Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json)
Hash identifier: iuUh694Y9/FY21QEQryol+kAleILilswjP7zbizOnEM=
Subject key identifier: FD:B7:F7:6A:85:2B:FE:CC:69:2F:2C:0E:C0:FA:02:8E:3E:8F:24:B2
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial: 3032677AA80BD13E41705FE970352BFD07DF0601
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
Manifest number: 02FA
Signing time: Thu 27 Mar 2025 22:20:57 +0000
Manifest this update: Thu 27 Mar 2025 22:15:57 +0000
Manifest next update: Mon 31 Mar 2025 04:44:57 +0000
Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: vos4wfbgWit9CPIZhtiH7kwDHAjtl0eqL3m94EaJcso=)
2: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: Gb4dk6cIFWpDm7yOXj9wMvU+xey+IEOR2MYqhzLU7AE=)
3: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=)
4: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: 07yh7hfVKVGF6Yffm3aMOKeO+ClRWm+M1+obA5h32mQ=)
5: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: N+Ot/inKVcA4yr7n4GNYrMxfbDoZyZlvEVliFyH2+mQ=)
6: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=)
7: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: f9FuRGS/54ynTWyCJxpf5dVmogFfTiR/nZl3Z2HbTas=)
8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: Fob1/hoaxI1PmxjmOmJBrnjoUBlYNNau0pJudnAPUXY=)
9: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: MargjL84nTzHz8ChojHD7+4RMOnc9Fhif/pdgboFtAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:32:67:7a:a8:0b:d1:3e:41:70:5f:e9:70:35:2b:fd:07:df:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Validity
Not Before: Mar 27 22:15:57 2025 GMT
Not After : Mar 31 04:44:57 2025 GMT
Subject: CN=FDB7F76A852BFECC692F2C0EC0FA028E3E8F24B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:a7:f8:ee:34:91:8c:14:93:54:3e:37:0f:
2d:52:e7:89:6d:92:8c:b7:37:44:ab:fc:ca:b2:94:
c3:83:5f:ee:ad:32:89:09:fb:40:93:e3:99:c0:f5:
87:6b:20:f7:72:47:d0:c3:8a:bd:cd:88:bc:f7:fa:
f1:90:93:63:2e:7f:e2:2a:7e:fc:d6:67:9c:57:11:
ef:58:d0:bc:24:67:a1:a9:24:4a:fb:69:5a:91:27:
40:a8:50:95:ec:4c:b4:9e:59:af:6f:15:05:de:e4:
b0:21:94:7f:95:5f:2b:1b:a3:e2:e7:93:76:48:de:
e8:d4:9b:9d:7f:20:1f:15:4f:7a:01:31:44:13:bd:
c0:67:a0:c0:40:d0:76:16:ae:31:f3:03:2b:1e:0b:
74:21:7e:92:a8:40:d5:69:0b:75:10:23:13:c0:c7:
53:55:a2:52:c6:ea:fe:e9:6d:c2:7f:fc:9a:5c:dc:
5f:30:ee:85:56:5c:a6:83:b1:a6:4b:e7:02:61:ce:
8a:fa:49:ea:c3:e3:c7:ee:c3:0a:5f:59:60:12:03:
8a:68:4d:90:f5:ff:60:f3:b6:9c:79:a5:c7:34:2d:
dc:99:c5:3f:6b:7e:f3:f2:e8:fb:f4:28:4c:e9:02:
d3:5f:ac:a9:e0:8e:8a:39:e8:a1:9c:54:8d:a1:0f:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B7:F7:6A:85:2B:FE:CC:69:2F:2C:0E:C0:FA:02:8E:3E:8F:24:B2
X509v3 Authority Key Identifier:
keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:12:87:50:c7:f3:61:70:c2:68:68:89:f4:5d:84:86:d4:e8:
e7:62:1f:9d:c0:e9:3e:72:c9:c1:9b:b5:bb:b8:8d:fa:69:77:
b8:ab:52:75:7a:a8:45:49:8e:87:66:9c:71:87:8f:f7:52:cb:
78:09:8b:9c:ca:af:58:0f:64:3b:bb:3a:96:9f:06:6e:a4:79:
48:a5:3d:81:19:ae:17:00:e9:7e:bd:c4:22:d0:10:95:fa:de:
d4:e2:2b:54:d7:ad:c8:35:ef:c4:99:17:61:05:66:70:62:47:
48:02:84:51:d8:24:7f:ae:c4:f4:5d:fa:0e:00:c7:a8:4c:3e:
33:2a:1e:88:71:fd:10:2b:88:1e:c5:e1:88:f4:2c:cf:27:d4:
3c:4a:c8:b2:7f:c7:d5:1d:a2:d9:1f:d9:c6:a7:27:69:53:f5:
90:6e:13:c5:7d:11:0e:b6:b8:db:f1:38:69:04:b0:44:c2:b1:
70:71:f8:18:fb:1b:58:d1:0a:58:43:08:38:48:7e:9f:19:c1:
30:dc:c7:0f:93:8f:1e:8b:fe:d6:1d:0e:67:bb:fb:eb:fa:5a:
83:01:9e:f0:e4:3b:f9:f5:a9:ed:ac:21:ab:00:62:e7:d0:36:
a6:aa:87:8d:51:03:61:74:73:fb:53:f2:b5:09:37:e0:14:06:
de:4f:00:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMDJneqgL0T5BcF/pcDUr/QffBgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD
QjNBMzQyODAeFw0yNTAzMjcyMjE1NTdaFw0yNTAzMzEwNDQ0NTdaMDMxMTAvBgNV
BAMTKEZEQjdGNzZBODUyQkZFQ0M2OTJGMkMwRUMwRkEwMjhFM0U4RjI0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdqf47jSRjBSTVD43Dy1S54lt
koy3N0Sr/MqylMODX+6tMokJ+0CT45nA9YdrIPdyR9DDir3NiLz3+vGQk2Muf+Iq
fvzWZ5xXEe9Y0LwkZ6GpJEr7aVqRJ0CoUJXsTLSeWa9vFQXe5LAhlH+VXysbo+Ln
k3ZI3ujUm51/IB8VT3oBMUQTvcBnoMBA0HYWrjHzAyseC3QhfpKoQNVpC3UQIxPA
x1NVolLG6v7pbcJ//Jpc3F8w7oVWXKaDsaZL5wJhzor6SerD48fuwwpfWWASA4po
TZD1/2Dztpx5pcc0LdyZxT9rfvPy6Pv0KEzpAtNfrKngjoo56KGcVI2hDz2XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/bf3aoUr/sxpLywOwPoCjj6PJLIwHwYDVR0j
BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw
Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB
MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5
NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5
MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC0Sh1DH82FwwmhoifRdhIbU6OdiH53A6T5y
ycGbtbu4jfppd7irUnV6qEVJjodmnHGHj/dSy3gJi5zKr1gPZDu7OpafBm6keUil
PYEZrhcA6X69xCLQEJX63tTiK1TXrcg178SZF2EFZnBiR0gChFHYJH+uxPRd+g4A
x6hMPjMqHohx/RAriB7F4Yj0LM8n1DxKyLJ/x9Udotkf2canJ2lT9ZBuE8V9EQ62
uNvxOGkEsETCsXBx+Bj7G1jRClhDCDhIfp8ZwTDcxw+Tjx6L/tYdDme7++v6WoMB
nvDkO/n1qe2sIasAYufQNqaqh41RA2F0c/tT8rUJN+AUBt5PACs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:11 2025 by rpki-client