Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
File:                     BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json)
Hash identifier:          X91Hvakvx2MQ1GKLVVNQFbQS2doAYo48mnuuH5IpWZk=
Subject key identifier:   66:FB:B7:F4:0B:97:AD:26:79:0F:57:E7:6B:95:5F:02:67:96:C5:C4
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       021F0A7C56362CAF16A343E9947DE893F2440A03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
Manifest number:          02BA
Signing time:             Mon 27 Apr 2026 08:01:42 +0000
Manifest this update:     Mon 27 Apr 2026 07:56:42 +0000
Manifest next update:     Thu 30 Apr 2026 12:25:42 +0000
Files and hashes:         1: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=)
                          2: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: pdz9TOOTUknqGQVoMb2McunPhIkj9Rr1Dq+o1IdAmYg=)
                          3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=)
                          4: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: TXKlB2hfqxWA+jXF08t3ciFtbxDo9W/xPDl1rsz8aDE=)
                          5: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:0a:7c:56:36:2c:af:16:a3:43:e9:94:7d:e8:93:f2:44:0a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Apr 27 07:56:42 2026 GMT
            Not After : Apr 30 12:25:42 2026 GMT
        Subject: CN=66FBB7F40B97AD26790F57E76B955F026796C5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6a:1d:f6:4a:00:33:85:71:69:ca:50:6a:f9:
                    9b:8c:d6:ab:66:13:6c:20:1c:a2:d0:d0:86:30:3f:
                    71:10:2b:4e:44:d8:96:08:3c:00:83:b4:31:3e:76:
                    0f:0d:8e:bc:94:70:bd:2d:f1:d9:a4:87:82:74:e4:
                    a2:70:43:9f:1a:3b:39:7c:a2:ec:ca:9b:94:a8:10:
                    8b:68:9d:77:d1:c4:e5:11:58:48:1f:93:d8:e4:7a:
                    07:26:81:e2:0b:f3:b2:d2:4e:1f:02:37:2a:e0:d1:
                    c9:e7:a0:3b:11:5b:77:d5:ce:71:61:00:ca:7c:ae:
                    7a:a6:3c:29:99:93:f8:f6:9e:fb:8d:8f:b7:fe:37:
                    14:b5:c1:40:5e:85:03:5e:03:39:e5:af:64:4d:67:
                    54:5d:98:89:fe:00:1b:e3:ba:21:56:a0:56:8a:f2:
                    13:ae:d0:73:c1:7c:90:d2:2d:3f:50:26:f6:6e:9f:
                    3e:2f:d3:27:20:bb:d0:66:ec:12:6f:96:e0:90:95:
                    cf:9f:7b:90:c2:60:a2:1c:04:b0:a3:8f:8f:b2:89:
                    ab:61:c2:94:c6:c4:77:aa:03:74:95:76:7e:09:5a:
                    e5:f9:69:cb:96:29:b6:c6:9d:c5:1c:ed:a7:86:9a:
                    b9:c2:d1:55:fd:75:99:45:68:53:90:53:4c:64:d8:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FB:B7:F4:0B:97:AD:26:79:0F:57:E7:6B:95:5F:02:67:96:C5:C4
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:45:4c:44:8e:92:5a:0e:5c:29:9b:1d:17:13:3b:16:ce:
         51:9c:b5:93:22:a0:94:fb:e3:fc:8b:c7:b0:fd:a8:a0:2e:fe:
         f3:f1:d9:9a:2d:1e:74:5f:ea:51:7a:59:d9:65:65:f2:a8:37:
         9f:02:77:6b:ec:42:c3:d7:1d:22:a0:02:6c:11:67:bb:39:3c:
         4b:b0:14:ce:ec:78:2a:ce:de:53:87:82:db:b6:3a:da:a2:2b:
         d3:bb:f1:d9:47:92:fa:44:34:ad:4f:45:81:f8:28:ce:8d:90:
         79:34:bb:a2:d8:8f:92:97:f8:0c:11:fc:90:cd:ce:fe:cd:4d:
         16:c3:05:bf:f8:b5:51:fa:62:f8:6b:ce:29:0a:45:dc:55:26:
         be:92:97:25:3b:96:96:e8:01:da:ea:00:07:98:a7:31:59:8c:
         1d:e7:04:7c:7f:e2:d7:31:6d:58:7d:b9:73:cd:53:76:3a:f2:
         01:21:6e:ca:ab:07:0f:7f:aa:df:02:e7:c8:7b:85:f1:01:4d:
         94:c0:4a:df:5f:0b:b6:2b:b7:82:69:61:16:14:ee:08:90:a9:
         16:d4:90:4a:26:c0:60:c8:32:82:d1:73:37:77:a2:b6:72:9b:
         dc:d3:62:35:54:9e:37:b6:72:c2:f8:ca:ce:b4:cd:65:6b:b8:
         be:43:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----