Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft
File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json)
Hash identifier: xmMD9JXcb4WzxZpQFh89j6wDG2jQROV8OW+JfLFchHU=
Subject key identifier: 05:B9:0E:11:E8:C0:CD:13:59:C0:47:7C:22:35:44:60:95:BC:26:54
Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71
Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171
Certificate serial: 04E1F684685AD47592A3853AEC620776FDC4DA6C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft
Manifest number: 027F
Signing time: Tue 28 Apr 2026 14:52:11 +0000
Manifest this update: Tue 28 Apr 2026 14:47:11 +0000
Manifest next update: Fri 01 May 2026 23:40:11 +0000
Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: DHCP+iMliZPBFr2N3/mNQM7zfJNxYX3okgyk6ot0wn8=)
2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: MiIoYTJBd/MaIc8CFenzeZ7Kco5pQhZQ/L7ZwOtlTL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e1:f6:84:68:5a:d4:75:92:a3:85:3a:ec:62:07:76:fd:c4:da:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171
Validity
Not Before: Apr 28 14:47:11 2026 GMT
Not After : May 1 23:40:11 2026 GMT
Subject: CN=05B90E11E8C0CD1359C0477C2235446095BC2654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:df:2b:a1:f8:2a:33:e2:18:62:70:c9:31:
79:61:5a:bb:5b:5f:c5:4f:fd:49:a5:51:29:be:33:
1e:9d:8b:56:a2:65:bc:5e:88:22:85:6f:4d:56:b8:
b1:db:7c:be:f2:59:fd:d9:07:ae:61:ef:68:50:30:
0a:e6:ae:0d:e1:2c:a4:d6:fa:fa:c8:06:b1:cc:75:
86:67:6c:e5:3c:0a:86:9e:62:9b:eb:04:90:25:5f:
d2:01:5b:52:61:e0:85:d6:68:3b:a3:b2:4e:f3:23:
5e:42:0c:e4:af:c2:d7:b6:c3:4b:3a:f0:b6:a5:81:
4c:a0:41:4e:4e:41:0c:3f:c7:ff:aa:9a:b8:47:bb:
31:b1:1f:d5:ac:bd:30:07:c0:2c:fd:3f:70:7a:84:
a0:54:9c:85:8d:77:73:d9:d9:5f:21:84:e7:22:ac:
b3:cf:cf:e5:63:68:fb:46:9b:54:61:91:2e:16:9e:
9f:a2:a5:d2:5e:77:68:0e:95:ff:a8:66:8f:5a:41:
94:69:a0:b3:27:d4:e9:2a:2d:ea:fb:06:5e:89:9e:
49:97:b9:da:45:8e:8b:d5:11:11:67:fc:de:01:36:
1c:f0:e8:fa:44:25:ed:7f:f7:30:76:06:9c:62:81:
29:a4:c7:0d:5e:59:73:6c:cc:9b:6d:17:9e:7f:12:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B9:0E:11:E8:C0:CD:13:59:C0:47:7C:22:35:44:60:95:BC:26:54
X509v3 Authority Key Identifier:
keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b9:b0:0b:1c:18:09:06:ad:29:dd:a7:0c:29:a4:7b:00:70:
bf:34:61:e8:d1:38:9b:ad:2a:69:5f:87:e0:f6:09:da:9f:54:
a7:22:7b:f9:72:8f:70:ce:82:cf:f2:be:28:2c:1d:83:e5:f2:
52:1c:42:5b:cc:d4:9b:70:03:3a:b0:8b:48:01:52:01:34:16:
4c:b1:4a:0a:c8:af:43:00:a4:59:6c:9f:37:4e:9a:88:52:f7:
e0:e0:b1:d6:45:09:93:d0:9e:5b:e3:2d:ed:f3:32:31:be:65:
a4:56:aa:a3:1c:d1:62:cc:75:b6:f1:e0:e9:49:25:71:74:ea:
98:83:99:2e:9b:cb:92:5b:ed:d5:ca:ec:21:90:5e:27:64:e1:
61:84:b1:8d:07:f3:74:ba:50:13:f5:23:0a:e4:79:3b:6d:c7:
6e:50:25:a8:e4:3b:fa:3d:f6:10:6e:30:0f:6d:a7:58:a1:07:
69:14:c4:fb:97:7a:12:a6:24:b6:81:32:65:34:2c:50:cc:bc:
3c:6c:78:d6:eb:e7:39:28:ac:a4:17:14:6e:45:40:d2:00:18:
81:c7:8b:d3:1e:d8:a6:e6:8c:ac:6b:90:f2:aa:f5:f6:ac:89:
0b:cd:67:ec:9c:45:1d:36:4f:13:be:e2:ab:c2:ce:16:77:6e:
5f:64:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:21 2026 by rpki-client