
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json)
Hash identifier: 1mNga26Q16zftJ2hgDXSWw2xIVtqacqGjv0P9LsCP/4=
Subject key identifier: 80:92:A9:97:CF:3C:B2:C8:DF:E1:D8:D2:53:C9:37:24:85:44:D8:D1
Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Certificate serial: 5A7B41BC69699D2F45E80CA44EA9415A828E576E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
Manifest number: 0266
Signing time: Fri 28 Mar 2025 08:01:29 +0000
Manifest this update: Fri 28 Mar 2025 07:56:29 +0000
Manifest next update: Mon 31 Mar 2025 19:50:29 +0000
Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=)
2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: Qu6s41jHMKLWkADdo7z1n0AtfRobQpf6n7s+WbFf2SE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7b:41:bc:69:69:9d:2f:45:e8:0c:a4:4e:a9:41:5a:82:8e:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Validity
Not Before: Mar 28 07:56:29 2025 GMT
Not After : Mar 31 19:50:29 2025 GMT
Subject: CN=8092A997CF3CB2C8DFE1D8D253C937248544D8D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:71:c5:96:b4:ee:d1:80:eb:80:e2:0b:f2:
fc:38:35:d1:bf:09:82:b4:27:85:25:7b:40:bb:52:
75:68:6e:d7:6d:ad:6a:c3:36:8b:60:da:56:30:c8:
f0:36:68:20:1a:11:7d:a8:4b:66:29:26:62:9c:f7:
59:39:1e:b4:bb:a5:13:0b:64:78:75:78:9b:28:5c:
b9:9f:26:aa:f7:56:0e:65:ef:d4:ee:c0:9d:81:f2:
a9:8a:f2:56:bf:e2:e0:f0:e7:34:5c:e4:bb:22:e8:
aa:91:5c:13:90:f1:54:5c:90:6b:ca:4a:e0:b0:1f:
2c:28:c5:92:cc:49:01:e2:3e:95:42:06:87:8d:71:
53:5c:48:90:d3:0d:c4:e8:54:89:91:3b:44:71:71:
47:fa:df:18:ce:f1:a2:fa:18:75:24:70:cf:cd:d4:
31:d3:dd:82:00:c8:bd:bd:b6:ad:8d:7b:46:9b:6b:
13:2f:eb:6f:e2:e2:0c:f1:0c:78:fd:61:ee:91:05:
11:68:eb:74:74:f9:18:eb:02:26:c0:05:4d:12:ac:
2a:c1:20:8d:eb:77:0d:e0:2b:fe:93:a8:bc:d1:76:
f6:e8:26:df:d0:5e:cb:43:36:ad:b2:87:c2:b0:c7:
ab:21:ff:08:bb:83:b3:45:64:88:a2:56:44:02:85:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:92:A9:97:CF:3C:B2:C8:DF:E1:D8:D2:53:C9:37:24:85:44:D8:D1
X509v3 Authority Key Identifier:
keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a5:5a:7e:35:87:dc:61:f5:60:27:4e:d8:a0:18:54:f6:e6:
94:bd:0b:ec:57:13:4a:94:ca:7e:35:9c:6c:dc:cb:49:08:ff:
ce:ed:83:02:ee:8c:89:23:c1:83:24:f3:98:e1:0a:74:25:94:
e7:d8:d4:d4:7d:ae:92:a3:be:64:54:78:77:05:9b:79:54:1a:
e1:2e:2d:2f:19:c7:6c:04:9b:f2:c4:70:1e:94:7b:a6:ee:39:
27:11:68:ff:5a:26:e3:84:a2:40:39:c5:4d:6f:c1:da:13:b2:
73:5f:aa:e8:fd:50:19:2c:04:a8:1b:79:93:4b:f4:5c:f3:b1:
a4:ad:08:ce:b6:9d:eb:bd:b6:91:95:50:15:10:21:17:84:65:
d2:8f:9e:52:f7:c8:d7:9d:e9:05:45:23:1f:3d:8a:b7:c1:a1:
7b:35:61:d4:4a:3c:2f:86:20:13:60:4d:41:82:13:ec:47:ec:
2c:d5:fc:83:49:62:3d:f0:cc:44:a0:22:ae:ff:62:5e:3e:82:
ef:6b:32:ec:b7:57:1c:e9:a9:40:4f:31:f9:51:20:e0:04:5b:
bd:08:b4:2b:83:62:1e:96:9b:54:0d:15:9a:a0:06:0f:39:07:
6d:12:16:ef:5b:5a:10:12:c7:5f:f1:d0:7d:c9:08:5a:1a:d9:
4a:c5:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:56 2025 by rpki-client