
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft
File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json)
Hash identifier: +99D1FODdTg2iuSgKF0AY2Z7Yu42CxFFkX3n46N0tCE=
Subject key identifier: BD:CA:18:A6:A3:ED:8A:5B:72:D7:F1:C1:07:29:0D:B5:84:41:B3:F3
Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3
Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3
Certificate serial: 1E188BC71F3C46542D8D28B08A68B2590C40E097
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft
Manifest number: 04BF
Signing time: Fri 28 Mar 2025 19:51:02 +0000
Manifest this update: Fri 28 Mar 2025 19:46:02 +0000
Manifest next update: Tue 01 Apr 2025 03:18:02 +0000
Files and hashes: 1: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: 5hIFeZpis/9nXiPNcY2fusD6YyCO2fi5q5uDb1EwNhI=)
2: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: 2vipDNHkAigu2uT5W7FDzRLLshb8CXIRnjNsD4RfK2A=)
3: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: j8OvebUImpIJJ2+WqOUtRsS/Lczxkx5d22kPjma9xr8=)
4: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: nlKrd5AKR7h3FCJzv+3n5dJLAh4Gtx9yY/SstgPTAXs=)
5: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: EEoe6rcJHCI5WYJCV/Syozu2zB8bUqSrlyAM5hNEakA=)
6: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: dgINQ5MJ3Auvon1oiBib4P8uI+HksPXhV6zDgPNH+z4=)
7: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: Kzuit7flC/q/AhzsHbDOQA9CaWnNa9oDmVzmfgUvay8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:18:8b:c7:1f:3c:46:54:2d:8d:28:b0:8a:68:b2:59:0c:40:e0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3
Validity
Not Before: Mar 28 19:46:02 2025 GMT
Not After : Apr 1 03:18:02 2025 GMT
Subject: CN=BDCA18A6A3ED8A5B72D7F1C107290DB58441B3F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:9d:28:8f:2c:3c:87:b2:f1:6a:1d:ff:bd:
5f:21:9a:b3:bf:03:12:21:ad:17:11:8c:fc:40:0b:
91:b9:4a:72:d1:ab:a2:bb:64:be:e1:45:c9:f1:83:
7a:c0:6b:83:48:c5:b4:9a:70:fd:ba:4f:e8:c3:f3:
ad:45:19:9e:1d:fd:c1:26:8d:0a:51:ce:89:3d:54:
0a:20:03:fc:de:e8:e2:3a:f7:8a:69:f5:da:df:90:
77:fe:00:16:0f:94:e9:e9:1e:f5:5b:73:59:68:f4:
e1:bf:64:41:c8:a3:3c:73:e9:0c:de:c1:98:4a:b8:
0b:44:e4:c5:8a:f1:01:3b:11:e6:9b:43:37:bc:21:
f1:b6:e7:06:0c:51:4f:7a:d7:99:fc:5f:a4:81:f0:
f4:98:f3:b3:d6:fd:80:e4:74:97:2b:84:28:df:fc:
b4:77:66:f5:b5:b6:85:fa:4e:6e:f6:7c:45:23:12:
d3:34:db:16:6a:32:d8:fe:14:0c:87:d1:07:2c:ed:
c8:4f:3e:c8:04:d1:bd:89:f4:91:41:2e:f3:d7:8d:
a7:0b:19:24:e0:df:d5:26:37:24:bd:d1:13:66:c0:
4e:03:83:ce:c1:ad:90:a2:20:76:37:53:6c:32:2a:
3f:03:92:9b:dd:ab:cf:93:9f:2b:b7:3d:b4:b9:47:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CA:18:A6:A3:ED:8A:5B:72:D7:F1:C1:07:29:0D:B5:84:41:B3:F3
X509v3 Authority Key Identifier:
keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:89:5e:fe:a2:5c:7e:82:4e:4b:a9:3a:97:b3:07:01:6b:d8:
4d:6d:29:5b:ff:2f:58:c5:b9:b6:78:3a:35:1b:97:6f:ec:c5:
94:81:f4:6a:13:9a:fd:48:a3:de:76:db:17:3b:94:8c:f9:8a:
21:4c:2b:a1:84:80:f7:ad:70:a2:53:17:26:6d:c4:98:64:14:
82:8b:39:d6:b4:24:81:4d:83:2a:6c:a6:97:aa:54:36:3c:54:
fa:d1:48:f5:61:2c:01:4c:de:f7:79:cd:8c:14:6b:43:38:a1:
a7:2c:51:d9:ac:72:bd:ae:12:34:46:f4:6c:b8:80:9c:c7:67:
6e:ca:60:26:93:6d:74:ed:90:92:c8:b3:49:12:de:76:83:e3:
62:25:14:24:85:82:4c:3f:50:22:19:84:a9:44:99:c1:d0:e7:
26:03:90:a2:ae:ea:05:c9:30:fa:c2:0e:72:3f:f9:63:16:a5:
f0:ff:e5:fe:e6:60:25:b6:54:bc:2d:69:76:6c:06:43:e3:93:
71:6c:76:1e:9b:2d:18:d4:50:1b:ae:6c:55:40:2d:3e:e7:7a:
4d:db:6b:46:a8:2a:32:06:c0:5c:24:27:ea:01:a0:97:bf:c0:
07:b3:9c:65:df:29:1d:56:16:5c:cc:dd:28:b4:3b:2b:87:b6:
ba:0e:e0:46
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHhiLxx88RlQtjSiwimiyWQxA4JcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF
RTlDOURBMzAeFw0yNTAzMjgxOTQ2MDJaFw0yNTA0MDEwMzE4MDJaMDMxMTAvBgNV
BAMTKEJEQ0ExOEE2QTNFRDhBNUI3MkQ3RjFDMTA3MjkwREI1ODQ0MUIzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6J0ojyw8h7Lxah3/vV8hmrO/
AxIhrRcRjPxAC5G5SnLRq6K7ZL7hRcnxg3rAa4NIxbSacP26T+jD861FGZ4d/cEm
jQpRzok9VAogA/ze6OI694pp9drfkHf+ABYPlOnpHvVbc1lo9OG/ZEHIozxz6Qze
wZhKuAtE5MWK8QE7EeabQze8IfG25wYMUU9615n8X6SB8PSY87PW/YDkdJcrhCjf
/LR3ZvW1toX6Tm72fEUjEtM02xZqMtj+FAyH0Qcs7chPPsgE0b2J9JFBLvPXjacL
GSTg39UmNyS90RNmwE4Dg87BrZCiIHY3U2wyKj8Dkpvdq8+Tnyu3PbS5R/kPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvcoYpqPtilty1/HBBykNtYRBs/MwHwYDVR0j
BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD
MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD
OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2
OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND
OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFGJXv6iXH6CTkupOpezBwFr2E1tKVv/L1jF
ubZ4OjUbl2/sxZSB9GoTmv1Io9522xc7lIz5iiFMK6GEgPetcKJTFyZtxJhkFIKL
Oda0JIFNgypsppeqVDY8VPrRSPVhLAFM3vd5zYwUa0M4oacsUdmscr2uEjRG9Gy4
gJzHZ27KYCaTbXTtkJLIs0kS3naD42IlFCSFgkw/UCIZhKlEmcHQ5yYDkKKu6gXJ
MPrCDnI/+WMWpfD/5f7mYCW2VLwtaXZsBkPjk3Fsdh6bLRjUUBuubFVALT7nek3b
a0aoKjIGwFwkJ+oBoJe/wAeznGXfKR1WFlzM3Si0OyuHtroO4EY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:04 2025 by rpki-client