUW1lXL/kA4=
Subject key identifier: DA:2D:D1:A3:78:18:62:2D:48:F8:AB:21:0B:2E:8A:A6:41:CF:A8:14
Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0
Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
Certificate serial: 0BCFDC433D13BF4D48FD4569F7907A8B2B96C416
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
Manifest number: 0238
Signing time: Wed 29 Apr 2026 04:40:53 +0000
Manifest this update: Wed 29 Apr 2026 04:35:53 +0000
Manifest next update: Sat 02 May 2026 09:09:53 +0000
Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: 2c/Yd1eoucbx0EOiLG/bvQSNS8TlATp40CIveClEcF4=)
2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cf:dc:43:3d:13:bf:4d:48:fd:45:69:f7:90:7a:8b:2b:96:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
Validity
Not Before: Apr 29 04:35:53 2026 GMT
Not After : May 2 09:09:53 2026 GMT
Subject: CN=DA2DD1A37818622D48F8AB210B2E8AA641CFA814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:74:53:92:82:f4:70:7c:2d:95:5c:96:25:
96:3e:bf:53:65:b0:c2:2e:7b:e8:53:7b:dd:98:2b:
e8:fc:2f:29:64:20:cb:54:c4:48:0a:93:ee:af:2e:
fd:e3:9e:be:7f:86:20:1d:80:04:96:fe:bf:e8:1a:
da:b5:b9:4f:2a:0f:b5:26:0a:b5:61:23:7f:98:36:
f9:58:88:57:35:07:1e:d0:14:cd:43:63:97:a9:c8:
5d:c9:71:af:d0:37:71:03:f0:af:6a:02:13:a9:8e:
ae:ce:d0:b4:44:be:99:76:0f:64:af:f5:74:49:18:
dc:dd:c1:63:d5:dc:10:67:93:f9:e4:0d:6d:54:36:
5d:21:f5:f9:65:22:b5:f1:7e:3f:52:fa:1f:70:8d:
3d:a8:46:b0:55:b7:31:43:e7:01:37:2f:6c:ba:7f:
d4:d6:bd:7a:64:4e:d9:45:96:e4:87:a1:63:17:ce:
ab:67:cb:8e:2e:e8:d5:5b:52:41:46:ac:d2:44:8b:
2c:f8:ae:c8:98:c4:70:a5:5e:0e:69:28:d3:40:1b:
37:30:fb:d4:2a:1e:55:f8:9c:c0:87:6b:a4:ef:09:
fd:12:4b:b2:28:3a:74:18:26:f5:47:59:41:e5:fc:
00:87:0d:a0:4a:e3:44:73:38:90:51:aa:37:7b:2e:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2D:D1:A3:78:18:62:2D:48:F8:AB:21:0B:2E:8A:A6:41:CF:A8:14
X509v3 Authority Key Identifier:
keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:91:ee:c1:34:7d:d5:36:f7:7f:9a:f1:74:7e:34:92:ba:8a:
a4:63:88:a4:22:bd:b0:e0:c2:b7:93:9c:f2:a4:2b:78:5d:29:
1a:6c:7d:aa:4a:73:c5:77:60:b4:a8:db:6f:58:9e:da:0b:22:
57:5b:86:cc:fc:eb:22:9b:56:d3:c4:30:c5:8c:e2:43:35:b3:
a9:ed:40:3d:70:02:3e:d0:07:13:54:49:4a:ab:c3:22:dc:86:
84:8f:da:00:6c:4d:b8:78:1c:ca:3a:ac:5f:ea:92:da:ac:cd:
53:45:9a:27:e8:a7:61:28:df:ac:ef:a7:39:0b:d4:d5:fa:e0:
7b:48:8a:45:08:df:47:f8:e7:60:b7:00:7b:29:f3:d7:d0:a8:
c9:d7:5b:25:a4:9f:0b:66:b0:e5:6e:17:ab:97:e1:f3:d7:3d:
6e:71:22:40:8d:cd:62:7a:f6:91:ab:de:8f:f0:3a:2b:b5:65:
76:f5:30:7c:13:67:a4:78:58:7e:b0:e8:fe:2e:1f:a1:02:38:
7d:a9:31:61:b4:43:56:aa:f8:0d:21:f2:8c:92:26:40:d8:8a:
da:cb:7b:2a:ab:aa:96:42:45:5b:f9:5d:ee:2f:47:cf:29:41:
a5:c9:b7:cc:67:e0:06:d9:ed:f9:00:a1:d5:c8:38:6f:f7:9a:
e8:25:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:03 2026 by rpki-client