Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft
File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json)
Hash identifier: YXI8Y1yPKL/2TDrc7fJDljta4L78nh8F0ovQ4f5Bv8c=
Subject key identifier: 14:3D:80:E7:5A:CA:9D:9B:49:AE:69:10:81:9B:63:FF:98:88:BC:54
Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E
Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E
Certificate serial: 5991AE1C056484B40AC069AB1E8EAF308252D47B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft
Manifest number: 0200
Signing time: Sat 29 Mar 2025 04:10:48 +0000
Manifest this update: Sat 29 Mar 2025 04:05:48 +0000
Manifest next update: Tue 01 Apr 2025 07:13:48 +0000
Files and hashes: 1: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: 5gdDYRGqCNTAMBgtRPa3B8wA/WkRv27NqANNSFwviBY=)
2: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: +AMBcTRDOItbHkoJjd3Z20zd7vvhBKXQR154gJmvfP8=)
3: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: dqH/h3KP8VbL1imk1+sCwLW1Fbde9SEkgS3WsJD6a4Q=)
4: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: 9QQ+2QkEe5ZH/Gx9crXFjTQMx7fu4j8ocdzuLtt+l68=)
5: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 5099uAR6KmDcIfNiZmfT8BCVcKIiSE/bkHtUTKJ/KOQ=)
6: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: ouXIX9GF2bsN7u33KTbYLbJVbRNSQKEsMqHEdl/mkaw=)
7: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: QxcRI59eBP9vOZvPd8UtIm8nunAIQZZkvPnGGZ6af2w=)
8: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno=)
9: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 7O8N58po+0JxePzNZclEQ2AJgxG8+dzNwmbyqc3JseQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:91:ae:1c:05:64:84:b4:0a:c0:69:ab:1e:8e:af:30:82:52:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E
Validity
Not Before: Mar 29 04:05:48 2025 GMT
Not After : Apr 1 07:13:48 2025 GMT
Subject: CN=143D80E75ACA9D9B49AE6910819B63FF9888BC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:62:62:89:2a:6a:40:f4:06:89:4a:cf:45:
aa:6b:00:d1:74:a5:1a:ee:72:88:ae:fb:2d:8f:d9:
c9:d5:2a:33:5b:94:c3:53:30:d2:7a:a0:a5:94:5b:
87:61:d4:b9:f6:98:b8:a7:8d:9e:6b:dd:a8:fc:ac:
55:38:08:17:47:72:e2:25:38:c5:45:80:16:af:6a:
b9:11:e8:c6:f5:4a:3a:e0:55:1a:19:22:cc:d1:21:
03:a3:75:31:22:01:1a:63:cd:57:08:74:6a:59:3f:
3e:d6:e7:67:25:75:c6:c8:77:db:74:cf:f4:40:04:
81:ca:42:46:55:ad:c7:6c:25:ab:ab:5b:c5:32:2f:
28:96:54:a8:99:54:9c:0a:09:cb:3f:09:32:26:86:
a4:17:6a:0c:dd:89:25:14:f5:6a:05:2c:a3:a8:37:
6c:3f:52:b7:e4:f2:0a:27:d9:e0:08:0d:b4:44:f1:
8a:0c:3a:12:ee:05:5c:2e:95:f1:6d:4b:54:50:8d:
a7:9b:f3:bc:ab:53:3f:86:44:79:e2:8a:08:36:1c:
80:0a:e5:d6:fe:6c:5b:43:82:0f:1a:e7:a6:41:33:
ff:0a:3b:f4:a0:84:2d:e5:56:66:fd:bd:48:4a:fd:
9f:ea:92:7b:3d:01:42:75:26:a3:6e:6e:ab:96:29:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:80:E7:5A:CA:9D:9B:49:AE:69:10:81:9B:63:FF:98:88:BC:54
X509v3 Authority Key Identifier:
keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:39:dc:4b:d6:ca:d0:46:6f:b8:9d:a3:8a:04:9b:be:7d:fe:
2e:4d:c5:a6:19:11:f4:51:89:91:09:06:15:dd:c5:95:61:ab:
be:a5:33:82:6d:85:e8:b2:24:53:38:0c:97:97:ba:80:82:45:
dc:eb:c6:1c:97:43:e1:22:6c:4c:a4:84:3c:d4:82:71:50:27:
fd:2f:75:4d:09:f2:d9:16:bc:83:8b:2f:3e:71:db:e8:66:7d:
60:e6:69:fe:de:b2:d5:b3:ae:ad:46:db:48:eb:52:43:67:57:
9a:81:dc:ea:43:e6:21:55:fe:f9:9d:96:f9:5c:a8:d3:92:83:
73:b9:68:ca:60:c7:18:a7:43:99:ed:9b:b6:eb:58:5f:5e:61:
6f:2a:80:98:60:7c:ff:e0:c3:6e:f2:d4:3b:99:43:67:0a:d3:
7e:76:39:6f:a4:70:92:0e:d6:d6:40:36:6e:19:57:71:af:c0:
60:33:d9:6f:59:fd:87:ce:1d:6a:9d:51:fd:bc:3b:b5:24:b6:
f5:2d:3c:9b:86:2c:62:e7:da:46:e0:8c:3b:0c:08:e6:f3:1e:
86:a8:2a:3e:26:31:d5:4e:72:5d:3a:93:65:60:46:ba:f2:1a:
94:b3:93:a4:68:85:4d:51:5d:ce:ef:96:38:96:37:65:3c:32:
0d:9b:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:16 2025 by rpki-client