Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft
File:                     BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json)
Hash identifier:          UumCOvolqphWa5GAR++EGh/gLgvIfpGP+4jS+ITh61I=
Subject key identifier:   64:1E:9A:B6:FC:52:46:04:74:2D:E3:B9:66:D6:43:4A:6D:BA:6D:B1
Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9
Certificate issuer:       /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
Certificate serial:       036DEB1C9B75A9D87A116B2D330644ABFACBB3C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft
Manifest number:          0368
Signing time:             Tue 28 Apr 2026 12:22:16 +0000
Manifest this update:     Tue 28 Apr 2026 12:17:16 +0000
Manifest next update:     Fri 01 May 2026 20:42:16 +0000
Files and hashes:         1: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=)
                          2: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: GpiJZtix5bBc4/SBFOZruswpUEhggVOZCuPDL+HvFHg=)
                          3: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=)
                          4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=)
                          5: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6d:eb:1c:9b:75:a9:d8:7a:11:6b:2d:33:06:44:ab:fa:cb:b3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
        Validity
            Not Before: Apr 28 12:17:16 2026 GMT
            Not After : May  1 20:42:16 2026 GMT
        Subject: CN=641E9AB6FC524604742DE3B966D6434A6DBA6DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:fb:00:fb:c2:50:4c:05:0a:1a:de:0d:fa:
                    68:99:ac:42:af:78:9c:7a:c8:75:61:44:d8:c7:40:
                    fb:16:fc:4e:ca:2a:06:60:e7:89:19:01:7b:1b:55:
                    6c:2f:91:9b:45:c4:1f:20:aa:ac:4a:0c:17:76:a8:
                    e4:78:55:c4:e3:8b:38:cb:aa:bd:8e:82:1e:44:b0:
                    bf:7a:2d:54:5d:e1:15:06:b5:f7:0a:7c:96:b4:6a:
                    23:84:a9:c0:47:bf:6c:b2:ab:12:16:d9:d3:e4:46:
                    be:8d:d8:be:3f:04:39:73:2f:39:b0:65:1c:d6:8f:
                    c8:1f:12:c1:7b:a9:db:d9:3f:e0:33:76:33:69:94:
                    29:a6:55:43:db:48:17:03:3e:c0:08:89:b4:b7:9e:
                    5f:18:f2:0f:41:98:d0:df:c6:10:f0:63:13:e6:ca:
                    6d:38:7c:2d:59:57:0c:ac:ba:17:46:19:9d:08:32:
                    b5:9a:33:b2:c3:b8:e9:9b:f2:e8:88:a9:58:b6:fb:
                    06:2e:ed:dc:40:75:80:21:8c:ca:2c:97:db:86:c1:
                    38:31:db:dd:ea:b1:1b:1c:0a:fa:6b:4d:7c:67:52:
                    14:36:72:f8:3a:18:e9:c0:84:15:9c:94:dc:5a:d0:
                    ec:13:3d:1a:85:b0:40:1a:9b:9b:21:45:7a:24:d0:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1E:9A:B6:FC:52:46:04:74:2D:E3:B9:66:D6:43:4A:6D:BA:6D:B1
            X509v3 Authority Key Identifier:
                keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:35:6e:9e:ff:5d:a3:51:4d:dc:5e:e2:78:9e:76:be:5d:5e:
         28:88:40:bc:63:d7:d8:38:9f:94:fd:f5:ca:7f:7f:7e:2e:cd:
         2c:b9:47:55:a4:17:b2:af:39:f9:4b:91:2e:52:6c:7c:57:f8:
         26:2a:fb:25:d8:10:a8:a3:98:d3:e9:bd:bf:41:9e:13:22:db:
         ba:02:56:ed:31:ac:83:0d:27:d6:9a:81:f3:de:2a:42:b1:ee:
         02:39:d4:43:5d:fe:34:87:5b:28:7f:5b:28:38:ff:52:02:00:
         da:ff:48:db:c0:1a:ae:db:e0:e2:4a:83:91:35:81:af:e4:cc:
         ac:ef:42:8b:7d:7c:06:40:81:37:c9:7a:ab:ec:68:22:85:be:
         f0:04:74:97:eb:34:75:c5:d6:dc:a9:fb:c6:69:92:7c:27:6a:
         e6:84:a6:7c:d4:d3:09:e2:0d:e9:f0:c1:3c:87:bc:a8:e5:c0:
         c4:74:19:87:39:65:e8:92:26:d6:1f:a7:aa:0d:b9:ea:94:59:
         7b:39:f7:31:0d:8d:b7:de:1a:57:7a:a9:25:a2:a2:01:18:17:
         27:50:90:9c:a7:05:c0:e7:50:e1:24:8a:8d:3e:d3:3d:2d:a6:
         24:4c:23:56:86:0f:0a:78:29:e1:c4:56:74:9d:15:ed:07:a5:
         97:d9:23:47
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA23rHJt1qdh6EWstMwZEq/rLs8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0
Q0JDNUVFOTAeFw0yNjA0MjgxMjE3MTZaFw0yNjA1MDEyMDQyMTZaMDMxMTAvBgNV
BAMTKDY0MUU5QUI2RkM1MjQ2MDQ3NDJERTNCOTY2RDY0MzRBNkRCQTZEQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zfsA+8JQTAUKGt4N+miZrEKv
eJx6yHVhRNjHQPsW/E7KKgZg54kZAXsbVWwvkZtFxB8gqqxKDBd2qOR4VcTjizjL
qr2Ogh5EsL96LVRd4RUGtfcKfJa0aiOEqcBHv2yyqxIW2dPkRr6N2L4/BDlzLzmw
ZRzWj8gfEsF7qdvZP+AzdjNplCmmVUPbSBcDPsAIibS3nl8Y8g9BmNDfxhDwYxPm
ym04fC1ZVwysuhdGGZ0IMrWaM7LDuOmb8uiIqVi2+wYu7dxAdYAhjMosl9uGwTgx
293qsRscCvprTXxnUhQ2cvg6GOnAhBWclNxa0OwTPRqFsEAam5shRXok0GLtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZB6atvxSRgR0LeO5ZtZDSm26bbEwHwYDVR0j
BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0
NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD
NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx
MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE
RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEc1bp7/XaNRTdxe4niedr5dXiiIQLxj19g4
n5T99cp/f34uzSy5R1WkF7KvOflLkS5SbHxX+CYq+yXYEKijmNPpvb9BnhMi27oC
Vu0xrIMNJ9aagfPeKkKx7gI51ENd/jSHWyh/Wyg4/1ICANr/SNvAGq7b4OJKg5E1
ga/kzKzvQot9fAZAgTfJeqvsaCKFvvAEdJfrNHXF1typ+8ZpknwnauaEpnzU0wni
DenwwTyHvKjlwMR0GYc5ZeiSJtYfp6oNueqUWXs59zENjbfeGld6qSWiogEYFydQ
kJynBcDnUOEkio0+0z0tpiRMI1aGDwp4KeHEVnSdFe0HpZfZI0c=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:31 2026 by rpki-client