Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft
File: BD685C24FF8F432543C3E583484044A44E53067B.mft (raw, json)
Hash identifier: 8f/jfz1gukTmOLLVQBfonZ3Hhb2pYtJ11QBaOCZAE1Q=
Subject key identifier: 1A:64:6A:5C:69:59:10:25:5E:6F:4D:33:98:3D:5B:7E:83:0F:E8:17
Authority key identifier: BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B
Certificate issuer: /CN=BD685C24FF8F432543C3E583484044A44E53067B
Certificate serial: 0B1C227C2CD597B0E37744575F0BF5D4A4EC0101
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft
Manifest number: 52
Signing time: Wed 29 Apr 2026 02:51:26 +0000
Manifest this update: Wed 29 Apr 2026 02:46:26 +0000
Manifest next update: Sat 02 May 2026 09:33:26 +0000
Files and hashes: 1: BD685C24FF8F432543C3E583484044A44E53067B.crl (hash: LfkVbNcQgg3TAjhay3thueFh35yfvKWD5RoFcrujdeo=)
2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: dhpkhk04ab2tWVnfTiYy7HAwnFkFS5/nKq6B26Ta2Ao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1c:22:7c:2c:d5:97:b0:e3:77:44:57:5f:0b:f5:d4:a4:ec:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD685C24FF8F432543C3E583484044A44E53067B
Validity
Not Before: Apr 29 02:46:26 2026 GMT
Not After : May 2 09:33:26 2026 GMT
Subject: CN=1A646A5C695910255E6F4D33983D5B7E830FE817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:0a:c9:8f:19:fa:51:1b:c6:8f:fb:65:5a:
4c:c4:00:1a:52:e3:f1:f2:0e:11:a2:ff:71:27:72:
5f:8d:8b:f9:29:7d:5b:d9:20:b5:e2:8e:ec:e0:43:
b9:c5:08:ae:42:6b:63:be:f5:a9:21:d1:03:7e:7f:
05:39:c0:5a:17:82:fb:4a:93:df:9e:2e:20:f8:68:
99:5f:ea:6d:da:b0:32:49:f6:39:4e:fb:44:00:ec:
61:11:35:9c:e0:f0:99:df:66:7f:8e:77:e3:5e:79:
05:0b:af:69:5e:ea:d4:59:61:85:fc:13:91:ad:76:
b4:64:f5:25:97:ac:e5:fc:6b:5f:4a:06:20:d4:75:
3a:e6:d5:2b:1d:b7:6e:00:b6:15:05:e9:db:81:91:
fa:e6:8a:e8:84:42:43:cd:f1:a8:97:d5:8d:a2:17:
b7:fd:d8:47:60:75:25:2c:84:43:cb:e7:be:11:1c:
41:46:8a:b9:3e:21:a6:80:d4:4e:e7:1c:4d:39:3e:
50:71:2c:7e:99:12:29:80:0b:94:63:99:66:98:6d:
be:5c:2d:d8:83:5e:87:df:2f:c7:46:f4:de:4f:30:
c2:65:08:1f:39:1f:59:53:cd:6c:54:9a:96:09:3c:
73:7c:d7:d1:14:01:db:68:bd:62:9a:74:21:40:b5:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:6A:5C:69:59:10:25:5E:6F:4D:33:98:3D:5B:7E:83:0F:E8:17
X509v3 Authority Key Identifier:
keyid:BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4f:1b:59:16:e0:5c:cc:af:0b:a1:0c:be:2f:74:b6:4d:03:
ab:77:be:f1:51:d7:71:f7:f3:62:04:1b:f2:e3:60:c1:e1:b4:
d4:d8:02:2e:38:db:d8:31:9e:6f:02:b3:35:81:17:09:cc:3d:
7c:81:5c:87:f4:e6:44:ab:ed:e1:04:a8:60:77:92:d4:86:1e:
80:06:82:43:9c:0d:bf:6b:47:00:1e:75:16:53:21:af:e6:25:
76:16:74:13:0d:a4:2f:c8:c0:4e:d6:fb:5c:20:1f:6a:fb:cb:
5d:6b:5e:d5:7b:37:00:bd:b0:49:57:b1:3d:23:a2:88:f9:37:
ba:f4:75:0a:c4:02:83:45:e2:47:8c:48:9e:0c:98:52:8b:a5:
76:10:89:5c:1f:71:42:26:2e:a3:d5:e5:ae:46:7e:0e:03:8c:
ca:6a:ca:aa:17:e9:0f:2c:1f:f3:34:ff:c7:39:0a:78:80:9c:
a9:ff:c8:78:4f:63:6c:cb:8a:fc:10:91:91:3b:4c:bd:d9:fd:
6e:37:9f:2e:c7:86:0c:2e:a3:f3:53:df:8c:0f:de:aa:db:4c:
0d:5d:1e:a0:50:77:40:93:26:58:11:66:4b:c2:f7:48:ca:61:
da:7e:5a:a7:fe:da:c9:6a:e0:f1:56:3c:65:99:01:b3:ac:1e:
22:da:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:29 2026 by rpki-client