
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json)
Hash identifier: vLUTwvXoA8B6JMT9e4T7dH3N58588mWEKCUBTK+5ark=
Subject key identifier: 17:1B:71:1B:35:A7:AD:32:0B:A4:DF:38:DB:B6:97:8D:DC:E4:E1:54
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 7A56A5328E45F1A75599DD5208B7383F8D25E100
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
Manifest number: 01C4
Signing time: Fri 28 Mar 2025 02:20:43 +0000
Manifest this update: Fri 28 Mar 2025 02:15:43 +0000
Manifest next update: Mon 31 Mar 2025 06:13:43 +0000
Files and hashes: 1: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=)
2: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=)
3: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=)
4: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: lGpWVIo6Eycbfr/ImhWAMZBU6qevpxpKkQ30qbehemo=)
5: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: IjDU6VchKiVRt/VpnNfkp1NDPemNIu86cnCMdMAMgr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:56:a5:32:8e:45:f1:a7:55:99:dd:52:08:b7:38:3f:8d:25:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Mar 28 02:15:43 2025 GMT
Not After : Mar 31 06:13:43 2025 GMT
Subject: CN=171B711B35A7AD320BA4DF38DBB6978DDCE4E154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f1:d6:4c:d3:56:bb:9c:d9:b0:a9:df:a5:07:
55:d7:0b:d0:16:bc:30:e3:b7:9a:b0:15:e6:9f:6b:
0b:44:af:f1:f7:fa:f1:9c:1a:01:49:5c:35:c7:7c:
6a:91:d5:e8:15:81:78:a2:61:68:b5:87:07:2a:fa:
c3:d2:82:35:48:5f:dc:cd:0b:fd:41:ec:88:3d:36:
4e:55:74:fd:55:7e:b2:24:22:b1:5a:6d:75:c0:a9:
63:c4:cf:93:0f:12:59:43:a5:8c:41:ef:c7:30:1f:
fc:fd:a7:1b:0e:0d:b8:8e:c2:94:86:bc:f2:1d:1b:
a8:ea:6f:30:ae:5b:04:67:c8:c9:7b:60:1b:4a:e7:
a1:16:0c:58:1b:80:3a:81:d6:dc:cb:e8:ef:76:b4:
80:5c:3e:58:ee:a7:fb:75:1e:c2:34:45:c8:14:40:
86:a5:a6:e1:4c:e8:3a:c5:d6:8d:5c:3c:4a:33:b9:
bc:63:13:0c:5b:6c:18:e5:a2:55:f2:72:16:d9:03:
f0:c2:b1:4f:9f:e8:80:6d:0c:0c:91:bf:13:f1:a7:
3c:8e:07:97:7c:36:57:56:8c:23:55:01:cb:c6:c4:
06:da:c1:d0:4e:5f:4c:35:6c:48:ad:03:4b:91:62:
69:0b:9a:f3:7a:7d:8c:dc:a6:96:57:d6:a0:ec:05:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:71:1B:35:A7:AD:32:0B:A4:DF:38:DB:B6:97:8D:DC:E4:E1:54
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:6f:35:e1:63:c9:be:07:29:72:58:bd:db:c8:b5:77:ee:
66:6d:5b:35:29:58:46:07:99:80:c6:97:12:cc:60:e2:e9:9e:
01:48:72:d6:cf:7e:b9:fb:8f:66:3a:fd:35:9a:65:14:9b:e1:
38:c5:89:a3:d3:bb:e1:60:e4:c5:94:51:ca:63:d8:cd:02:9c:
26:ef:da:7c:b3:d6:a5:94:da:0c:e7:91:00:e5:5f:bd:e7:b7:
0c:1e:21:73:78:55:87:19:53:df:3b:e1:db:f8:a5:49:8e:1d:
2a:b2:e7:ff:4c:7e:57:84:ca:73:ee:09:d4:a4:a1:86:fc:38:
e0:6e:50:3e:1d:2e:0d:8a:a6:3a:21:e1:14:bb:b7:6b:57:e4:
c7:74:da:20:69:56:6c:bc:10:89:06:e1:48:0a:76:d4:68:26:
5f:06:d6:dd:74:5f:77:1b:7d:fc:93:c3:fd:60:06:36:1b:cb:
9b:5a:de:57:35:61:be:bd:15:20:9b:b9:1d:81:f5:21:c2:3e:
07:f2:b6:56:f3:7f:23:84:2e:31:80:2b:8a:24:89:26:1e:bb:
9e:cb:46:27:f2:11:16:b3:47:4e:c3:ee:39:e2:f9:34:91:e1:
0a:a4:9c:41:9e:63:ce:d1:91:2f:60:1b:fb:33:85:29:4e:ad:
00:51:08:a7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUelalMo5F8adVmd1SCLc4P40l4QAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx
NjM4QTcwNzAeFw0yNTAzMjgwMjE1NDNaFw0yNTAzMzEwNjEzNDNaMDMxMTAvBgNV
BAMTKDE3MUI3MTFCMzVBN0FEMzIwQkE0REYzOERCQjY5NzhERENFNEUxNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8dZM01a7nNmwqd+lB1XXC9AW
vDDjt5qwFeafawtEr/H3+vGcGgFJXDXHfGqR1egVgXiiYWi1hwcq+sPSgjVIX9zN
C/1B7Ig9Nk5VdP1VfrIkIrFabXXAqWPEz5MPEllDpYxB78cwH/z9pxsODbiOwpSG
vPIdG6jqbzCuWwRnyMl7YBtK56EWDFgbgDqB1tzL6O92tIBcPljup/t1HsI0RcgU
QIalpuFM6DrF1o1cPEozubxjEwxbbBjlolXychbZA/DCsU+f6IBtDAyRvxPxpzyO
B5d8NldWjCNVAcvGxAbawdBOX0w1bEitA0uRYmkLmvN6fYzcppZX1qDsBU/rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFxtxGzWnrTILpN8427aXjdzk4VQwHwYDVR0j
BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC
MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4
QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx
YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4
NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG3bbzXhY8m+BylyWL3byLV37mZtWzUpWEYH
mYDGlxLMYOLpngFIctbPfrn7j2Y6/TWaZRSb4TjFiaPTu+Fg5MWUUcpj2M0CnCbv
2nyz1qWU2gznkQDlX73ntwweIXN4VYcZU9874dv4pUmOHSqy5/9MfleEynPuCdSk
oYb8OOBuUD4dLg2Kpjoh4RS7t2tX5Md02iBpVmy8EIkG4UgKdtRoJl8G1t10X3cb
ffyTw/1gBjYby5ta3lc1Yb69FSCbuR2B9SHCPgfytlbzfyOELjGAK4okiSYeu57L
RifyERazR07D7jni+TSR4QqknEGeY87RkS9gG/szhSlOrQBRCKc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:44 2025 by rpki-client