Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json)
Hash identifier: xwqxsmcHMVMdheuMVLkVKoA2Npu4vJU1CN5q9pARzO4=
Subject key identifier: FD:98:AC:5C:91:9B:B5:5A:A5:1E:35:0F:3B:02:3D:5C:C3:47:69:BB
Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19
Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719
Certificate serial: 2C1FB5C8084B471B1329D2C8FD284597E3AE479F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
Manifest number: 0108
Signing time: Tue 28 Apr 2026 08:24:57 +0000
Manifest this update: Tue 28 Apr 2026 08:19:57 +0000
Manifest next update: Fri 01 May 2026 14:56:57 +0000
Files and hashes: 1: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: 97Vs/YdIS70jFKDYBgWQLdCYbMLCuUaCGimK9DHgqNc=)
2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1f:b5:c8:08:4b:47:1b:13:29:d2:c8:fd:28:45:97:e3:ae:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719
Validity
Not Before: Apr 28 08:19:57 2026 GMT
Not After : May 1 14:56:57 2026 GMT
Subject: CN=FD98AC5C919BB55AA51E350F3B023D5CC34769BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:1d:f9:c8:ef:62:30:fe:a5:a3:46:b4:cc:
c4:7d:4e:af:96:4d:9e:29:7f:1c:47:93:30:06:3e:
92:3a:e4:39:ea:f9:3b:5c:36:86:66:7a:95:54:44:
36:a2:8a:b4:5b:86:12:f6:6e:95:c7:13:ea:81:2f:
b1:c0:e7:c9:00:b1:f8:c5:1f:0e:24:e5:5c:5e:c1:
36:c1:3b:93:dc:a8:2c:73:5c:d9:37:ba:86:57:96:
ba:1b:68:17:2f:4a:cc:58:80:7c:5c:68:71:5d:2c:
c7:e1:77:40:d7:00:7e:b9:d2:e5:4b:ee:55:93:89:
c3:d3:5b:ae:71:18:76:cd:be:fd:53:5c:e6:6d:6b:
df:3f:a3:15:e6:99:1b:5e:c2:51:be:ab:93:b0:c9:
17:c4:45:c9:97:e7:84:6f:6c:09:fd:04:e9:26:3c:
8f:56:41:ce:dd:d5:1e:60:d6:04:06:64:12:ab:50:
2b:cc:90:f0:34:fd:e8:17:e8:08:6e:84:4b:c4:bf:
1c:3f:1c:ad:aa:4f:69:75:c9:63:ec:73:8b:bb:a1:
72:b8:5f:bd:fa:7a:2f:75:06:74:00:d4:ab:bf:25:
5f:f4:cf:99:0a:7e:36:db:24:bc:cd:09:29:dd:8b:
2d:3f:0d:6f:e1:6d:b3:3c:30:e6:72:71:66:31:6b:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:AC:5C:91:9B:B5:5A:A5:1E:35:0F:3B:02:3D:5C:C3:47:69:BB
X509v3 Authority Key Identifier:
keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:8f:52:b7:53:43:5c:9d:b6:f2:10:62:de:b7:c6:4b:04:
2c:b4:03:38:92:4a:4a:6d:ac:f4:61:7b:04:6e:d9:14:39:b7:
ba:05:1e:9e:b3:2f:d6:7a:a2:62:a8:a4:17:3c:99:d7:b3:04:
3c:2f:ec:c3:9b:ff:68:8d:6f:44:1c:24:ba:93:e0:41:e1:cb:
d8:9f:54:81:bc:69:60:a9:65:83:e4:b2:b5:b9:33:26:8c:6f:
6c:9a:25:86:43:89:bb:c8:7d:1f:ac:a3:cc:86:e6:52:57:36:
18:d3:8f:8f:4a:f0:f4:93:6b:5f:4a:79:6a:96:b1:75:e1:ba:
16:59:40:39:41:94:3e:22:1d:65:a8:6c:2c:e5:af:1f:59:88:
7a:02:ee:88:01:87:ef:61:09:7b:27:3d:44:0d:91:32:94:fe:
9a:50:05:f5:84:0b:da:f8:03:fe:84:a7:89:da:72:ce:38:65:
5e:be:a0:78:b1:5d:26:41:67:92:73:bb:d2:13:93:35:bc:18:
06:d7:9a:4b:75:fa:cf:6b:2f:b2:1c:40:2c:3d:39:af:fb:9c:
a7:02:03:9c:06:18:67:9d:74:e2:dd:84:5f:37:7e:a5:fc:e4:
9a:90:cd:c9:b5:4e:b8:92:04:de:de:05:09:ee:6c:5f:1d:3a:
93:6e:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:14:56 2026 by rpki-client