Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft
File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json)
Hash identifier: 2hhdx7IwDWRPRJpPUCZlLAnYJKAul5agxu2wAQEVuT8=
Subject key identifier: 3A:C6:93:3E:D4:AF:C0:6E:36:36:11:FC:D1:3F:33:36:18:F3:E6:A8
Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45
Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45
Certificate serial: 6029D2B814434E936DF07A68DA984ABC7C6CE964
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft
Manifest number: 04BC
Signing time: Sat 29 Mar 2025 06:12:06 +0000
Manifest this update: Sat 29 Mar 2025 06:07:06 +0000
Manifest next update: Tue 01 Apr 2025 06:39:06 +0000
Files and hashes: 1: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: 45ncyPMJg5NtAUVZ5Jsnk35aIRm9978BuK9o74mR6TM=)
2: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: NBD5Q5osqeg+PvLbnv6NsQ1Rk/GmMCGkrbmDOR13aiQ=)
3: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: Jue4KLlm2sE1OjclexTO01tGfWNGtScPx0FukD1r1XE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:29:d2:b8:14:43:4e:93:6d:f0:7a:68:da:98:4a:bc:7c:6c:e9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45
Validity
Not Before: Mar 29 06:07:06 2025 GMT
Not After : Apr 1 06:39:06 2025 GMT
Subject: CN=3AC6933ED4AFC06E363611FCD13F333618F3E6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:fd:b4:9a:be:2c:d4:b7:2e:8c:67:cf:34:
d5:22:74:a0:f4:51:ec:a6:74:b0:de:03:58:73:d3:
a5:b9:40:bd:f8:57:fd:d1:b6:19:90:da:13:6a:c5:
9a:cb:ae:00:be:b7:7c:ec:98:a9:e7:0a:54:ae:ab:
88:ae:4f:32:b8:9f:03:57:2b:30:9b:b0:fc:4a:41:
9e:35:e5:75:ac:02:49:e4:dc:ab:4f:c6:d5:95:e1:
6b:34:4c:aa:bc:0a:45:23:09:32:a8:28:98:0c:55:
bc:26:b2:dd:e9:b8:ca:ba:55:da:3f:32:b9:a8:97:
64:b5:43:b0:07:d0:87:3b:56:e8:b0:7a:39:3b:b9:
86:31:25:e0:2a:05:4c:fe:b7:3f:aa:32:c4:26:cd:
e3:52:cb:68:b5:79:e6:b6:e3:9c:df:2a:7b:b6:7d:
11:d2:bc:71:f6:5e:0d:0f:7a:94:fc:f9:d0:75:5f:
e1:19:4f:b5:1c:3f:d8:0a:83:90:40:c3:97:e3:f2:
f3:a1:b3:c4:97:2c:1a:61:f1:c7:db:90:40:7a:d3:
fe:2b:dd:56:06:14:02:97:20:ea:7d:1f:0b:94:b2:
ea:32:46:53:ee:64:26:71:29:6e:38:0f:cb:28:8a:
51:ee:5b:b1:b0:cc:04:4f:90:be:96:8b:38:40:6b:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:93:3E:D4:AF:C0:6E:36:36:11:FC:D1:3F:33:36:18:F3:E6:A8
X509v3 Authority Key Identifier:
keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:ea:0e:9e:c4:5b:50:ff:11:6e:1d:c9:c2:8b:84:8b:f4:
ab:33:8d:93:64:82:7d:92:06:cc:21:8f:db:c7:4f:1c:5b:ca:
03:d6:62:f8:c7:46:cb:e9:f8:fc:a4:d8:f6:77:5e:9c:ab:80:
ed:0f:b6:eb:7c:9e:9a:00:12:3c:8a:10:a7:b7:6d:ca:97:e0:
0b:51:88:d6:1f:1e:8a:61:ec:e0:65:68:13:7a:34:9c:7c:72:
d3:c8:ef:f3:d3:f7:0d:63:bc:34:78:41:c6:c3:85:0c:54:8f:
23:fa:de:b7:0e:94:ff:da:cc:30:b1:b0:8a:6d:e0:e3:9a:39:
5c:6e:4a:f4:71:6b:d7:98:a0:f4:b6:9e:c3:b6:e5:3f:82:f4:
44:d5:53:d3:6e:69:45:b5:4b:11:72:64:f2:57:d8:56:51:69:
c8:a1:17:6c:68:8f:4a:e8:fd:c9:b5:95:96:b9:17:09:c4:58:
be:df:36:13:53:69:0b:6b:f7:f6:58:30:94:25:25:bf:5d:9b:
3c:a5:a8:d5:4e:2e:04:00:0a:c1:15:2d:d8:d7:1a:6e:e9:fd:
87:87:7a:22:cc:81:9c:0f:bd:27:a1:b2:b1:bf:c8:05:18:be:
8c:6b:be:13:79:c4:1f:dc:fb:b7:3b:e6:17:d3:b5:6f:20:b2:
f5:b5:3e:4f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYCnSuBRDTpNt8Hpo2phKvHxs6WQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC
Q0YwMUY0NTAeFw0yNTAzMjkwNjA3MDZaFw0yNTA0MDEwNjM5MDZaMDMxMTAvBgNV
BAMTKDNBQzY5MzNFRDRBRkMwNkUzNjM2MTFGQ0QxM0YzMzM2MThGM0U2QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUtv20mr4s1LcujGfPNNUidKD0
UeymdLDeA1hz06W5QL34V/3RthmQ2hNqxZrLrgC+t3zsmKnnClSuq4iuTzK4nwNX
KzCbsPxKQZ415XWsAknk3KtPxtWV4Ws0TKq8CkUjCTKoKJgMVbwmst3puMq6Vdo/
Mrmol2S1Q7AH0Ic7Vuiwejk7uYYxJeAqBUz+tz+qMsQmzeNSy2i1eea245zfKnu2
fRHSvHH2Xg0PepT8+dB1X+EZT7UcP9gKg5BAw5fj8vOhs8SXLBph8cfbkEB60/4r
3VYGFAKXIOp9HwuUsuoyRlPuZCZxKW44D8soilHuW7GwzARPkL6WizhAawuxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOsaTPtSvwG42NhH80T8zNhjz5qgwHwYDVR0j
BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB
QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw
MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4
YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0
ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFPw6g6exFtQ/xFuHcnCi4SL9KszjZNkgn2S
Bswhj9vHTxxbygPWYvjHRsvp+Pyk2PZ3XpyrgO0Ptut8npoAEjyKEKe3bcqX4AtR
iNYfHoph7OBlaBN6NJx8ctPI7/PT9w1jvDR4QcbDhQxUjyP63rcOlP/azDCxsIpt
4OOaOVxuSvRxa9eYoPS2nsO25T+C9ETVU9NuaUW1SxFyZPJX2FZRacihF2xoj0ro
/cm1lZa5FwnEWL7fNhNTaQtr9/ZYMJQlJb9dmzylqNVOLgQACsEVLdjXGm7p/YeH
eiLMgZwPvSehsrG/yAUYvoxrvhN5xB/c+7c75hfTtW8gsvW1Pk8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:56 2025 by rpki-client