Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json)
Hash identifier: Hb3ciz/DhlDq1Yg+d6VonFGzHhL+b8yCfSo9+OBm/MY=
Subject key identifier: BA:EE:DD:8D:DE:FE:3B:04:79:CD:B6:00:CD:1F:B5:73:3C:E6:C3:C7
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial: 30F81F94610301B9FC17418F9BFB29D70AE9C3DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
Manifest number: 0222
Signing time: Tue 28 Apr 2026 08:50:05 +0000
Manifest this update: Tue 28 Apr 2026 08:45:05 +0000
Manifest next update: Fri 01 May 2026 09:26:05 +0000
Files and hashes: 1: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: DSYcZHaD4sCvq/OOmUB4YNIU/ny4yWwzix7NYbIyzLA=)
2: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: CD4KlQzH2eJhKNwTfYMuI96gq5Df2JYdd7khju1XQoY=)
3: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 0HtGEFB5lVL9KGTJaAeG0cG7Yc1XqVsEKqDCZP63hmI=)
4: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: NK7iP85WMoAKxYMx5lbhJuhwp1xc1m7+bm7ki4OmrgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f8:1f:94:61:03:01:b9:fc:17:41:8f:9b:fb:29:d7:0a:e9:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Validity
Not Before: Apr 28 08:45:05 2026 GMT
Not After : May 1 09:26:05 2026 GMT
Subject: CN=BAEEDD8DDEFE3B0479CDB600CD1FB5733CE6C3C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:9b:c9:33:cb:17:cf:09:f3:ac:f4:e2:c7:
9b:4b:d1:40:d7:c5:49:89:3d:4f:92:07:8a:ee:62:
b4:cb:d3:01:9e:df:fa:c8:18:59:db:d6:4e:85:a4:
fa:f9:34:39:5e:04:06:a7:5d:35:0a:cc:53:cc:ab:
35:68:51:5e:90:f3:6f:0d:37:f8:24:77:e9:d0:20:
d4:8b:1f:f2:b9:5a:c1:c5:77:dd:af:e8:35:29:ee:
f2:98:c0:78:61:15:2e:71:cc:7c:af:21:07:a8:bb:
5b:e9:97:4a:d7:20:48:a4:e2:19:43:9e:17:5d:46:
a5:07:3d:f0:f2:ff:14:5b:34:99:a3:4c:b3:fd:6b:
e6:3e:00:ef:d6:76:db:af:a7:86:1f:13:c5:22:9e:
66:63:eb:78:44:78:f3:e9:c7:70:dd:0c:5e:f8:9b:
f9:e3:36:c1:57:20:65:b9:2a:c9:72:62:28:d4:14:
4c:1d:e6:94:21:d1:4d:36:ad:d3:87:dc:0a:55:30:
aa:a6:62:85:9c:7d:9f:7a:8e:98:2d:cc:73:ce:18:
7a:e0:cb:17:b7:c4:89:09:0e:44:22:cb:b2:49:85:
d7:a7:79:56:9b:31:7a:de:af:c5:a4:59:f9:06:63:
27:69:ab:b7:29:64:ee:ed:a4:b6:fd:45:d8:f4:a1:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:DD:8D:DE:FE:3B:04:79:CD:B6:00:CD:1F:B5:73:3C:E6:C3:C7
X509v3 Authority Key Identifier:
keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a1:0b:00:bd:dd:5e:7d:8b:3f:03:73:0c:e1:64:d2:29:6e:
b4:00:9b:1f:b6:ee:8f:02:e3:6e:5e:cc:88:46:67:0a:65:fe:
9b:19:80:95:8a:42:53:3c:8c:50:30:49:7d:ae:6f:04:9f:81:
ff:78:37:46:93:3c:22:9f:4b:b1:6d:74:7a:aa:0e:d2:ac:c9:
18:87:d0:85:1c:e4:41:ba:ec:f9:0f:6a:a1:57:3a:ac:10:5c:
1c:b6:0c:e3:90:1a:01:58:d7:69:9a:f8:aa:9c:aa:01:bd:1e:
c4:25:0c:e7:b1:9d:fb:6c:89:79:28:f9:c1:12:90:6c:7d:78:
68:c3:4a:a4:eb:74:8f:08:7c:27:32:b2:d5:b4:25:c3:10:a9:
61:0d:6d:b6:1a:f2:32:55:e7:fc:6c:25:3f:0f:45:ab:36:0b:
67:24:f0:f0:de:e3:7a:d0:57:a1:b0:8f:bd:41:9b:3f:67:d5:
b6:bb:62:82:ef:85:94:78:44:de:e9:18:dd:8f:ea:87:47:af:
cd:4b:57:02:26:06:71:20:d1:df:bc:59:9a:7b:9f:95:24:cd:
ca:34:7b:bd:5d:a3:e7:2a:8d:46:f9:7c:f8:af:4e:68:cc:fb:
d4:2e:90:b0:b1:c1:a2:97:ca:9c:3d:f8:30:7e:27:0d:38:84:
05:a4:c0:9a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMPgflGEDAbn8F0GPm/sp1wrpw9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB
MDk5MzA5NDAeFw0yNjA0MjgwODQ1MDVaFw0yNjA1MDEwOTI2MDVaMDMxMTAvBgNV
BAMTKEJBRUVERDhEREVGRTNCMDQ3OUNEQjYwMENEMUZCNTczM0NFNkMzQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynpvJM8sXzwnzrPTix5tL0UDX
xUmJPU+SB4ruYrTL0wGe3/rIGFnb1k6FpPr5NDleBAanXTUKzFPMqzVoUV6Q828N
N/gkd+nQINSLH/K5WsHFd92v6DUp7vKYwHhhFS5xzHyvIQeou1vpl0rXIEik4hlD
nhddRqUHPfDy/xRbNJmjTLP9a+Y+AO/Wdtuvp4YfE8UinmZj63hEePPpx3DdDF74
m/njNsFXIGW5KslyYijUFEwd5pQh0U02rdOH3ApVMKqmYoWcfZ96jpgtzHPOGHrg
yxe3xIkJDkQiy7JJhdeneVabMXrer8WkWfkGYydpq7cpZO7tpLb9Rdj0oTQJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuu7djd7+OwR5zbYAzR+1czzmw8cwHwYDVR0j
BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5
RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5
MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj
MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1
RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKqhCwC93V59iz8DcwzhZNIpbrQAmx+27o8C
425ezIhGZwpl/psZgJWKQlM8jFAwSX2ubwSfgf94N0aTPCKfS7FtdHqqDtKsyRiH
0IUc5EG67PkPaqFXOqwQXBy2DOOQGgFY12ma+KqcqgG9HsQlDOexnftsiXko+cES
kGx9eGjDSqTrdI8IfCcystW0JcMQqWENbbYa8jJV5/xsJT8PRas2C2ck8PDe43rQ
V6Gwj71Bmz9n1ba7YoLvhZR4RN7pGN2P6odHr81LVwImBnEg0d+8WZp7n5Ukzco0
e71do+cqjUb5fPivTmjM+9QukLCxwaKXypw9+DB+Jw04hAWkwJo=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:32:58 2026 by rpki-client