
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json)
Hash identifier: UM/lny3kg04XbFNax3SZJhEerY8+CNjiWFBECi4R3Xs=
Subject key identifier: FE:DA:4A:7E:60:03:01:12:72:5A:AF:F2:82:3D:41:E7:DC:4D:8D:46
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial: 1F62E3E92030E5FC0EECAFCD863EFC85B3C300B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
Manifest number: DC
Signing time: Sat 29 Mar 2025 10:30:42 +0000
Manifest this update: Sat 29 Mar 2025 10:25:42 +0000
Manifest next update: Tue 01 Apr 2025 21:02:42 +0000
Files and hashes: 1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=)
2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: Zfzve6hXKBRfyf/knR1uXlgypox76mfQyqBpms/eoEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:62:e3:e9:20:30:e5:fc:0e:ec:af:cd:86:3e:fc:85:b3:c3:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Validity
Not Before: Mar 29 10:25:42 2025 GMT
Not After : Apr 1 21:02:42 2025 GMT
Subject: CN=FEDA4A7E60030112725AAFF2823D41E7DC4D8D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:a8:c6:43:f7:b1:a1:43:6f:50:60:77:76:
eb:fc:d1:0b:9f:1a:da:1d:b9:0d:55:ef:c4:c7:db:
6a:4a:c4:da:8e:90:e3:b2:f0:22:2e:c8:41:84:56:
d8:2f:c6:10:e6:47:02:79:ba:cf:93:b1:2a:bc:c6:
b5:a2:97:3f:01:1a:c0:0d:e7:4e:67:26:41:23:ce:
bc:ea:9a:f0:62:a4:e2:45:45:67:ee:64:9a:76:6a:
83:9a:c0:ee:8a:9f:58:08:78:e0:1a:54:08:c0:4a:
16:3b:48:3f:ea:7a:c8:bd:cd:94:ad:39:a7:a2:8b:
8b:04:58:f8:cd:2a:e2:6d:d4:16:5b:e5:f9:fd:27:
45:16:f2:83:43:eb:c4:98:c6:67:b2:83:7f:9d:84:
73:04:1e:25:bd:d5:89:2f:bc:76:d7:d8:45:61:aa:
ed:29:34:77:06:b6:c6:c6:c0:c7:48:f4:62:21:07:
93:77:bc:82:9d:46:67:2f:7a:42:7f:df:f5:7a:12:
3c:60:f7:91:b0:e1:72:fa:02:72:d1:eb:96:29:9c:
a8:64:5f:e5:a9:d0:47:2e:6c:9e:cc:9d:32:93:95:
83:2e:a4:76:20:80:7d:0e:5e:5a:b0:9c:80:c5:80:
b4:ab:f1:03:6a:89:3b:09:a1:04:0f:31:df:91:01:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DA:4A:7E:60:03:01:12:72:5A:AF:F2:82:3D:41:E7:DC:4D:8D:46
X509v3 Authority Key Identifier:
keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:5b:40:c9:19:48:21:c6:81:cd:db:ce:7c:36:70:76:bf:
f6:55:97:b9:47:f0:12:59:6f:d3:76:60:4d:51:cd:9a:9a:f0:
8b:10:45:02:a8:d3:19:5b:14:88:ee:5d:33:c9:c4:10:ee:23:
b6:fd:55:52:d8:63:59:88:cf:47:d0:ef:99:44:e2:9a:93:1c:
ed:d7:f6:f3:36:1f:ff:53:80:1a:93:7b:f8:bf:a2:1d:94:d5:
32:e8:7c:d9:ca:8b:7e:5f:65:00:99:5a:e9:44:f4:b7:29:a7:
88:81:80:72:cd:1a:19:7c:70:2a:59:82:6b:be:48:34:ae:3a:
da:ad:73:1f:04:96:57:c3:68:9a:fa:41:a5:a1:2e:b2:03:82:
47:e0:97:ce:fc:ee:b6:1c:fc:88:66:77:bb:3f:db:ba:43:05:
29:88:14:ee:c2:a1:ab:9d:41:34:75:b4:d0:d9:39:51:84:d3:
64:4a:34:51:e3:ac:72:09:55:53:db:7a:a7:68:5e:76:1d:77:
da:e4:2a:7a:b0:23:8e:20:a5:99:23:cb:a5:f6:bc:12:72:d3:
92:59:b9:a6:b4:bc:af:b4:20:5f:1a:8d:8f:c9:75:8e:74:ee:
19:d8:47:a8:d1:94:54:59:32:fb:64:a9:6e:e9:35:87:6f:8c:
cc:1f:6d:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUH2Lj6SAw5fwO7K/Nhj78hbPDALcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB
Njk2RUY5NjAeFw0yNTAzMjkxMDI1NDJaFw0yNTA0MDEyMTAyNDJaMDMxMTAvBgNV
BAMTKEZFREE0QTdFNjAwMzAxMTI3MjVBQUZGMjgyM0Q0MUU3REM0RDhENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0KjGQ/exoUNvUGB3duv80Quf
GtoduQ1V78TH22pKxNqOkOOy8CIuyEGEVtgvxhDmRwJ5us+TsSq8xrWilz8BGsAN
505nJkEjzrzqmvBipOJFRWfuZJp2aoOawO6Kn1gIeOAaVAjAShY7SD/qesi9zZSt
Oaeii4sEWPjNKuJt1BZb5fn9J0UW8oND68SYxmeyg3+dhHMEHiW91YkvvHbX2EVh
qu0pNHcGtsbGwMdI9GIhB5N3vIKdRmcvekJ/3/V6Ejxg95Gw4XL6AnLR65YpnKhk
X+Wp0EcubJ7MnTKTlYMupHYggH0OXlqwnIDFgLSr8QNqiTsJoQQPMd+RAcI/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/tpKfmADARJyWq/ygj1B59xNjUYwHwYDVR0j
BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1
NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2
RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh
ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF
QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIwVW0DJGUghxoHN2858NnB2v/ZVl7lH8BJZ
b9N2YE1RzZqa8IsQRQKo0xlbFIjuXTPJxBDuI7b9VVLYY1mIz0fQ75lE4pqTHO3X
9vM2H/9TgBqTe/i/oh2U1TLofNnKi35fZQCZWulE9Lcpp4iBgHLNGhl8cCpZgmu+
SDSuOtqtcx8EllfDaJr6QaWhLrIDgkfgl8787rYc/Ihmd7s/27pDBSmIFO7Coaud
QTR1tNDZOVGE02RKNFHjrHIJVVPbeqdoXnYdd9rkKnqwI44gpZkjy6X2vBJy05JZ
uaa0vK+0IF8ajY/JdY507hnYR6jRlFRZMvtkqW7pNYdvjMwfbcI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:13 2025 by rpki-client