
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json)
Hash identifier: DkobgKaS4nlekguMPsD+Ra6/RGDMEWRjHUpqXINDQRs=
Subject key identifier: 57:32:0B:44:8E:6F:03:51:97:CE:58:6C:B0:E5:87:5C:0C:B6:80:3B
Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Certificate serial: 42A1313CCA98F095081AF52733347D4ED411C18B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
Manifest number: 012D
Signing time: Fri 28 Mar 2025 22:51:46 +0000
Manifest this update: Fri 28 Mar 2025 22:46:46 +0000
Manifest next update: Tue 01 Apr 2025 08:24:46 +0000
Files and hashes: 1: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: 7O+AvnULpeJy5aJ05kQrhljlfkV5ExWXqcP1gSPlqXU=)
2: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 5D15jDxwoTM16wzauOrUEtRL0kfiyMbHWtAJqnbWWIY=)
3: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: yqFry/4LxGJrVDuxbVY2RcAPDTNylJF/fe+W8ljuItE=)
4: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: tXqFPzzIYSaMhQVlADffN/Hhkl9ZDWSwCOT5BwB5GQU=)
5: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: jacU4c2UenPX8vzT/l1Osf9mSgEop22wfa5VW6r4QpQ=)
6: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: iq4zdyWuYQ9zfhh7R084abIYQNuWQgzRr+n2plfHB7I=)
7: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: 0hFlZ7fplBnjhpvQ2rtjlp/hS8tlJFaTBMFE7R6GDgM=)
8: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: KNuzEtjQXTPqbO4WNny2KjokoOmzzEFCKrvvjyUWvLI=)
9: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: JK9K79TizKr0Mzpc6GsKln188Fhnc893fnWWFi5WKGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a1:31:3c:ca:98:f0:95:08:1a:f5:27:33:34:7d:4e:d4:11:c1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Validity
Not Before: Mar 28 22:46:46 2025 GMT
Not After : Apr 1 08:24:46 2025 GMT
Subject: CN=57320B448E6F035197CE586CB0E5875C0CB6803B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:60:0d:55:a1:6e:9a:e4:98:7a:d7:5a:dc:
36:c4:4b:df:68:c2:47:18:58:e7:c6:15:c9:ed:96:
f1:ac:7a:59:a2:61:37:80:38:10:79:2f:06:35:34:
6b:3f:3a:44:af:39:d3:64:26:fa:54:9d:9b:51:26:
35:08:e0:3f:ce:01:93:0c:8d:1e:80:d4:8d:2a:69:
55:e5:18:28:01:c7:49:5c:ab:0d:a5:fd:24:c2:f4:
92:1d:6e:56:8a:89:b7:14:d8:f0:83:72:51:3e:a8:
2e:00:a0:da:6b:e9:ad:53:80:05:53:70:b7:45:2a:
e4:ce:32:b1:bc:8f:67:ba:51:d6:ec:be:55:68:9d:
ac:5d:7f:68:8d:a3:f6:8b:ab:b1:c3:a7:12:ea:73:
f9:5d:04:81:ba:b4:b1:8d:09:14:e0:f1:da:9b:b4:
8d:94:ec:c2:aa:a0:c0:f2:b4:34:43:d5:99:2a:80:
cd:58:9a:89:59:15:cd:12:7a:55:96:0a:8b:b1:8e:
dc:2d:ad:c8:dd:f7:8b:91:97:1e:45:b5:34:9d:14:
5a:65:b7:bf:3d:e7:8f:c5:33:fb:0f:cd:db:31:3b:
04:91:2a:c5:9e:8b:fb:ff:6a:07:53:dc:f6:dd:d0:
a6:4a:93:fb:32:c8:76:5e:46:a2:19:14:93:64:b9:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:0B:44:8E:6F:03:51:97:CE:58:6C:B0:E5:87:5C:0C:B6:80:3B
X509v3 Authority Key Identifier:
keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:fc:08:d2:b1:c5:77:5e:01:5e:d1:8d:f7:06:0b:f0:cd:
7f:74:2b:78:9e:16:27:45:63:8a:75:fd:9f:2f:53:aa:5d:8a:
bb:f6:90:1f:60:58:ef:2f:36:a8:1b:2b:82:5e:a2:13:ac:67:
82:98:81:48:8c:e3:e0:64:73:27:8f:c5:2d:bd:33:3d:06:e9:
80:bf:03:63:51:2c:58:c7:9f:61:9c:db:d7:cc:57:36:84:85:
cf:87:e6:df:bf:3f:26:f4:81:16:23:1a:e8:42:98:df:98:dc:
b1:fd:41:a4:a0:cf:85:51:31:d3:1c:82:61:42:7b:e1:ad:7b:
cb:3d:7c:fa:a9:ce:b7:01:b4:49:c1:47:48:a3:03:c8:de:95:
ac:7f:97:a9:0e:d4:ca:5c:07:da:7c:09:ae:90:7e:f0:10:51:
45:fc:45:80:15:9c:54:ae:c3:c8:33:cb:d7:4a:5a:f1:ec:91:
f0:b4:59:bf:ca:a7:22:55:6a:39:a1:0e:5a:8e:2c:82:09:19:
0c:86:6e:b0:70:38:83:ed:b1:03:d8:6f:5e:a3:a3:0f:5d:b5:
27:b6:04:c3:8a:2d:e7:52:03:4b:56:6a:1f:d8:ce:ab:12:c5:
0a:e7:57:cb:59:1d:37:66:f1:05:97:1a:f8:d4:c1:42:a2:98:
49:ec:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:51:35 2025 by rpki-client