Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json)
Hash identifier: gvPPfwB8vHRWNMkXnkJhzfIHm4xtlCmXnps60M9j4zU=
Subject key identifier: 63:25:8D:6E:1E:42:D8:DE:75:73:B4:3C:B0:65:61:8F:68:81:2C:83
Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Certificate serial: 53A11D77314C2A2E3DC9965C129747654420D30F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
Manifest number: 04BF
Signing time: Fri 28 Mar 2025 17:20:42 +0000
Manifest this update: Fri 28 Mar 2025 17:15:42 +0000
Manifest next update: Mon 31 Mar 2025 22:33:42 +0000
Files and hashes: 1: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: dlsqZUGTjCRx+krpGNhgh3Umv+mTDrb/1GV2U8GokZ0=)
2: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: sOLICWbkOQCKZGJuOxKOtJraYeaZ/2+UOwySpa2U+Ms=)
3: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: AhfedWLCTEc5EhocODFri+NBZVGPcnF3DEyLO8J+BrU=)
4: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: w4HDVncfWV0Eaqa/ySormlhwy/IOim7o3dC6FgGdLFA=)
5: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: gmlwk1E3suVjn/8fiND0vsV46kLjlNiZNpLWBhFFIPo=)
6: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: 71jqN8DhE0JKYB0EqMDkvLldp1gfS+xo4HcST08Qg/k=)
7: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: OI9Dbbh3AxBZ/lUfEAmwLldVzXyZ0yA+CnQ3viXQgc8=)
8: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: cAMxueznS/nh3h73C9cG6Tq/nGQZqb7kaIFcHdsdkqw=)
9: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: OT+Mk5WwssGJkg82hSQpE4gvwieaMEJQhhjdSn/cLTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a1:1d:77:31:4c:2a:2e:3d:c9:96:5c:12:97:47:65:44:20:d3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Validity
Not Before: Mar 28 17:15:42 2025 GMT
Not After : Mar 31 22:33:42 2025 GMT
Subject: CN=63258D6E1E42D8DE7573B43CB065618F68812C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:61:0e:48:28:d6:86:f3:bb:f1:35:fa:b5:1d:
cb:3b:5f:15:5d:9c:7f:90:aa:b3:8a:4f:c2:87:dd:
7e:73:dc:65:6d:97:06:de:21:50:79:f5:c3:b7:b8:
ef:1f:74:91:29:e4:9e:37:a1:36:38:83:92:0b:ea:
96:fd:22:8b:dc:62:87:da:87:ee:24:36:f6:fc:ff:
81:27:51:cb:c7:84:92:c6:99:57:96:5a:65:0a:ac:
08:dd:5c:e9:87:34:c7:eb:73:24:11:34:b8:2a:0a:
f1:94:31:4d:26:e8:a3:f4:49:db:55:2f:96:fe:3f:
53:f9:3c:78:d4:4d:1a:1e:cf:1e:e7:93:4f:ea:ba:
ab:65:47:86:50:66:db:88:64:88:d6:ba:7f:84:38:
10:23:7f:45:64:65:0f:0b:31:81:3f:e6:39:e8:06:
16:65:ae:fa:01:ef:84:b2:5d:a2:c6:e0:ca:bd:d7:
c6:17:1b:22:fe:14:67:a3:e7:61:f0:e8:4b:53:d1:
be:e4:52:af:55:ce:6a:c7:bb:f2:3d:1a:f5:ff:43:
ec:cd:1d:cd:56:d6:8b:21:64:cb:d0:e6:dd:92:4e:
29:70:ae:9b:02:ff:67:00:93:75:35:a7:f2:f8:dd:
50:46:c6:6a:4e:5f:ce:e2:92:4a:4d:21:0c:60:1a:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:8D:6E:1E:42:D8:DE:75:73:B4:3C:B0:65:61:8F:68:81:2C:83
X509v3 Authority Key Identifier:
keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d0:18:17:f6:3f:a7:5a:92:e8:07:30:09:a0:b3:33:a2:32:
73:66:38:b6:ca:03:b9:82:e8:14:ab:de:26:74:43:a0:be:64:
c0:90:a8:2e:10:14:37:10:89:91:5b:47:c0:3f:7d:c1:b3:01:
93:f8:a4:e8:2c:fd:7c:1a:f0:0d:29:4d:dd:be:85:76:67:f1:
b0:6a:81:ed:11:7a:a4:c4:f1:67:00:29:8b:c2:75:7b:fd:47:
0d:ee:f4:05:20:0a:91:c0:cc:67:e8:63:45:ce:66:b6:85:88:
74:4c:f5:96:0f:bd:96:64:90:f6:8c:59:0e:b3:15:e6:18:49:
e8:23:6b:68:7b:76:7d:f5:e7:07:e3:b8:6b:16:92:8c:34:ed:
4e:eb:98:5f:9c:5e:b1:18:d0:00:68:4d:cc:84:76:23:04:71:
9e:f5:c8:0f:c1:a3:21:9c:23:66:3e:9b:82:44:e2:d3:6a:b6:
40:bb:f7:f3:c8:9c:dd:54:9b:d7:15:f9:b4:44:2e:b1:87:44:
39:77:e1:47:96:01:5e:52:62:4f:3c:ad:22:c0:ad:2c:ce:c3:
82:46:44:9c:9a:50:de:0f:ca:b8:2e:06:a6:55:bd:9b:48:db:
0a:39:3d:01:6b:e3:08:7b:46:95:ce:05:07:e0:0d:89:e8:d2:
7f:f5:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:41 2025 by rpki-client