Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json)
Hash identifier: EPcR1GuiSOzues1BiIbU1Vz4/3twNMhYUnDSwJh3TUQ=
Subject key identifier: B3:24:2C:B3:8A:B2:F3:39:74:46:94:66:7D:7F:03:11:6A:D9:B4:48
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial: 2247FF82E06382497E2771DFE0472D01805DD948
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
Manifest number: 01C9
Signing time: Mon 07 Apr 2025 09:12:11 +0000
Manifest this update: Mon 07 Apr 2025 09:07:11 +0000
Manifest next update: Thu 10 Apr 2025 12:14:11 +0000
Files and hashes: 1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=)
2: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: eSNUZbY24U4bU1UrQUwC/nbyFjZBtNROEx2pjqsSuCM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 12:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:47:ff:82:e0:63:82:49:7e:27:71:df:e0:47:2d:01:80:5d:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
Validity
Not Before: Apr 7 09:07:11 2025 GMT
Not After : Apr 10 12:14:11 2025 GMT
Subject: CN=B3242CB38AB2F339744694667D7F03116AD9B448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:25:e3:16:2e:bf:a8:d6:f6:a2:69:6b:7c:
b6:ce:5d:ee:f5:40:10:5d:64:5b:91:29:c2:7b:ad:
d4:e8:ba:89:ca:e2:48:b6:0f:2a:a6:ca:49:b5:ed:
54:d8:31:13:5e:08:fd:e7:d2:46:d9:ed:2a:63:fd:
71:a2:12:6c:03:81:d5:f7:02:55:d5:71:0d:3e:68:
f3:fe:94:5d:c8:1f:96:ab:f2:bc:10:65:75:45:b5:
2c:0e:f2:c1:c3:50:2d:f8:cc:de:7f:2a:49:7a:ea:
6f:b8:fe:29:04:1b:ae:f1:8c:cd:7c:c8:f1:a4:b9:
d9:81:d3:77:8d:14:df:e9:4f:b8:58:6c:e9:8d:20:
ca:c5:d7:ed:ff:ee:a7:9c:9c:82:de:25:8e:ba:50:
97:78:54:ef:12:1c:c5:1a:87:5c:dd:a0:9a:f7:e1:
75:52:59:13:66:7b:83:13:0a:25:be:f7:37:79:a4:
fa:f8:8d:37:f1:3a:88:56:ec:c6:e4:aa:12:0c:55:
d6:4b:9b:38:8b:8e:4a:63:00:38:a0:18:19:d6:31:
44:d3:14:c1:bb:ae:17:50:ae:b3:cd:cc:57:3d:0e:
a9:15:2e:3f:4f:b3:a5:bc:30:57:0d:3a:3c:2f:ea:
04:8e:fe:49:8a:1c:52:a0:f0:da:e7:68:1a:1a:76:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:2C:B3:8A:B2:F3:39:74:46:94:66:7D:7F:03:11:6A:D9:B4:48
X509v3 Authority Key Identifier:
keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:76:c1:e9:be:e9:c6:4a:9a:2f:62:21:76:db:58:13:28:4c:
96:5c:0e:74:70:df:af:a4:8c:46:d4:25:d8:d6:4d:8e:0c:0d:
0d:88:d0:75:c6:b1:de:93:a4:2b:be:9b:23:a7:23:27:e9:df:
31:67:bd:c8:f2:0e:00:f7:24:90:5f:4c:7f:d7:d5:5b:b8:c9:
86:a9:fd:33:e0:91:f9:86:f2:79:c8:de:7f:24:da:a9:c5:e6:
4f:be:c3:fb:6a:b4:e2:2c:c8:ac:46:3a:37:58:d7:a7:12:e1:
e0:8b:de:2e:6a:ae:7e:0e:d5:02:2f:94:52:ff:e2:c2:ba:2d:
92:dd:e8:ca:18:b4:cc:2c:db:fe:80:30:ea:4c:9d:6e:df:02:
84:3c:57:73:56:f5:7c:41:57:12:e0:e3:ca:c7:e8:40:e3:95:
2f:12:a6:a5:26:c3:7a:ee:9d:7c:88:99:81:79:ef:b5:23:52:
bc:29:97:3f:51:ba:af:66:e2:cc:d7:c8:32:3d:2f:c1:41:6f:
1f:1a:0c:da:1d:09:a5:2c:39:cf:11:46:05:f6:2b:04:4c:74:
f8:3f:c0:dc:79:48:c0:cf:5a:fe:cd:03:2a:46:d2:0f:40:93:
24:da:a6:43:e1:72:39:04:6e:97:67:f0:76:a1:47:20:e6:5c:
af:d6:7d:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIkf/guBjgkl+J3Hf4EctAYBd2UgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF
MzM5NTc4NjAeFw0yNTA0MDcwOTA3MTFaFw0yNTA0MTAxMjE0MTFaMDMxMTAvBgNV
BAMTKEIzMjQyQ0IzOEFCMkYzMzk3NDQ2OTQ2NjdEN0YwMzExNkFEOUI0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTyXjFi6/qNb2omlrfLbOXe71
QBBdZFuRKcJ7rdTouonK4ki2Dyqmykm17VTYMRNeCP3n0kbZ7Spj/XGiEmwDgdX3
AlXVcQ0+aPP+lF3IH5ar8rwQZXVFtSwO8sHDUC34zN5/Kkl66m+4/ikEG67xjM18
yPGkudmB03eNFN/pT7hYbOmNIMrF1+3/7qecnILeJY66UJd4VO8SHMUah1zdoJr3
4XVSWRNme4MTCiW+9zd5pPr4jTfxOohW7MbkqhIMVdZLmziLjkpjADigGBnWMUTT
FMG7rhdQrrPNzFc9DqkVLj9Ps6W8MFcNOjwv6gSO/kmKHFKg8NrnaBoadmvhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsyQss4qy8zl0RpRmfX8DEWrZtEgwHwYDVR0j
BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx
MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5
NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl
NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4
MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEh2wem+6cZKmi9iIXbbWBMoTJZcDnRw36+k
jEbUJdjWTY4MDQ2I0HXGsd6TpCu+myOnIyfp3zFnvcjyDgD3JJBfTH/X1Vu4yYap
/TPgkfmG8nnI3n8k2qnF5k++w/tqtOIsyKxGOjdY16cS4eCL3i5qrn4O1QIvlFL/
4sK6LZLd6MoYtMws2/6AMOpMnW7fAoQ8V3NW9XxBVxLg48rH6EDjlS8SpqUmw3ru
nXyImYF577UjUrwplz9Ruq9m4szXyDI9L8FBbx8aDNodCaUsOc8RRgX2KwRMdPg/
wNx5SMDPWv7NAypG0g9AkyTapkPhcjkEbpdn8HahRyDmXK/WfUQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:27:57 2025 by rpki-client