Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft
File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json)
Hash identifier: k0x4jmOmQEdsCincViNUgxyPIgsqZD2Z9PAgNWtFS3U=
Subject key identifier: 23:E0:40:A1:89:D9:8C:65:E5:FE:87:9A:49:C6:FD:CE:F4:60:B2:75
Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22
Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
Certificate serial: 38C6D6F9003A2F8B352B51D0B2AE2F4D74EB2B98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft
Manifest number: A2
Signing time: Thu 27 Mar 2025 16:01:56 +0000
Manifest this update: Thu 27 Mar 2025 15:56:56 +0000
Manifest next update: Sun 30 Mar 2025 17:56:56 +0000
Files and hashes: 1: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=)
2: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: L4R9hG60lsEc3etPMn6ymLERzXcBkvi2ujmsmBSabHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c6:d6:f9:00:3a:2f:8b:35:2b:51:d0:b2:ae:2f:4d:74:eb:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
Validity
Not Before: Mar 27 15:56:56 2025 GMT
Not After : Mar 30 17:56:56 2025 GMT
Subject: CN=23E040A189D98C65E5FE879A49C6FDCEF460B275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:c9:7d:b9:02:94:22:92:dc:e5:c3:89:28:
44:a2:dc:45:4c:bf:e9:fd:bc:89:26:62:ec:65:67:
a3:8e:26:9a:0b:74:d0:1a:c6:f5:1c:7a:a0:98:f3:
f0:0f:74:49:fe:ed:42:73:78:54:14:cd:cd:08:da:
39:fa:45:48:a8:06:9f:b2:4d:c3:22:af:1b:b2:d1:
a9:df:1d:9e:95:0e:d1:18:3b:cc:b7:49:7a:79:34:
a6:ed:ad:46:73:44:81:f4:01:2e:9b:cc:5f:99:45:
f3:f7:e6:55:da:80:91:39:43:78:70:f0:7e:36:1c:
04:79:14:a1:21:db:d0:4c:69:21:02:73:86:c0:1d:
ac:93:bd:5a:6e:19:f0:63:4a:0e:81:51:6a:70:27:
53:26:6f:25:f4:8b:0d:b2:2a:43:61:50:63:57:7f:
02:09:cf:1c:b5:2e:fc:06:1a:45:69:7f:94:c4:23:
5e:f5:2f:e0:8f:f5:03:5a:ee:64:25:32:7b:c5:46:
0f:74:18:3e:9a:14:33:59:a6:96:50:41:7c:32:05:
b2:9f:be:ad:d6:a8:c9:08:c3:11:a9:fb:c5:ff:3e:
4a:a8:2b:82:f6:e0:70:a1:0b:37:08:f4:d7:61:52:
af:d4:13:7c:f5:e1:df:77:63:57:9c:77:fd:de:be:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:40:A1:89:D9:8C:65:E5:FE:87:9A:49:C6:FD:CE:F4:60:B2:75
X509v3 Authority Key Identifier:
keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:39:45:19:7c:47:fe:09:3d:cb:a5:db:1d:5a:c3:bd:06:21:
a6:bd:8b:be:b6:06:3e:fc:dc:41:b3:c5:88:b3:fb:bd:10:99:
50:29:64:1f:a4:2a:f5:9d:a4:6a:90:af:20:c2:ac:27:9f:26:
1d:e7:19:d6:af:2c:df:37:92:a5:ae:5c:f7:6d:98:c6:b7:a4:
db:17:0b:de:12:23:81:4a:9c:67:7b:4f:a1:03:03:7e:0a:22:
42:1f:5d:c7:09:dd:19:76:09:c8:8e:6d:77:3c:2b:87:c8:95:
f1:b8:4a:b7:9f:2b:8f:44:26:72:ee:74:18:5a:df:6b:99:b9:
35:76:fe:11:2f:7d:61:4f:d3:8a:4c:b4:1c:1d:77:1d:c1:c4:
64:be:4e:be:24:7e:5e:79:2b:5f:43:2a:5b:00:fe:41:26:55:
97:3e:bb:c5:38:34:de:11:8b:dd:6d:37:6c:25:0f:95:df:08:
ed:2a:3b:d6:64:6e:63:bb:fc:d9:74:85:94:63:74:79:e3:27:
97:d0:ad:7b:0d:57:fd:ea:c2:f3:6d:26:47:b9:4f:70:27:7e:
c8:d0:c8:a9:c2:28:4f:90:c6:50:39:5d:8d:5c:37:d9:48:66:
ee:28:07:4f:cd:87:b5:18:4f:65:f4:d4:c1:b2:54:a1:14:23:
6a:c1:73:0e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOMbW+QA6L4s1K1HQsq4vTXTrK5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw
Q0EwMUUyMjAeFw0yNTAzMjcxNTU2NTZaFw0yNTAzMzAxNzU2NTZaMDMxMTAvBgNV
BAMTKDIzRTA0MEExODlEOThDNjVFNUZFODc5QTQ5QzZGRENFRjQ2MEIyNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOMl9uQKUIpLc5cOJKESi3EVM
v+n9vIkmYuxlZ6OOJpoLdNAaxvUceqCY8/APdEn+7UJzeFQUzc0I2jn6RUioBp+y
TcMirxuy0anfHZ6VDtEYO8y3SXp5NKbtrUZzRIH0AS6bzF+ZRfP35lXagJE5Q3hw
8H42HAR5FKEh29BMaSECc4bAHayTvVpuGfBjSg6BUWpwJ1MmbyX0iw2yKkNhUGNX
fwIJzxy1LvwGGkVpf5TEI171L+CP9QNa7mQlMnvFRg90GD6aFDNZppZQQXwyBbKf
vq3WqMkIwxGp+8X/PkqoK4L24HChCzcI9NdhUq/UE3z14d93Y1ecd/3evn8hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUI+BAoYnZjGXl/oeaScb9zvRgsnUwHwYDVR0j
BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx
MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew
MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll
MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw
OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB05RRl8R/4JPcul2x1aw70GIaa9i762Bj78
3EGzxYiz+70QmVApZB+kKvWdpGqQryDCrCefJh3nGdavLN83kqWuXPdtmMa3pNsX
C94SI4FKnGd7T6EDA34KIkIfXccJ3Rl2CciObXc8K4fIlfG4SrefK49EJnLudBha
32uZuTV2/hEvfWFP04pMtBwddx3BxGS+Tr4kfl55K19DKlsA/kEmVZc+u8U4NN4R
i91tN2wlD5XfCO0qO9ZkbmO7/Nl0hZRjdHnjJ5fQrXsNV/3qwvNtJke5T3AnfsjQ
yKnCKE+QxlA5XY1cN9lIZu4oB0/Nh7UYT2X01MGyVKEUI2rBcw4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:51:58 2025 by rpki-client