Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json)
Hash identifier: 6HYTHdO550RcznxG01aTeWq0D4O4BMR4OS9rA84jgj0=
Subject key identifier: 3F:C2:BB:A7:F5:FA:26:39:66:5D:31:62:04:97:C9:DA:DD:AF:41:64
Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Certificate serial: 7284E2F04297F53145B6751E79826F6605F6D8BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
Manifest number: 8B
Signing time: Sat 03 May 2025 04:41:02 +0000
Manifest this update: Sat 03 May 2025 04:36:02 +0000
Manifest next update: Tue 06 May 2025 10:15:02 +0000
Files and hashes: 1: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: rOHCPO6pjyu5OH2rP9q5P2K4HaCtAje3eXjH5IeNGtM=)
2: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:84:e2:f0:42:97:f5:31:45:b6:75:1e:79:82:6f:66:05:f6:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11
Validity
Not Before: May 3 04:36:02 2025 GMT
Not After : May 6 10:15:02 2025 GMT
Subject: CN=3FC2BBA7F5FA2639665D31620497C9DADDAF4164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:16:c1:69:be:23:46:09:09:d2:9d:c3:72:
af:c5:47:f5:bc:7b:ff:b5:ce:5f:2f:26:85:d9:1e:
01:7a:ce:68:32:6b:10:31:fb:17:b6:5e:24:b9:34:
16:57:78:b7:4e:df:59:23:e6:3b:fc:a8:e9:39:6e:
c9:1e:64:82:4d:af:fa:79:04:b3:ff:92:05:19:12:
8f:07:81:af:80:a7:56:d1:2a:ec:c0:98:49:41:2c:
56:a3:cf:d7:62:c4:e4:57:21:b7:7b:a0:8c:3c:bc:
1b:d3:0e:27:93:a1:d7:1a:75:af:20:38:25:d2:c7:
d9:52:b4:13:4d:81:31:15:b2:27:f1:ec:26:04:c9:
ab:04:5e:c9:d4:94:74:bc:c8:a3:c6:05:9e:06:3e:
6c:dc:15:91:1d:e9:bb:c3:3e:41:97:ab:17:92:25:
68:ce:6d:a3:f2:9b:8c:25:28:b0:5c:1c:83:93:d0:
ee:81:17:5f:42:e8:00:22:42:bc:4a:d8:9b:ee:48:
4d:4f:60:14:1e:09:0f:b2:a5:67:b4:73:0d:ba:f2:
c7:ed:bf:59:ad:ba:63:93:49:07:39:ae:2d:2e:23:
ac:9b:7f:71:1e:5d:23:e2:8a:3e:9f:07:50:4c:2f:
d4:8c:13:b6:07:2e:46:11:8c:93:60:f3:c6:33:ff:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:BB:A7:F5:FA:26:39:66:5D:31:62:04:97:C9:DA:DD:AF:41:64
X509v3 Authority Key Identifier:
keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:96:1e:de:c9:e1:df:20:25:67:60:2b:cb:df:f8:30:03:5d:
e9:af:5e:75:09:23:92:17:6e:7a:1c:e0:23:b6:2e:52:33:0f:
88:71:e7:7c:1a:ad:a9:84:f0:60:87:df:70:ce:f0:4a:b5:e3:
46:f9:0b:b7:13:69:fa:5b:aa:71:a7:52:3f:87:ee:23:dd:49:
ae:82:b8:1b:ec:3e:71:ef:0c:b7:27:9b:ef:7a:5b:6f:f6:36:
71:e6:31:14:1d:80:49:7e:53:00:31:c0:26:c1:9c:9c:23:12:
2a:99:e9:8b:a3:7f:be:b7:12:91:44:58:9a:a2:b7:5e:1b:c1:
31:6d:9f:3a:79:19:9d:5c:fc:02:4c:e7:9c:e1:0a:88:9c:db:
01:08:3e:8e:02:9c:47:6e:fc:36:1f:38:a1:ee:6c:7a:f8:82:
3f:89:81:4e:61:4e:68:90:ae:6f:d1:8d:4e:a8:bb:9d:b7:77:
00:1e:63:06:30:81:82:df:ff:37:f9:71:1f:8e:c2:42:fc:88:
f7:4d:cf:ff:b1:27:be:40:c6:bc:a7:f7:12:13:fa:89:1f:6c:
82:05:58:0b:08:b2:58:35:e2:07:98:dd:8a:93:b4:3b:ca:81:
64:20:64:96:fb:28:2b:e2:5a:c6:aa:24:63:31:df:f5:a6:5c:
82:2c:ae:07
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcoTi8EKX9TFFtnUeeYJvZgX22L0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG
MzcyMEYxMTAeFw0yNTA1MDMwNDM2MDJaFw0yNTA1MDYxMDE1MDJaMDMxMTAvBgNV
BAMTKDNGQzJCQkE3RjVGQTI2Mzk2NjVEMzE2MjA0OTdDOURBRERBRjQxNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaxbBab4jRgkJ0p3Dcq/FR/W8
e/+1zl8vJoXZHgF6zmgyaxAx+xe2XiS5NBZXeLdO31kj5jv8qOk5bskeZIJNr/p5
BLP/kgUZEo8Hga+Ap1bRKuzAmElBLFajz9dixORXIbd7oIw8vBvTDieTodcada8g
OCXSx9lStBNNgTEVsifx7CYEyasEXsnUlHS8yKPGBZ4GPmzcFZEd6bvDPkGXqxeS
JWjObaPym4wlKLBcHIOT0O6BF19C6AAiQrxK2JvuSE1PYBQeCQ+ypWe0cw268sft
v1mtumOTSQc5ri0uI6ybf3EeXSPiij6fB1BML9SME7YHLkYRjJNg88Yz/5XVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUP8K7p/X6JjlmXTFiBJfJ2t2vQWQwHwYDVR0j
BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF
RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy
MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5
ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE
ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK2WHt7J4d8gJWdgK8vf+DADXemvXnUJI5IX
bnoc4CO2LlIzD4hx53waramE8GCH33DO8Eq140b5C7cTafpbqnGnUj+H7iPdSa6C
uBvsPnHvDLcnm+96W2/2NnHmMRQdgEl+UwAxwCbBnJwjEiqZ6Yujf763EpFEWJqi
t14bwTFtnzp5GZ1c/AJM55zhCoic2wEIPo4CnEdu/DYfOKHubHr4gj+JgU5hTmiQ
rm/RjU6ou523dwAeYwYwgYLf/zf5cR+OwkL8iPdNz/+xJ75Axryn9xIT+okfbIIF
WAsIslg14geY3YqTtDvKgWQgZJb7KCviWsaqJGMx3/WmXIIsrgc=
-----END CERTIFICATE-----
Generated at Wed May 7 05:33:33 2025 by rpki-client