Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json)
Hash identifier: NzpZd/K6GrP398zk76nX0fresMCIskb4tBilRkIx/FI=
Subject key identifier: 25:74:C5:E9:33:8C:23:6A:32:1E:22:D0:E0:50:5C:74:A8:D9:AD:1B
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial: 41C82AB8CA497895FD4235002D9BEF54727A2935
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
Manifest number: 021A
Signing time: Thu 27 Mar 2025 23:11:11 +0000
Manifest this update: Thu 27 Mar 2025 23:06:11 +0000
Manifest next update: Mon 31 Mar 2025 00:12:11 +0000
Files and hashes: 1: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=)
2: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=)
3: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=)
4: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: WW2fuh+Ne628a8Yw2K/BQqYxnxJTSVnk3VFjGzR5Kd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c8:2a:b8:ca:49:78:95:fd:42:35:00:2d:9b:ef:54:72:7a:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
Validity
Not Before: Mar 27 23:06:11 2025 GMT
Not After : Mar 31 00:12:11 2025 GMT
Subject: CN=2574C5E9338C236A321E22D0E0505C74A8D9AD1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:e9:5a:35:a2:7f:56:0f:23:b5:a1:43:44:
9c:99:4c:af:08:d8:b1:86:04:48:9d:88:7f:e6:a2:
77:1b:66:b9:07:a3:4b:f3:ab:9f:20:8b:93:73:eb:
98:48:cd:15:ab:a6:78:25:fc:91:f3:bf:2d:03:80:
60:35:d7:a9:59:3a:17:63:54:6a:1e:9f:08:b1:cf:
85:4d:cf:e1:92:94:35:0b:28:9b:92:ee:7e:2c:79:
f0:d9:aa:bf:84:c3:39:14:6c:8e:ce:5e:6f:e1:19:
10:b0:ae:4c:0c:06:aa:05:ca:9f:5a:f9:1f:fa:e3:
87:ee:1f:55:4b:e4:55:31:fe:1e:27:26:1e:64:3a:
16:93:8f:f0:f5:5e:21:c4:d7:57:40:0d:36:7f:d6:
e6:43:36:d4:8e:fa:4b:6c:fe:54:2a:c1:0f:89:3f:
56:72:8b:d9:5d:15:e6:2e:fe:9a:cc:6a:68:96:99:
b1:73:73:ef:3b:07:46:c4:74:05:99:1f:e8:1f:e7:
0d:07:66:62:ec:6e:78:7e:1e:09:e0:a7:15:aa:4e:
73:e8:fc:55:c7:c6:4f:8c:72:7a:40:ca:0d:e4:63:
e7:a1:37:d6:3d:02:c9:9b:5f:db:41:fa:e4:3d:47:
f8:32:38:68:b5:c9:82:82:9f:d9:d2:ad:e5:0f:a4:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:C5:E9:33:8C:23:6A:32:1E:22:D0:E0:50:5C:74:A8:D9:AD:1B
X509v3 Authority Key Identifier:
keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:86:dd:02:86:8e:d2:3f:54:25:09:95:3a:f9:7a:15:12:f8:
61:69:f2:90:a8:4d:92:5a:77:77:a8:11:0e:41:95:57:92:50:
77:18:69:7d:45:74:ad:b2:e5:e7:cc:18:29:42:65:28:8a:42:
a0:c5:1e:0f:89:82:1d:aa:3c:24:11:c3:e3:1c:b2:6a:98:f4:
8a:20:93:e2:4e:b3:d8:7e:5d:e2:2e:3d:6f:b5:1a:86:72:4f:
5c:d8:f7:cf:c0:44:ed:f3:6f:9c:b3:cc:90:10:6a:38:43:e4:
03:9b:87:8e:66:2f:b6:90:0f:3b:10:59:71:e2:5a:8e:18:a4:
f9:56:05:93:7c:a3:4b:50:e6:05:e6:d3:cb:2a:08:93:ef:da:
4a:65:15:cb:16:1f:23:c2:22:eb:d6:2e:ed:84:1f:9e:53:7e:
2f:3c:80:ff:e8:13:64:ca:48:4e:dd:93:8f:47:2c:b0:c9:5c:
e4:a8:a9:51:bc:bc:94:87:0c:8f:39:62:f7:a7:5a:e5:d1:1b:
37:46:59:4e:96:07:a2:5f:eb:7a:f5:e3:23:21:aa:75:1e:04:
71:35:ef:cb:16:9a:1e:fb:41:90:cc:12:73:ba:85:9a:14:b9:
43:87:ae:01:8e:a8:de:34:f6:3d:6c:42:79:24:71:e2:06:c4:
99:bf:c0:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQcgquMpJeJX9QjUALZvvVHJ6KTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0
NDcyMjI3RTAeFw0yNTAzMjcyMzA2MTFaFw0yNTAzMzEwMDEyMTFaMDMxMTAvBgNV
BAMTKDI1NzRDNUU5MzM4QzIzNkEzMjFFMjJEMEUwNTA1Qzc0QThEOUFEMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgelaNaJ/Vg8jtaFDRJyZTK8I
2LGGBEidiH/moncbZrkHo0vzq58gi5Nz65hIzRWrpngl/JHzvy0DgGA116lZOhdj
VGoenwixz4VNz+GSlDULKJuS7n4sefDZqr+EwzkUbI7OXm/hGRCwrkwMBqoFyp9a
+R/644fuH1VL5FUx/h4nJh5kOhaTj/D1XiHE11dADTZ/1uZDNtSO+kts/lQqwQ+J
P1Zyi9ldFeYu/prMamiWmbFzc+87B0bEdAWZH+gf5w0HZmLsbnh+HgngpxWqTnPo
/FXHxk+McnpAyg3kY+ehN9Y9AsmbX9tB+uQ9R/gyOGi1yYKCn9nSreUPpImVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJXTF6TOMI2oyHiLQ4FBcdKjZrRswHwYDVR0j
BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3
QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy
MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz
ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4
Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGmG3QKGjtI/VCUJlTr5ehUS+GFp8pCoTZJa
d3eoEQ5BlVeSUHcYaX1FdK2y5efMGClCZSiKQqDFHg+Jgh2qPCQRw+McsmqY9Iog
k+JOs9h+XeIuPW+1GoZyT1zY98/ARO3zb5yzzJAQajhD5AObh45mL7aQDzsQWXHi
Wo4YpPlWBZN8o0tQ5gXm08sqCJPv2kplFcsWHyPCIuvWLu2EH55Tfi88gP/oE2TK
SE7dk49HLLDJXOSoqVG8vJSHDI85YvenWuXRGzdGWU6WB6Jf63r14yMhqnUeBHE1
78sWmh77QZDMEnO6hZoUuUOHrgGOqN409j1sQnkkceIGxJm/wLk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:37 2025 by rpki-client