
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft (raw, json)
Hash identifier: Gn52STc2hCasa+TKb5TEm8C0xgVeHu65QlZO4P7G0ts=
Subject key identifier: E3:57:80:49:50:D5:EA:D5:A3:A0:25:DF:B9:A6:31:C5:56:30:D8:2C
Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
Certificate issuer: /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Certificate serial: 6B7BB5C0650BDC540452827846906FA1F891A77D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
Manifest number: 01FC
Signing time: Sun 04 May 2025 03:41:54 +0000
Manifest this update: Sun 04 May 2025 03:36:54 +0000
Manifest next update: Wed 07 May 2025 04:07:54 +0000
Files and hashes: 1: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl (hash: 59V5Tydzw5zcBN7xV7GczyfKHjjGft6JlHW7hI36W1U=)
2: 3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (hash: Ytn4J3L//ntkx3dIdir2Ut4ptmhaS3TkbsBspKupuTk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7b:b5:c0:65:0b:dc:54:04:52:82:78:46:90:6f:a1:f8:91:a7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Validity
Not Before: May 4 03:36:54 2025 GMT
Not After : May 7 04:07:54 2025 GMT
Subject: CN=E357804950D5EAD5A3A025DFB9A631C55630D82C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:70:c2:9a:42:5c:16:04:4f:ca:96:89:59:
1b:f3:d5:a5:e8:dc:47:84:33:27:ca:38:83:37:43:
54:db:45:ba:c0:de:4a:a3:f5:d2:73:75:51:b4:9e:
5f:1d:50:b9:f1:da:70:a6:10:4a:2d:c0:7c:97:d9:
4f:86:63:e7:3c:64:93:ce:ae:f8:af:2f:e1:6c:29:
a6:9e:d7:64:b7:35:13:2a:44:00:26:9a:45:1f:ca:
65:1a:b9:85:e8:04:30:12:ff:06:83:7d:29:d6:f3:
31:0d:33:50:1c:7c:6b:52:c5:7f:ea:b0:cc:54:83:
9f:53:ca:1f:7c:0e:7c:16:d1:d8:48:fd:ce:b9:f0:
53:85:c4:f2:45:c0:dd:49:09:18:62:b1:64:69:38:
ef:c6:ed:82:b2:1e:0a:11:60:d5:86:f5:49:05:cd:
74:22:f3:e9:3f:a0:2e:c7:0d:9c:c5:fd:fb:06:f4:
e7:ac:86:7f:41:38:2e:b3:71:1b:57:47:9f:bb:e3:
4f:75:f9:dc:16:a5:43:cc:98:c5:5b:43:c8:23:c0:
c3:5d:50:46:c9:a6:b0:a9:b3:bd:fb:1a:58:70:70:
a0:c1:ee:fd:dd:85:3f:7a:eb:f6:2b:1f:1f:14:0b:
55:87:70:f7:e2:30:a9:7a:f5:d9:5e:6d:3a:8f:4b:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:80:49:50:D5:EA:D5:A3:A0:25:DF:B9:A6:31:C5:56:30:D8:2C
X509v3 Authority Key Identifier:
keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:2a:a3:6e:cc:f9:e0:19:97:2b:35:95:04:c7:69:1b:65:
e0:01:24:36:60:f6:16:cb:8b:4a:ed:b1:7f:19:e1:60:54:a7:
2e:c1:a8:3d:eb:1d:58:b6:33:17:bf:3b:b7:da:0c:f8:87:fa:
0e:90:b3:e9:c1:38:7e:87:ec:a3:23:1f:17:f2:a0:b7:5c:ce:
c5:3f:ec:84:a5:fc:28:7b:3a:0e:7a:9b:ea:10:99:e5:fa:a4:
69:b1:d3:88:92:1d:64:aa:06:04:df:10:2f:37:e6:c3:06:0e:
99:32:d2:70:9c:98:e7:c5:62:ce:be:e9:8e:27:e0:74:ed:b6:
ee:dc:e8:15:0d:0d:d5:13:95:7f:8e:4a:2c:d1:4c:13:52:5b:
af:09:d3:5c:fd:d4:64:5d:f6:d4:63:fb:48:1a:17:05:95:4d:
b3:88:81:9a:04:64:03:cc:dc:c1:38:02:54:4e:b3:ba:3b:8c:
8c:89:3b:b9:ac:2b:78:e3:c6:cc:bc:40:a9:80:2a:9a:cc:c3:
50:6e:34:aa:94:bd:78:91:c4:55:fa:27:fa:96:a4:3c:c9:31:
4e:7f:39:4b:cf:a0:59:62:93:ae:d7:40:ad:3d:ad:f7:ed:33:
57:dc:1c:88:df:65:24:27:26:fc:67:70:2c:32:6a:0e:40:f6:
2f:79:c7:0b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa3u1wGUL3FQEUoJ4RpBvofiRp30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1
MTdDOEZEQjAeFw0yNTA1MDQwMzM2NTRaFw0yNTA1MDcwNDA3NTRaMDMxMTAvBgNV
BAMTKEUzNTc4MDQ5NTBENUVBRDVBM0EwMjVERkI5QTYzMUM1NTYzMEQ4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0HDCmkJcFgRPypaJWRvz1aXo
3EeEMyfKOIM3Q1TbRbrA3kqj9dJzdVG0nl8dULnx2nCmEEotwHyX2U+GY+c8ZJPO
rvivL+FsKaae12S3NRMqRAAmmkUfymUauYXoBDAS/waDfSnW8zENM1AcfGtSxX/q
sMxUg59Tyh98DnwW0dhI/c658FOFxPJFwN1JCRhisWRpOO/G7YKyHgoRYNWG9UkF
zXQi8+k/oC7HDZzF/fsG9Oeshn9BOC6zcRtXR5+74091+dwWpUPMmMVbQ8gjwMNd
UEbJprCps737GlhwcKDB7v3dhT966/YrHx8UC1WHcPfiMKl69dlebTqPS7TBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU41eASVDV6tWjoCXfuaYxxVYw2CwwHwYDVR0j
BBgwFoAU2dBzDbUSlf7FvUgM3UK16FF8j9swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMC9EOUQwNzMwREI1
MTI5NUZFQzVCRDQ4MENERDQyQjVFODUxN0M4RkRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1MTdD
OEZEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmI4YjMtZGVjOC00MWNmLWEx
NmQtZTExNzE1NjFkNzI1LzAvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1
RTg1MTdDOEZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFX8KqNuzPngGZcrNZUEx2kbZeABJDZg9hbL
i0rtsX8Z4WBUpy7BqD3rHVi2Mxe/O7faDPiH+g6Qs+nBOH6H7KMjHxfyoLdczsU/
7ISl/Ch7Og56m+oQmeX6pGmx04iSHWSqBgTfEC835sMGDpky0nCcmOfFYs6+6Y4n
4HTttu7c6BUNDdUTlX+OSizRTBNSW68J01z91GRd9tRj+0gaFwWVTbOIgZoEZAPM
3ME4AlROs7o7jIyJO7msK3jjxsy8QKmAKprMw1BuNKqUvXiRxFX6J/qWpDzJMU5/
OUvPoFlik67XQK09rfftM1fcHIjfZSQnJvxncCwyag5A9i95xws=
-----END CERTIFICATE-----
Generated at Wed May 7 17:18:45 2025 by rpki-client