Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json)
Hash identifier: d/pKLA2WY34+XtnXieVC7wImCq21IbyTaGa7emG5Q6E=
Subject key identifier: 29:DF:0E:82:54:10:0B:A3:8E:83:54:47:2C:D0:60:00:4D:A8:DB:6A
Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Certificate serial: 5BFA3203AD7F20480785BDFF5A7E57B141051BEC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
Manifest number: 04C1
Signing time: Sun 06 Apr 2025 21:51:19 +0000
Manifest this update: Sun 06 Apr 2025 21:46:19 +0000
Manifest next update: Thu 10 Apr 2025 04:34:19 +0000
Files and hashes: 1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: l1fPLAUFtTJNdU6bqE1PdelWpd2VBBi10WlrLYglW7I=)
2: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: iJV44cJUl+jVJaw8QmAp+0nnfmverkTk7WAhUHJ+cw8=)
3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: vTa9WiHuuMrTXw2GBDLjpniG/hjwO61GwgYQcgCJt2M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl
rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 04:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:fa:32:03:ad:7f:20:48:07:85:bd:ff:5a:7e:57:b1:41:05:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Validity
Not Before: Apr 6 21:46:19 2025 GMT
Not After : Apr 10 04:34:19 2025 GMT
Subject: CN=29DF0E8254100BA38E8354472CD060004DA8DB6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:63:f7:e8:7a:b1:53:50:84:a5:bf:08:ce:bd:
9e:d8:c4:eb:86:42:c5:c8:ac:a9:00:01:53:83:34:
13:d1:db:87:18:b6:9f:96:0f:da:f4:8e:7b:61:ed:
13:bb:f5:c9:96:75:bc:7e:0b:ba:65:c3:8f:cc:2d:
de:6c:88:9e:13:a2:5b:70:f6:6b:98:4a:df:e2:00:
b9:33:28:7a:37:ec:ab:8e:ef:57:e1:1b:7d:6a:e1:
bd:2f:8d:5f:e5:93:a5:60:0b:98:d6:53:17:fe:59:
6e:d6:fc:b4:a5:a3:b4:57:e5:c9:b7:51:1a:87:b7:
d4:f5:ab:87:5e:bc:b7:ae:ec:04:9a:49:b3:cb:79:
2c:db:38:4f:f3:52:59:fc:33:38:39:24:ab:93:1f:
10:04:fc:65:3d:0d:f4:82:93:82:fb:53:fb:8e:4b:
c8:25:0e:71:07:36:80:e6:a3:d9:7d:81:3e:49:a7:
89:e1:1d:8d:91:e0:80:fd:d5:a1:96:cc:e0:39:ba:
3d:52:9a:59:9a:6b:d7:ca:4c:c2:8c:08:25:bc:e5:
86:6c:fd:7b:b5:97:dc:61:2d:43:20:00:c0:dc:a8:
45:2c:c3:5b:85:4c:72:7e:f4:66:2e:85:96:60:f6:
e3:0e:4d:71:55:9b:0f:5c:99:cf:e0:92:02:7e:f7:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:0E:82:54:10:0B:A3:8E:83:54:47:2C:D0:60:00:4D:A8:DB:6A
X509v3 Authority Key Identifier:
keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4e:ce:c2:c4:0e:26:e5:93:19:bb:59:7a:92:2b:f5:34:dc:
41:8e:38:d4:49:78:95:ea:bf:9c:c8:05:d6:1a:c6:ed:18:5a:
3b:a5:31:63:03:3a:20:31:d1:b5:d8:a5:2a:c3:b7:42:1d:32:
0f:53:6f:f4:05:98:a4:70:7f:7b:94:a5:9d:e8:d1:46:e6:4e:
60:28:ea:10:31:b3:7d:cf:ad:90:54:a1:9c:76:b7:d6:ca:d1:
02:79:6b:9a:89:f2:f9:7f:fa:e1:87:f4:a5:09:a7:79:b5:20:
72:7d:56:b7:d0:43:2a:36:2e:81:f1:d1:75:c4:54:57:e7:72:
19:b4:67:fd:d6:91:27:ed:11:f6:55:20:03:8a:fc:6d:6d:ea:
44:68:58:50:48:32:5f:6e:76:4e:90:3e:e4:8f:81:d2:3e:16:
17:2a:06:b0:c8:b5:55:0a:3a:04:60:b6:18:74:fd:fb:f6:89:
f9:9a:2e:9c:f0:a3:3d:81:22:48:3a:1b:1d:01:0b:37:47:08:
a5:f6:af:44:e9:11:af:0e:ab:95:9d:e7:29:4f:b3:fd:93:0f:
6f:35:ba:45:73:04:08:6e:f1:51:80:dc:e6:77:02:87:a2:12:
8d:ed:df:97:30:31:13:56:4e:f0:20:48:54:86:e7:95:f6:cc:
61:3c:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:48 2025 by rpki-client