Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft
File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json)
Hash identifier: pFGDM0KraLCEnvit+pYnfUUVne8jd7FGp/79kar9mrg=
Subject key identifier: BB:DF:B3:37:01:40:E9:75:66:2E:28:A3:17:1D:F1:4E:AD:3A:AC:A5
Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B
Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B
Certificate serial: 6E14A53101C112A4208D33EB0D6C14355308418E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft
Manifest number: 0189
Signing time: Tue 28 Apr 2026 19:21:39 +0000
Manifest this update: Tue 28 Apr 2026 19:16:39 +0000
Manifest next update: Fri 01 May 2026 21:53:39 +0000
Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: 5p6wjGyXDMhYJEnC8e2hHCinkGJrBkWoW7KvueEj5dQ=)
2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: Y1BreLVa1ZjV8+fm+79oJJhjLUjz8il238UQwEnA8vE=)
3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: aOwOgHbppRnbNpfEqnSD1/o+Q1DXhvDz/17/CDpcszc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:14:a5:31:01:c1:12:a4:20:8d:33:eb:0d:6c:14:35:53:08:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B
Validity
Not Before: Apr 28 19:16:39 2026 GMT
Not After : May 1 21:53:39 2026 GMT
Subject: CN=BBDFB3370140E975662E28A3171DF14EAD3AACA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:3c:6e:5b:c2:c6:3a:0c:b3:a7:34:c7:a8:
1b:51:2f:71:d8:6f:ea:dd:06:66:bd:d9:7d:44:58:
a0:44:d9:55:1b:fa:e3:96:57:3b:1d:b7:64:22:52:
ea:b6:5f:07:ad:eb:e0:a1:fe:4b:1a:8a:09:35:99:
b0:af:b4:44:aa:68:61:be:cb:19:04:7e:44:e8:ed:
03:31:1f:51:0b:0c:1d:f1:9d:6d:71:eb:db:3d:33:
8b:fc:97:b2:92:bc:08:81:a4:5f:4c:2a:41:d3:4b:
bf:a2:9f:0a:42:82:e5:2d:db:85:38:09:c2:0e:1d:
43:46:6a:12:94:e5:f0:cd:6f:25:32:cf:6f:c0:a4:
51:d1:ed:3c:2e:90:18:b3:2a:21:16:06:70:c8:50:
73:ba:cc:45:ca:4e:91:01:ee:26:c6:00:7f:82:de:
6e:96:e2:96:4f:f4:b9:cc:44:12:24:b9:d4:f5:a7:
81:99:7f:d7:01:20:3e:ad:c9:06:c8:26:6f:3a:e6:
ad:f9:4b:c6:97:00:e8:e1:32:0d:38:e0:d9:f9:4a:
ff:53:fe:76:77:be:86:f1:44:3e:1d:c0:1f:0a:e4:
46:42:11:90:fa:80:a9:20:cf:8e:81:ac:94:20:67:
82:f7:ec:5c:15:3a:3f:7c:05:3c:41:aa:1a:52:64:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:B3:37:01:40:E9:75:66:2E:28:A3:17:1D:F1:4E:AD:3A:AC:A5
X509v3 Authority Key Identifier:
keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:db:46:5b:39:c6:ad:e0:e5:e3:04:d7:f1:43:2f:83:dc:
cc:77:af:f4:d1:7a:b5:b9:36:4e:c5:ed:e0:b1:87:1a:68:68:
3d:65:a9:2d:14:54:89:60:1a:d1:38:42:2f:74:3e:89:46:2c:
45:ce:ad:af:7a:bc:8a:d2:94:5d:0f:1c:52:93:8d:a9:15:7e:
9c:1f:02:55:22:86:6b:59:18:49:fb:5d:b3:dc:ed:3a:20:3d:
8d:f7:94:92:f2:aa:7f:fe:99:ef:7d:86:25:aa:70:6f:87:24:
15:18:0b:13:28:4e:e7:fe:e5:0b:9e:8a:ac:55:b0:10:03:51:
f5:0b:c3:30:bc:e9:3e:ee:f9:0c:8b:49:02:46:69:cf:e1:73:
f0:19:0e:95:21:62:8f:26:80:8c:74:ab:30:e0:22:93:03:03:
c3:10:3f:05:23:b8:97:9b:3a:25:32:65:98:cc:39:00:8a:d8:
46:f4:51:ee:05:2e:ac:c8:bc:03:82:71:48:47:82:8a:ac:75:
c6:5d:56:45:53:65:a1:99:64:e2:b9:af:fc:eb:cb:dc:27:eb:
bf:f1:56:a0:3f:58:1b:64:9e:0b:66:75:c8:da:73:0e:54:76:
9a:a7:0c:37:f9:fe:d3:a7:fc:ed:9c:10:bf:89:ce:48:38:b9:
55:37:5b:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbhSlMQHBEqQgjTPrDWwUNVMIQY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez
NjAxQTg4QjAeFw0yNjA0MjgxOTE2MzlaFw0yNjA1MDEyMTUzMzlaMDMxMTAvBgNV
BAMTKEJCREZCMzM3MDE0MEU5NzU2NjJFMjhBMzE3MURGMTRFQUQzQUFDQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtzxuW8LGOgyzpzTHqBtRL3HY
b+rdBma92X1EWKBE2VUb+uOWVzsdt2QiUuq2Xwet6+Ch/ksaigk1mbCvtESqaGG+
yxkEfkTo7QMxH1ELDB3xnW1x69s9M4v8l7KSvAiBpF9MKkHTS7+inwpCguUt24U4
CcIOHUNGahKU5fDNbyUyz2/ApFHR7TwukBizKiEWBnDIUHO6zEXKTpEB7ibGAH+C
3m6W4pZP9LnMRBIkudT1p4GZf9cBID6tyQbIJm865q35S8aXAOjhMg044Nn5Sv9T
/nZ3vobxRD4dwB8K5EZCEZD6gKkgz46BrJQgZ4L37FwVOj98BTxBqhpSZHd3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUu9+zNwFA6XVmLiijFx3xTq06rKUwHwYDVR0j
BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF
RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx
QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx
NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0
Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGtr20ZbOcat4OXjBNfxQy+D3Mx3r/TRerW5
Nk7F7eCxhxpoaD1lqS0UVIlgGtE4Qi90PolGLEXOra96vIrSlF0PHFKTjakVfpwf
AlUihmtZGEn7XbPc7TogPY33lJLyqn/+me99hiWqcG+HJBUYCxMoTuf+5QueiqxV
sBADUfULwzC86T7u+QyLSQJGac/hc/AZDpUhYo8mgIx0qzDgIpMDA8MQPwUjuJeb
OiUyZZjMOQCK2Eb0Ue4FLqzIvAOCcUhHgoqsdcZdVkVTZaGZZOK5r/zry9wn67/x
VqA/WBtkngtmdcjacw5UdpqnDDf5/tOn/O2cEL+Jzkg4uVU3Wys=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:41 2026 by rpki-client