
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json)
Hash identifier: DAvcHE0GLXtOIU8jcO2suc1gUAVg5XCsm5F9schhlFI=
Subject key identifier: 3D:C4:0F:2B:71:9B:C2:7A:65:FE:1F:6F:F5:3A:D4:6E:92:5A:CE:59
Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92
Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
Certificate serial: 2D4338DEA8B67DCA4678A7EA1CF5E30B5C2E5637
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
Manifest number: 0171
Signing time: Sat 03 May 2025 05:31:02 +0000
Manifest this update: Sat 03 May 2025 05:26:02 +0000
Manifest next update: Tue 06 May 2025 17:19:02 +0000
Files and hashes: 1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: O+un8Pm/pMdCWnyuHTjDZbgaVeNrBF+/C3hQG9txS3k=)
2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:43:38:de:a8:b6:7d:ca:46:78:a7:ea:1c:f5:e3:0b:5c:2e:56:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
Validity
Not Before: May 3 05:26:02 2025 GMT
Not After : May 6 17:19:02 2025 GMT
Subject: CN=3DC40F2B719BC27A65FE1F6FF53AD46E925ACE59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:2f:33:c4:10:32:c9:77:bf:f2:5b:72:60:
5e:9f:c0:fb:62:dc:00:44:56:f8:c9:3e:99:c0:14:
b6:61:ac:0d:74:34:25:02:07:d8:76:8f:d3:8f:e8:
72:8d:eb:c9:c1:20:1e:80:72:94:af:57:54:94:f4:
6e:97:90:04:46:f4:ae:cf:c8:c8:18:e9:40:d7:a1:
07:18:e3:4b:07:64:52:a0:65:1d:9f:c1:dd:58:10:
ac:f2:36:54:70:ed:d9:dd:48:56:04:2c:c7:65:40:
27:fb:1e:18:85:e5:b4:32:7a:b2:b4:33:71:97:78:
f1:99:29:27:22:59:f1:ca:2f:77:23:92:54:fb:fb:
b6:85:6c:a6:29:7e:b9:c8:d1:a5:94:8f:01:8c:19:
de:66:0b:55:22:7e:b8:d0:12:40:e7:b0:41:2e:85:
48:36:9d:97:95:bf:67:23:24:fb:5c:60:c1:63:e9:
b6:d6:69:88:2f:63:23:44:4e:bd:91:32:ef:8a:06:
91:0d:81:2f:23:db:22:a4:36:a6:e4:31:3a:18:b7:
c8:ef:0b:9c:10:a7:5e:9a:08:9f:30:c1:93:38:69:
b9:aa:01:98:cf:7b:d6:91:39:18:cd:c5:a1:ad:25:
0a:ea:d9:2b:4e:34:07:47:c1:a6:84:ed:64:a2:fb:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:0F:2B:71:9B:C2:7A:65:FE:1F:6F:F5:3A:D4:6E:92:5A:CE:59
X509v3 Authority Key Identifier:
keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:04:c6:eb:9c:65:d8:cc:58:6a:c6:c2:54:6d:f3:00:07:98:
96:da:62:c8:00:04:7d:ba:9c:2e:71:b0:a8:0c:7d:ab:29:98:
6c:2b:3a:6f:27:55:54:78:88:47:77:f9:ec:f9:41:ce:04:b6:
82:7c:2e:ae:9c:4a:86:62:cb:a2:b6:cc:e9:69:37:4d:fe:83:
06:3d:6e:38:05:07:5c:8b:84:6f:34:95:2b:c8:c3:68:92:23:
f3:27:e3:5c:20:cc:f2:f0:ae:7f:4b:12:70:f6:e9:18:de:48:
fe:7f:7d:95:f8:7e:63:2c:2f:7f:5b:f7:ee:0d:67:c7:6b:58:
b0:b4:58:ba:8e:c8:92:17:8a:a9:d1:7b:af:e5:a4:ee:6d:b8:
5c:59:23:35:10:57:8d:41:14:c7:d1:34:98:f3:7f:8e:0c:62:
97:37:e7:87:5e:7f:ff:5f:0c:56:94:20:23:9a:8b:a2:fc:d6:
5b:fa:62:96:07:24:bf:14:dc:04:14:8c:69:a3:9f:fb:2b:3e:
32:1f:5a:fb:66:65:b8:8a:ae:c0:41:91:6d:15:4a:c9:56:8d:
87:7a:69:25:23:85:2a:6c:6d:a7:51:f5:3a:1f:33:61:83:0d:
e2:3f:11:2d:a8:9a:b0:aa:9c:0c:b4:c2:11:fa:f7:f2:30:a0:
e9:67:01:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULUM43qi2fcpGeKfqHPXjC1wuVjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC
NEM3ODM5MjAeFw0yNTA1MDMwNTI2MDJaFw0yNTA1MDYxNzE5MDJaMDMxMTAvBgNV
BAMTKDNEQzQwRjJCNzE5QkMyN0E2NUZFMUY2RkY1M0FENDZFOTI1QUNFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgS8zxBAyyXe/8ltyYF6fwPti
3ABEVvjJPpnAFLZhrA10NCUCB9h2j9OP6HKN68nBIB6AcpSvV1SU9G6XkARG9K7P
yMgY6UDXoQcY40sHZFKgZR2fwd1YEKzyNlRw7dndSFYELMdlQCf7HhiF5bQyerK0
M3GXePGZKSciWfHKL3cjklT7+7aFbKYpfrnI0aWUjwGMGd5mC1UifrjQEkDnsEEu
hUg2nZeVv2cjJPtcYMFj6bbWaYgvYyNETr2RMu+KBpENgS8j2yKkNqbkMToYt8jv
C5wQp16aCJ8wwZM4abmqAZjPe9aRORjNxaGtJQrq2StONAdHwaaE7WSi+73pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPcQPK3Gbwnpl/h9v9TrUbpJazlkwHwYDVR0j
BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF
MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3
ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw
ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy
QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACcExuucZdjMWGrGwlRt8wAHmJbaYsgABH26
nC5xsKgMfaspmGwrOm8nVVR4iEd3+ez5Qc4EtoJ8Lq6cSoZiy6K2zOlpN03+gwY9
bjgFB1yLhG80lSvIw2iSI/Mn41wgzPLwrn9LEnD26RjeSP5/fZX4fmMsL39b9+4N
Z8drWLC0WLqOyJIXiqnRe6/lpO5tuFxZIzUQV41BFMfRNJjzf44MYpc354def/9f
DFaUICOai6L81lv6YpYHJL8U3AQUjGmjn/srPjIfWvtmZbiKrsBBkW0VSslWjYd6
aSUjhSpsbadR9TofM2GDDeI/ES2omrCqnAy0whH69/IwoOlnASc=
-----END CERTIFICATE-----
Generated at Wed May 7 18:16:21 2025 by rpki-client