Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json)
Hash identifier: 1mCWwevY1OwSXaV6yvgT+rSYLYSz9blAI73t3i3WX3Y=
Subject key identifier: 2A:CE:80:41:BC:73:3D:25:2A:0F:8A:EC:29:28:30:4C:BC:42:F0:EB
Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Certificate serial: 5FD20100E142252272236350B89179C94F1BD2E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
Manifest number: 0273
Signing time: Fri 28 Mar 2025 07:40:55 +0000
Manifest this update: Fri 28 Mar 2025 07:35:55 +0000
Manifest next update: Mon 31 Mar 2025 14:36:55 +0000
Files and hashes: 1: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 7LF1a7D5EDLG17ihfLxfwJXRWol/1ek+UfoMR7jTEuA=)
2: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: yBaA0+xOkr+iculo5l4/62QXBhceh7/LNqxDxugk/Cg=)
3: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: vJN17h6zHlw8lhqv4ICIcSweY39vapLLmQqw71/RhS0=)
4: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: ffvn04t4fi6a8Vkb2f0hUbxkEiHFBCAo/QNSjpyoNxU=)
5: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=)
6: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: 4hTYB6oeBmhzrslyPSwrX3Ek6Lkwqv8RzR59ex14KTA=)
7: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=)
8: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: ptSpa0yORFDFTGktJ23ziYaQuqfcwcD6+X4WfU20Bt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d2:01:00:e1:42:25:22:72:23:63:50:b8:91:79:c9:4f:1b:d2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Validity
Not Before: Mar 28 07:35:55 2025 GMT
Not After : Mar 31 14:36:55 2025 GMT
Subject: CN=2ACE8041BC733D252A0F8AEC2928304CBC42F0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:99:8d:49:60:ec:2e:5f:48:1c:b8:0f:a3:
7d:f4:99:c5:ab:da:24:07:46:04:87:50:0e:ec:7c:
e4:6a:84:ce:d5:60:06:6f:61:76:54:64:c7:20:cc:
78:45:73:69:df:ce:83:f3:ae:5f:a0:0a:03:29:8c:
7e:be:f1:ac:46:18:e6:8a:5c:a4:5d:8d:3c:00:3f:
3d:96:19:96:a4:b6:12:f1:49:c5:c9:73:25:27:61:
8d:e2:67:ef:d1:8b:06:c2:7a:80:01:4d:0c:c1:a6:
50:23:58:d4:5c:6a:e4:7a:10:c2:a9:10:48:7a:d1:
32:a6:b8:b5:4f:13:4b:f4:71:5a:05:1a:d3:f4:53:
63:ce:99:f2:c8:a1:6e:b7:7e:64:0d:ae:ca:10:74:
01:ca:db:5b:2b:c8:9d:4c:65:e0:14:19:dc:9c:e2:
0e:0c:22:d0:4d:c2:ec:db:a6:40:8e:79:fe:29:13:
ee:58:a9:74:5a:00:64:b9:11:f0:0f:57:b2:82:d0:
ea:28:15:54:32:ac:1e:d3:0a:b8:fe:29:12:47:3b:
ec:32:6b:66:ff:dc:5c:f5:7c:89:e0:41:b2:b3:47:
31:7e:72:1b:f2:a5:97:a8:8f:01:f0:35:47:fb:45:
9d:6b:51:c7:e7:63:95:70:f3:6e:3c:1a:6f:be:a3:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:80:41:BC:73:3D:25:2A:0F:8A:EC:29:28:30:4C:BC:42:F0:EB
X509v3 Authority Key Identifier:
keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:27:b0:c9:e3:e0:f0:01:60:2e:f5:fb:30:08:8c:b4:b1:
f2:f8:aa:0d:93:47:9c:8c:7b:a7:c6:7b:3d:67:3c:86:1e:4d:
7d:e3:be:78:1e:9c:b2:fa:88:1c:6a:b5:5d:72:c4:73:34:9e:
ec:8b:fc:d1:60:c6:7a:1a:38:e8:9b:5d:9c:63:6c:5e:25:0d:
a2:6f:aa:a3:5c:2d:53:fc:e9:89:98:1f:2d:d4:e5:c9:f3:40:
14:c1:60:a4:f0:b3:32:1d:0b:9b:25:b9:40:7c:87:85:45:ac:
2c:0a:4d:ca:64:7d:f9:c2:9d:75:0b:f1:cc:88:76:00:7f:03:
00:4b:79:85:9d:b8:c8:59:17:aa:96:de:ed:33:7a:6b:f6:d8:
30:33:7f:ce:e3:6b:2d:41:d2:30:7f:86:b3:b1:0a:bc:e5:75:
8b:96:34:28:9b:50:69:65:61:d7:a2:9b:44:eb:e4:f2:4f:f9:
8d:5d:55:78:36:df:09:46:11:57:b5:c0:e1:4a:a8:60:e8:da:
ee:31:80:18:cd:57:42:b3:06:42:d8:89:f6:08:69:75:3c:28:
b9:6a:85:e2:f2:be:a5:1a:2e:80:2b:99:97:84:fc:5c:d6:93:
37:81:ad:52:5e:35:d8:1c:d4:df:af:6a:30:2f:2b:e5:b7:e9:
10:96:26:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX9IBAOFCJSJyI2NQuJF5yU8b0ucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy
MzRDQTQ0NjAeFw0yNTAzMjgwNzM1NTVaFw0yNTAzMzExNDM2NTVaMDMxMTAvBgNV
BAMTKDJBQ0U4MDQxQkM3MzNEMjUyQTBGOEFFQzI5MjgzMDRDQkM0MkYwRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerpmNSWDsLl9IHLgPo330mcWr
2iQHRgSHUA7sfORqhM7VYAZvYXZUZMcgzHhFc2nfzoPzrl+gCgMpjH6+8axGGOaK
XKRdjTwAPz2WGZakthLxScXJcyUnYY3iZ+/RiwbCeoABTQzBplAjWNRcauR6EMKp
EEh60TKmuLVPE0v0cVoFGtP0U2POmfLIoW63fmQNrsoQdAHK21sryJ1MZeAUGdyc
4g4MItBNwuzbpkCOef4pE+5YqXRaAGS5EfAPV7KC0OooFVQyrB7TCrj+KRJHO+wy
a2b/3Fz1fIngQbKzRzF+chvypZeojwHwNUf7RZ1rUcfnY5Vw8248Gm++o6cJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKs6AQbxzPSUqD4rsKSgwTLxC8OswHwYDVR0j
BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5
NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD
QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky
NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3
N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKzAJ7DJ4+DwAWAu9fswCIy0sfL4qg2TR5yM
e6fGez1nPIYeTX3jvngenLL6iBxqtV1yxHM0nuyL/NFgxnoaOOibXZxjbF4lDaJv
qqNcLVP86YmYHy3U5cnzQBTBYKTwszIdC5sluUB8h4VFrCwKTcpkffnCnXUL8cyI
dgB/AwBLeYWduMhZF6qW3u0zemv22DAzf87jay1B0jB/hrOxCrzldYuWNCibUGll
Ydeim0Tr5PJP+Y1dVXg23wlGEVe1wOFKqGDo2u4xgBjNV0KzBkLYifYIaXU8KLlq
heLyvqUaLoArmZeE/FzWkzeBrVJeNdgc1N+vajAvK+W36RCWJo0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:34 2025 by rpki-client