Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft
File: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft (raw, json)
Hash identifier: evWdcrpsYKgHLI/FSXpf7m2C4E8Xlbxe+IiimT9qKaY=
Subject key identifier: CB:04:2D:30:9C:40:90:09:FD:84:79:EB:FF:8E:D5:AB:F0:BD:EC:BD
Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17
Certificate issuer: /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17
Certificate serial: 77459AECCD465996C73892F8E80AF1D32386C876
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft
Manifest number: 0312
Signing time: Thu 27 Mar 2025 15:41:27 +0000
Manifest this update: Thu 27 Mar 2025 15:36:27 +0000
Manifest next update: Mon 31 Mar 2025 00:51:27 +0000
Files and hashes: 1: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: P56l00js9rnf8V8KM5dQv3ykfj4qv8CRRUVkqILqmlU=)
2: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl (hash: 1fW5HTKIFc4zGrqejWsmjJkl7kJiKyTPk7HUFf7vpNc=)
3: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: j4kPdYfgyBraDxUIOIX1rRESdoqShtU5fZw83PrS2Go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:45:9a:ec:cd:46:59:96:c7:38:92:f8:e8:0a:f1:d3:23:86:c8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17
Validity
Not Before: Mar 27 15:36:27 2025 GMT
Not After : Mar 31 00:51:27 2025 GMT
Subject: CN=CB042D309C409009FD8479EBFF8ED5ABF0BDECBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:e3:53:ca:ab:6e:93:3c:6d:b9:4d:53:51:
3f:1a:02:53:f9:10:aa:12:f3:8e:fd:96:88:e8:fe:
35:f7:fd:0c:be:08:06:6a:f7:54:61:20:18:3b:6c:
8c:4c:96:2b:11:cb:10:cd:06:56:3c:28:b1:81:96:
04:f0:ba:6e:b5:33:55:bb:04:7b:16:9a:46:60:0e:
73:ff:76:d3:a2:04:f1:50:02:31:b2:60:28:ff:c9:
5f:11:8f:ad:a9:95:2a:35:cc:c5:75:64:a8:f4:a2:
6e:26:4a:ef:f2:b9:26:b5:7e:cc:61:56:65:92:82:
e8:1d:66:8d:89:76:b7:c4:25:15:c6:03:45:d2:2f:
2b:fe:7f:41:a8:b0:02:36:90:b8:96:1f:7f:f9:8b:
3b:fc:ff:dd:81:4b:13:fe:7b:08:ce:7e:6f:ca:d9:
8b:8d:92:23:82:65:77:8e:85:5d:f5:55:02:9b:df:
4d:dd:72:82:d8:26:62:50:0b:0b:b6:fa:00:6f:98:
59:82:53:20:51:06:a4:0c:ab:dd:05:a8:a6:0c:26:
ba:85:98:dc:4d:e7:e8:d3:be:1c:69:98:a5:77:54:
03:df:ce:1a:5c:7f:be:04:cc:7f:2d:fc:e8:17:77:
79:6f:67:35:b0:62:3a:08:88:b5:c9:7f:cd:51:ed:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:2D:30:9C:40:90:09:FD:84:79:EB:FF:8E:D5:AB:F0:BD:EC:BD
X509v3 Authority Key Identifier:
keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:70:0a:bd:20:e8:03:35:a9:58:fd:0f:0d:68:8c:71:95:64:
78:9a:7b:9e:ab:1a:80:6d:5a:3d:61:c0:f3:f5:82:33:cf:7d:
dd:80:5f:dc:02:86:9f:e3:6c:5b:58:c3:ec:03:ed:16:48:93:
a1:f4:84:ba:72:a4:46:ec:cc:d4:d6:f8:28:09:af:05:75:22:
72:02:ae:30:2b:86:b8:a4:ce:37:5d:b1:8b:07:55:6c:63:0d:
9e:c4:a2:4c:11:a7:5c:d8:7e:85:89:2e:fd:92:d7:52:d4:23:
4e:d7:59:1b:40:0d:a5:b9:7c:0b:9f:31:f3:ec:85:b2:49:97:
d3:3c:87:dd:ed:f6:cf:cb:e9:7a:b8:bc:c6:6d:97:50:b6:3a:
1a:49:28:f9:4c:a4:23:0c:61:0d:f9:e3:7b:5e:ee:f5:b1:8e:
5d:d1:c1:d6:a6:8e:cc:43:16:0f:56:c0:d0:19:6b:50:c9:b3:
3b:71:a7:ea:95:b0:4b:7a:87:e8:52:b6:fd:81:47:be:d6:75:
99:f9:4d:21:5f:62:c2:8e:ff:29:a7:05:56:ae:92:09:6b:35:
6b:05:9a:b0:dc:92:79:eb:bd:a0:bc:40:cf:96:04:cf:16:47:
9f:05:f3:7b:00:0e:a2:b7:af:b3:3e:9b:ac:f4:4e:db:4c:59:
df:75:62:ae
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd0Wa7M1GWZbHOJL46Arx0yOGyHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VF
NDlFOEExNzAeFw0yNTAzMjcxNTM2MjdaFw0yNTAzMzEwMDUxMjdaMDMxMTAvBgNV
BAMTKENCMDQyRDMwOUM0MDkwMDlGRDg0NzlFQkZGOEVENUFCRjBCREVDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbeNTyqtukzxtuU1TUT8aAlP5
EKoS8479lojo/jX3/Qy+CAZq91RhIBg7bIxMlisRyxDNBlY8KLGBlgTwum61M1W7
BHsWmkZgDnP/dtOiBPFQAjGyYCj/yV8Rj62plSo1zMV1ZKj0om4mSu/yuSa1fsxh
VmWSgugdZo2JdrfEJRXGA0XSLyv+f0GosAI2kLiWH3/5izv8/92BSxP+ewjOfm/K
2YuNkiOCZXeOhV31VQKb303dcoLYJmJQCwu2+gBvmFmCUyBRBqQMq90FqKYMJrqF
mNxN5+jTvhxpmKV3VAPfzhpcf74EzH8t/OgXd3lvZzWwYjoIiLXJf81R7REpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUywQtMJxAkAn9hHnr/47Vq/C97L0wHwYDVR0j
BBgwFoAUNuaOKiZOGL/Z9J5HLQ0mfuSeihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
N2QyMDMxYi0yNzYxLTRjMzYtYjY5MC01YjY5ZDE1NjliYWUvMC8zNkU2OEUyQTI2
NEUxOEJGRDlGNDlFNDcyRDBEMjY3RUU0OUU4QTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VFNDlF
OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2
OTAtNWI2OWQxNTY5YmFlLzAvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2
N0VFNDlFOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALlwCr0g6AM1qVj9Dw1ojHGVZHiae56rGoBt
Wj1hwPP1gjPPfd2AX9wChp/jbFtYw+wD7RZIk6H0hLpypEbszNTW+CgJrwV1InIC
rjArhrikzjddsYsHVWxjDZ7EokwRp1zYfoWJLv2S11LUI07XWRtADaW5fAufMfPs
hbJJl9M8h93t9s/L6Xq4vMZtl1C2OhpJKPlMpCMMYQ3543te7vWxjl3RwdamjsxD
Fg9WwNAZa1DJsztxp+qVsEt6h+hStv2BR77WdZn5TSFfYsKO/ymnBVaukglrNWsF
mrDcknnrvaC8QM+WBM8WR58F83sADqK3r7M+m6z0TttMWd91Yq4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:46 2025 by rpki-client