Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json)
Hash identifier: wcgGUUKBFiW0yzDSqLYQzgi7TjRfWkYjJbhKBxTwEE8=
Subject key identifier: 14:42:D0:BB:21:42:64:B3:14:D5:71:4F:A5:85:2A:06:A1:E2:C9:28
Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21
Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521
Certificate serial: 087976129E482AA419D3E244C8C10344F7EDA5C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
Manifest number: D2
Signing time: Sat 29 Mar 2025 02:40:37 +0000
Manifest this update: Sat 29 Mar 2025 02:35:37 +0000
Manifest next update: Tue 01 Apr 2025 06:32:37 +0000
Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=)
2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=)
3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=)
4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: XuLn+y6ZfAKa4iNON+J1eTVh7pnoPLyBBTMEv4qOr+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:79:76:12:9e:48:2a:a4:19:d3:e2:44:c8:c1:03:44:f7:ed:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521
Validity
Not Before: Mar 29 02:35:37 2025 GMT
Not After : Apr 1 06:32:37 2025 GMT
Subject: CN=1442D0BB214264B314D5714FA5852A06A1E2C928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:44:47:f9:75:a5:a0:0e:be:68:3a:37:e9:
b7:3d:73:b7:16:f7:04:63:6c:6a:a6:b8:7d:bf:32:
bb:ce:8a:a8:43:27:b1:80:03:6a:1b:c1:6a:49:60:
4a:9a:ca:f4:cb:bc:b4:b2:51:e3:82:03:56:07:7e:
b2:c1:1e:b6:54:8f:d2:c0:72:79:7f:d4:91:44:fb:
93:f8:9d:da:5d:53:b6:57:74:bc:5e:bc:4e:79:9e:
1c:40:02:34:12:c5:07:56:4b:ed:2d:4c:e2:28:61:
db:e4:53:c0:47:31:5b:7a:8e:32:07:7d:62:d6:6f:
5c:c2:9a:c3:0c:e2:73:41:b3:91:e9:77:ac:db:e3:
fe:99:c2:a2:0a:8d:58:5c:5e:77:ad:ae:c8:47:cd:
e2:7d:8e:f2:a5:30:13:20:e9:40:54:f7:d4:4e:a9:
9b:29:9c:93:b5:5d:0b:0d:f0:5e:8c:ba:38:e0:b7:
35:cd:88:32:b0:d6:cd:6a:75:22:5b:8e:02:32:44:
d4:15:c5:0f:fe:73:d8:34:ee:68:d7:04:5f:33:a1:
29:22:81:50:27:0a:c2:0c:22:db:2d:b7:8a:1e:27:
97:c2:af:e3:3e:2e:7b:a4:e4:01:ca:fc:af:bb:c8:
34:c5:cd:86:56:34:a9:82:8d:ac:b9:45:10:07:be:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:42:D0:BB:21:42:64:B3:14:D5:71:4F:A5:85:2A:06:A1:E2:C9:28
X509v3 Authority Key Identifier:
keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:a9:ee:b7:e1:d9:db:b8:fd:04:c4:2d:ec:00:7e:4f:0d:
c1:92:53:51:f3:4c:58:42:a0:7d:a9:58:61:84:0a:27:13:e2:
34:ef:3e:77:b1:66:ec:be:af:ca:3b:0e:b8:d6:2c:90:cc:05:
ad:5c:fc:4d:b1:6d:16:bf:99:6a:2b:8a:81:97:27:f5:b1:2a:
30:b6:37:af:01:c1:2b:c7:f2:76:1d:0a:c1:17:12:d7:c8:a2:
1a:71:17:fb:dc:ca:59:9f:31:d3:61:48:30:be:e5:8d:22:a7:
e0:28:ff:fb:90:6f:9d:06:9f:65:aa:fa:94:6d:0f:87:b5:6b:
8e:11:51:7a:15:03:45:51:ca:cf:62:39:c7:ee:a2:ae:71:b0:
e4:82:c3:01:ff:dc:59:b2:5d:0a:a1:0e:e4:e2:5a:a7:63:9a:
c0:51:ba:00:38:b6:a1:81:9a:11:ea:ed:c0:ff:73:fb:94:51:
7b:c7:f9:71:8d:c2:e6:7e:5f:56:7b:58:82:2e:c4:7c:50:c3:
87:d3:43:2e:de:58:aa:38:87:7f:fb:c4:42:95:6e:a9:50:32:
b0:ee:af:82:d8:ce:12:7e:38:b3:48:54:2b:14:49:89:01:48:
5b:2a:b0:22:7b:0d:8e:2e:c0:39:68:c3:4d:8c:1e:c3:f6:76:
f5:ae:3a:6d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCHl2Ep5IKqQZ0+JEyMEDRPftpccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5
MjBERjUyMTAeFw0yNTAzMjkwMjM1MzdaFw0yNTA0MDEwNjMyMzdaMDMxMTAvBgNV
BAMTKDE0NDJEMEJCMjE0MjY0QjMxNEQ1NzE0RkE1ODUyQTA2QTFFMkM5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AkRH+XWloA6+aDo36bc9c7cW
9wRjbGqmuH2/MrvOiqhDJ7GAA2obwWpJYEqayvTLvLSyUeOCA1YHfrLBHrZUj9LA
cnl/1JFE+5P4ndpdU7ZXdLxevE55nhxAAjQSxQdWS+0tTOIoYdvkU8BHMVt6jjIH
fWLWb1zCmsMM4nNBs5Hpd6zb4/6ZwqIKjVhcXnetrshHzeJ9jvKlMBMg6UBU99RO
qZspnJO1XQsN8F6MujjgtzXNiDKw1s1qdSJbjgIyRNQVxQ/+c9g07mjXBF8zoSki
gVAnCsIMItstt4oeJ5fCr+M+Lnuk5AHK/K+7yDTFzYZWNKmCjay5RRAHvnsDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFELQuyFCZLMU1XFPpYUqBqHiySgwHwYDVR0j
BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3
M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE
RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3
YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw
MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKjCqe634dnbuP0ExC3sAH5PDcGSU1HzTFhC
oH2pWGGECicT4jTvPnexZuy+r8o7DrjWLJDMBa1c/E2xbRa/mWorioGXJ/WxKjC2
N68BwSvH8nYdCsEXEtfIohpxF/vcylmfMdNhSDC+5Y0ip+Ao//uQb50Gn2Wq+pRt
D4e1a44RUXoVA0VRys9iOcfuoq5xsOSCwwH/3FmyXQqhDuTiWqdjmsBRugA4tqGB
mhHq7cD/c/uUUXvH+XGNwuZ+X1Z7WIIuxHxQw4fTQy7eWKo4h3/7xEKVbqlQMrDu
r4LYzhJ+OLNIVCsUSYkBSFsqsCJ7DY4uwDlow02MHsP2dvWuOm0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:29:30 2025 by rpki-client