
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json)
Hash identifier: 6q8MwAvgK1c4HR4UOoL2olbV3WKDZf1lxfMXhzPkIBE=
Subject key identifier: D8:FE:9D:70:34:1E:31:73:D5:99:B7:F2:21:69:65:C4:D6:88:31:55
Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Certificate serial: 47991782578200064193554D09E3AA0BED5639DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
Manifest number: A5
Signing time: Thu 27 Mar 2025 21:31:47 +0000
Manifest this update: Thu 27 Mar 2025 21:26:47 +0000
Manifest next update: Mon 31 Mar 2025 04:53:47 +0000
Files and hashes: 1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=)
2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: pyURNAT3nGoEZbQy7ZOc2I5Cinz27MMTTV2knzI8tsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:99:17:82:57:82:00:06:41:93:55:4d:09:e3:aa:0b:ed:56:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Validity
Not Before: Mar 27 21:26:47 2025 GMT
Not After : Mar 31 04:53:47 2025 GMT
Subject: CN=D8FE9D70341E3173D599B7F2216965C4D6883155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:3c:d0:06:79:90:6b:29:4c:95:15:e2:ee:
f1:8b:81:3c:d1:31:da:5d:cc:7d:1e:01:ae:0c:12:
dc:87:98:28:08:d3:fc:ed:c2:7e:47:4e:05:79:e9:
ce:df:07:f5:c7:d1:30:ee:74:14:aa:d2:82:85:a1:
c0:cd:1d:fd:d8:53:e9:05:1b:63:9d:c1:00:4f:d0:
02:0f:fe:83:4a:57:5f:97:a4:a5:f8:cd:4d:fd:16:
59:b6:59:b8:eb:5a:73:72:8f:06:52:2b:77:ad:c7:
33:9e:27:90:68:31:33:c2:a4:e5:c8:bf:5a:8f:f8:
0b:52:c8:80:df:de:22:66:68:8c:2b:e8:b1:77:09:
6c:23:1e:54:36:10:b2:d6:9a:b7:e6:01:50:2a:d3:
c2:c4:94:8d:7d:cc:72:6a:e1:50:f5:22:a7:7d:fc:
ca:12:46:ea:33:a7:5c:14:0b:6c:59:f8:c4:48:5a:
50:35:e7:82:65:c5:af:5a:7f:11:74:11:77:1f:45:
b1:03:0a:f2:f6:1e:89:44:1d:fe:ec:ad:d4:5f:68:
07:ad:d6:03:19:dc:b6:ab:d9:74:0a:88:13:ca:ac:
57:e7:11:f9:02:46:f2:79:50:6f:c8:b1:8f:79:9f:
76:9f:96:ba:0a:9a:27:7a:63:fc:ab:fa:e1:9b:19:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FE:9D:70:34:1E:31:73:D5:99:B7:F2:21:69:65:C4:D6:88:31:55
X509v3 Authority Key Identifier:
keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bd:07:15:78:ef:69:53:15:9d:96:8c:f2:ef:92:e3:ac:91:
67:d9:28:03:84:62:70:75:d6:fe:55:53:29:15:ff:6c:80:a2:
7e:de:f6:8d:30:05:5c:9f:0f:bb:26:1f:d8:28:03:9a:67:2c:
3a:30:d7:08:cc:d7:af:4e:10:c6:8e:13:35:00:bf:f9:cf:2d:
ce:eb:cf:85:7a:64:10:b2:51:c3:c1:52:c1:87:76:0b:e3:52:
08:92:16:ad:13:1d:ed:8e:ba:f9:01:18:3e:50:b0:c2:3c:66:
62:55:e7:bb:7e:35:75:bf:b8:fe:13:a3:bb:39:5e:37:e9:1d:
98:1e:a7:a6:73:24:0e:a6:21:ae:c4:0a:88:f0:e1:e6:5e:7c:
90:ff:e2:fc:ca:68:9e:2c:e4:fe:62:96:07:de:1a:ed:a5:d7:
1a:10:4d:9d:fb:7e:1e:34:b7:b6:f2:0f:8e:1a:54:64:1d:07:
75:15:ab:e6:3e:e9:db:3c:3e:a3:18:47:d1:fd:43:9e:0f:10:
63:96:02:64:2d:c7:f5:12:2a:20:28:ed:b7:73:1a:df:61:12:
50:d4:bd:36:b4:b7:1e:06:84:6e:66:f1:a3:80:02:e9:d0:60:
f9:4d:76:c6:1d:e7:d0:a7:4d:08:a9:eb:0b:25:59:e2:20:94:
d0:d2:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:28 2025 by rpki-client