Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft
File: 25D788BD2A450C01354B9AB70826895FDFF56208.mft (raw, json)
Hash identifier: vbe3bbZFF5bSumiz8SoMeohe4/z0I/St694OTqG5Gk4=
Subject key identifier: EF:26:9F:24:A1:60:EC:76:71:9D:75:7F:B3:76:D5:2B:AA:CB:81:6E
Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08
Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208
Certificate serial: 6A4E6788F0AF52C68ADA683A22C10FB2229D7395
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft
Manifest number: 030C
Signing time: Thu 27 Mar 2025 20:30:59 +0000
Manifest this update: Thu 27 Mar 2025 20:25:59 +0000
Manifest next update: Mon 31 Mar 2025 05:49:59 +0000
Files and hashes: 1: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: rd1DlMh/MYO7HpSHAI7Fm6/tPrgqiJvxbgj5UtMH0zE=)
2: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: fqCZ9+V4OhrivrL7rJsmVltpUel/D0iJtOWt/NWMlmg=)
3: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: LXUvF/9HV9LQjuPpMuWCi7neUUmU+exlVXTngKvHYow=)
4: 25D788BD2A450C01354B9AB70826895FDFF56208.crl (hash: aX3ucgilI6WtkCtykw9plod6S9zYtBGWmzZJj/W9ckU=)
5: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: wuLvX+Xgm0i3AJgZLRAJ8zSBRz4zFDFFXcC9P9aZOYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4e:67:88:f0:af:52:c6:8a:da:68:3a:22:c1:0f:b2:22:9d:73:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208
Validity
Not Before: Mar 27 20:25:59 2025 GMT
Not After : Mar 31 05:49:59 2025 GMT
Subject: CN=EF269F24A160EC76719D757FB376D52BAACB816E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:fe:0c:34:ea:fc:2a:74:48:9c:95:6c:a7:
1e:b8:1e:fe:d9:05:3f:7c:3c:e3:c9:fd:e2:b8:8c:
28:39:8e:8b:b0:b6:85:ee:55:ff:2b:0a:a0:53:96:
aa:c5:f7:b6:a0:a1:bf:50:d2:a4:e4:83:a6:91:e1:
bb:28:13:ae:63:f5:a2:f6:e6:6e:ec:a1:9b:82:76:
76:0a:d6:99:bb:9e:b6:4e:a2:14:e7:40:d0:fd:57:
5e:52:7a:c3:95:13:1f:e6:b8:3b:2c:c7:41:19:8d:
c9:85:04:4a:48:b2:36:18:5e:6c:27:c7:7e:fb:b8:
be:b8:6b:d2:cc:28:48:1f:22:ea:18:72:05:6a:23:
a2:d0:8e:c6:d8:d3:1a:4a:bc:2e:51:88:58:5b:94:
e2:79:fc:ba:07:f1:7d:68:84:86:82:74:2c:b5:96:
c3:d3:bf:dd:62:6f:b4:29:92:eb:43:82:1c:aa:ad:
c8:ae:71:49:c4:eb:b1:08:8f:09:5e:f2:76:2c:6e:
11:42:2c:6d:70:78:8d:bb:a6:48:d9:20:40:66:f4:
3f:7c:63:25:13:bc:c8:ad:00:c3:20:65:86:83:86:
a2:7f:ef:03:62:0c:0f:3b:d7:61:14:5a:c9:2e:de:
a5:45:ba:98:3b:55:89:0f:3e:ba:5d:54:f6:a4:78:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:9F:24:A1:60:EC:76:71:9D:75:7F:B3:76:D5:2B:AA:CB:81:6E
X509v3 Authority Key Identifier:
keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:44:72:20:8d:26:4d:45:7c:46:cf:c5:16:68:f1:a1:c4:c7:
c1:af:11:ed:e9:29:45:b8:84:b5:59:22:93:81:99:ef:68:3d:
22:b2:e5:e5:7c:1a:6d:4b:61:20:fa:5e:4c:fe:0a:3e:37:b2:
09:ca:84:d1:5c:42:8e:05:02:b6:73:34:8f:c9:e5:14:62:b9:
f2:0a:b8:6b:a2:ab:03:2c:eb:81:f5:9e:cf:0a:80:61:e8:a1:
1a:29:48:53:4a:50:5a:7f:d2:1a:1d:63:ad:44:f1:44:c7:d1:
cb:54:62:a4:f6:a9:1f:df:33:14:2d:1d:67:01:38:e8:97:97:
15:82:63:a9:24:8f:3c:c7:d6:a6:70:22:a5:e5:bf:28:8b:85:
e9:da:d7:2e:11:a5:3c:31:fe:7d:fa:b4:b8:25:01:36:99:8d:
2b:df:32:71:81:76:34:7c:b9:48:70:21:79:9a:8d:1f:67:9b:
a9:77:c6:c8:59:01:78:81:eb:3a:6d:88:7c:f9:01:dc:fd:9b:
f9:37:d5:1b:de:33:f2:6a:3c:4f:20:3d:cf:2a:46:3d:5e:84:
9c:32:25:65:2c:4d:fc:43:6d:ea:01:13:48:44:0d:6f:3d:6b:
cc:dd:76:21:64:b4:b8:80:9a:b2:a7:21:7f:8b:ed:12:79:ad:
62:c5:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:17 2025 by rpki-client