Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json)
Hash identifier: UgXaT7PMU/w4y+f3VcTEInhVKJrJ++fuBkasevjjVkc=
Subject key identifier: D7:B8:5C:60:AE:A2:B8:9B:F7:5A:63:A3:8B:4E:42:9E:2F:81:03:D2
Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3
Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
Certificate serial: 339D35C672C0CC3EB644E1B9FAD930B72878F14E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
Manifest number: 012B
Signing time: Thu 27 Mar 2025 11:50:49 +0000
Manifest this update: Thu 27 Mar 2025 11:45:49 +0000
Manifest next update: Sun 30 Mar 2025 13:52:49 +0000
Files and hashes: 1: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: huRfaxbhSwylLxpTR+qFQbNwgI1ST+DGQJKRH6CbwiA=)
2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: rfmzRlsdAvNLiNI+69dQJvzwCRcUetfcXyg7dj9lLfM=)
3: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: j4MOGHJOSNmwcuziZ2Z/qmzSEgLCOLHh1rUT99wQzTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9d:35:c6:72:c0:cc:3e:b6:44:e1:b9:fa:d9:30:b7:28:78:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
Validity
Not Before: Mar 27 11:45:49 2025 GMT
Not After : Mar 30 13:52:49 2025 GMT
Subject: CN=D7B85C60AEA2B89BF75A63A38B4E429E2F8103D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:03:43:bd:a3:2a:f2:d0:46:b1:18:5e:0b:
a6:80:03:a9:2e:17:43:87:7e:9d:c8:86:e7:ad:ca:
93:0d:2f:3e:48:48:a9:1e:76:70:98:d4:39:f0:11:
c3:ab:3b:24:59:59:4e:6a:48:1f:db:58:e7:3f:68:
ba:33:f5:30:68:fe:72:19:24:07:ab:5e:e5:f1:e2:
1a:b2:5d:89:60:42:13:4f:43:5b:b1:44:62:00:0f:
7b:2c:09:0c:4f:2e:09:ab:62:61:03:b8:de:fd:18:
46:fd:6e:6e:ff:31:ab:31:3f:3b:8f:70:40:3c:a9:
2f:51:db:42:d4:29:db:c3:00:77:29:5f:65:fb:c4:
1e:21:9a:e0:d1:4b:16:64:59:45:6d:34:90:b6:be:
80:42:ec:c2:0b:d2:3a:e8:b3:8b:b8:e2:14:08:a8:
b2:9d:d4:ce:13:e8:f4:dd:cf:da:49:75:9a:7c:28:
f6:bb:6f:1f:be:72:0b:e7:c0:13:73:08:87:a6:1c:
d8:49:4e:4b:e5:b2:b4:8b:91:d9:d5:29:46:31:92:
35:0f:03:97:fe:da:7c:49:d8:4f:2d:61:c7:bf:bd:
e6:c7:7c:d1:4e:fe:ff:f6:db:43:2b:37:5f:95:00:
1d:09:f6:d3:96:0f:8f:01:e4:5a:e3:f0:a3:2e:0d:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B8:5C:60:AE:A2:B8:9B:F7:5A:63:A3:8B:4E:42:9E:2F:81:03:D2
X509v3 Authority Key Identifier:
keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:27:d9:db:13:24:24:82:5a:78:f0:f1:41:62:c8:ae:7e:
90:fe:b8:90:e7:1a:6b:07:ee:d1:33:b6:0f:95:e1:c6:6d:d8:
82:b5:71:00:a6:90:89:a4:a7:15:63:10:8d:c0:4e:b7:2d:b7:
91:8a:f5:8d:db:99:c6:14:1f:59:19:17:75:8f:86:59:bf:38:
c9:1a:ec:eb:c3:ae:d2:58:01:db:b2:2d:e5:95:08:77:85:72:
2b:3e:81:89:08:5f:ca:76:af:4b:39:db:a2:e7:16:ea:88:f0:
ba:8d:52:f7:0b:fe:d3:ee:67:cc:c5:12:ac:fe:1c:30:1b:ba:
38:99:84:45:28:18:9d:eb:ef:fc:39:6e:9d:a1:08:2a:17:75:
1a:7c:13:82:bc:3c:8b:ae:8c:54:bf:6d:ff:82:c7:b2:9a:22:
e4:b0:c6:af:08:b0:14:7e:d7:9d:6f:84:93:f0:4e:32:68:25:
d5:ed:78:8d:d5:bc:58:6a:75:1a:70:43:a4:8f:1b:f2:5e:61:
f6:50:48:61:eb:a6:86:ad:c2:39:46:ee:51:ad:34:b8:bf:e0:
a7:4b:10:6a:55:54:77:68:b4:1d:c9:f5:01:ae:59:1d:8e:be:
b8:d3:42:23:b6:1c:11:80:ea:3e:30:da:a7:c7:ce:e9:25:d6:
ed:d3:a6:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM501xnLAzD62ROG5+tkwtyh48U4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1
MDFCODdFMzAeFw0yNTAzMjcxMTQ1NDlaFw0yNTAzMzAxMzUyNDlaMDMxMTAvBgNV
BAMTKEQ3Qjg1QzYwQUVBMkI4OUJGNzVBNjNBMzhCNEU0MjlFMkY4MTAzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxSgNDvaMq8tBGsRheC6aAA6ku
F0OHfp3IhuetypMNLz5ISKkednCY1DnwEcOrOyRZWU5qSB/bWOc/aLoz9TBo/nIZ
JAerXuXx4hqyXYlgQhNPQ1uxRGIAD3ssCQxPLgmrYmEDuN79GEb9bm7/MasxPzuP
cEA8qS9R20LUKdvDAHcpX2X7xB4hmuDRSxZkWUVtNJC2voBC7MIL0jros4u44hQI
qLKd1M4T6PTdz9pJdZp8KPa7bx++cgvnwBNzCIemHNhJTkvlsrSLkdnVKUYxkjUP
A5f+2nxJ2E8tYce/vebHfNFO/v/220MrN1+VAB0J9tOWD48B5Frj8KMuDZ6RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU17hcYK6iuJv3WmOji05Cni+BA9IwHwYDVR0j
BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE
Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC
ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh
MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC
QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAKUJ9nbEyQkglp48PFBYsiufpD+uJDnGmsH
7tEztg+V4cZt2IK1cQCmkImkpxVjEI3ATrctt5GK9Y3bmcYUH1kZF3WPhlm/OMka
7OvDrtJYAduyLeWVCHeFcis+gYkIX8p2r0s526LnFuqI8LqNUvcL/tPuZ8zFEqz+
HDAbujiZhEUoGJ3r7/w5bp2hCCoXdRp8E4K8PIuujFS/bf+Cx7KaIuSwxq8IsBR+
151vhJPwTjJoJdXteI3VvFhqdRpwQ6SPG/JeYfZQSGHrpoatwjlG7lGtNLi/4KdL
EGpVVHdotB3J9QGuWR2OvrjTQiO2HBGA6j4w2qfHzukl1u3TpnQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:57 2025 by rpki-client