Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft
File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json)
Hash identifier: y/R/wD1Gtj/k8Q97+41UVcIFLvmpcW+Hjz41q0gvr9s=
Subject key identifier: AA:BD:2A:EB:31:71:48:81:56:32:5E:CE:61:ED:8B:85:DE:50:81:64
Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19
Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019
Certificate serial: 0EA77E5DD74C940402B967FC159CC73F6EC22B0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft
Manifest number: 04C1
Signing time: Sun 13 Apr 2025 16:22:07 +0000
Manifest this update: Sun 13 Apr 2025 16:17:07 +0000
Manifest next update: Thu 17 Apr 2025 00:06:07 +0000
Files and hashes: 1: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: VG/ACRZPp2r0hedLnYSdIksDAv+Mc1H+dIKcuSQ562M=)
2: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: qGoKKGIeIzmNuGb8LNZUyHLluiYdmaO2qTymHz3adHE=)
3: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: O3Y+5RJi4o9TrR1ZmK3//jjnrYZ80KLbj1eFOI6ijfM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl
rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a7:7e:5d:d7:4c:94:04:02:b9:67:fc:15:9c:c7:3f:6e:c2:2b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019
Validity
Not Before: Apr 13 16:17:07 2025 GMT
Not After : Apr 17 00:06:07 2025 GMT
Subject: CN=AABD2AEB3171488156325ECE61ED8B85DE508164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:2f:c8:c0:5f:2e:ef:82:70:66:80:96:a5:
e3:35:e1:93:80:70:ca:a4:19:4e:fb:c7:3d:7e:a5:
7e:92:7f:dd:81:d2:e8:a8:ff:a6:8c:30:f2:43:6b:
44:e1:49:05:63:8b:c4:8e:a6:0a:8c:2a:48:67:60:
b7:64:b1:e6:2f:8c:94:48:4a:ca:c2:36:38:64:b0:
ae:46:8d:0e:20:91:85:57:2f:6c:66:90:51:bf:23:
58:da:f5:61:6d:91:10:e6:19:6b:fe:31:7f:08:8c:
36:63:2d:84:38:91:9c:88:b0:7b:2b:0a:a5:28:a9:
5c:9c:fc:2c:8c:70:e8:f7:2c:af:72:da:b2:07:93:
9e:d5:a7:9c:84:1d:e9:de:30:44:10:e0:23:41:e7:
76:9c:7a:8f:5b:f4:ce:51:c7:3a:ef:bf:64:66:4a:
bc:96:43:27:7a:68:da:47:ac:f5:72:2a:6c:58:8b:
4c:5e:36:c6:00:ca:6a:35:09:fb:63:ef:7b:71:bb:
67:46:f2:26:fb:2c:f8:8d:d3:19:8d:da:48:15:3a:
76:d7:ba:0a:ab:96:f3:ea:fc:77:ba:d0:0b:3b:64:
7e:06:b4:c1:c7:8b:8d:bd:65:34:a7:85:63:27:b2:
b1:7c:82:bc:0c:3a:4a:00:e2:4c:86:b8:48:5c:64:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:2A:EB:31:71:48:81:56:32:5E:CE:61:ED:8B:85:DE:50:81:64
X509v3 Authority Key Identifier:
keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4e:94:db:9e:3d:ca:f6:15:74:be:0d:3e:06:2e:00:cb:72:
aa:9d:45:1b:da:ac:a2:0b:80:8a:f9:14:d4:a0:c0:69:f4:84:
2b:fb:c3:5e:bf:dc:65:6a:b7:36:3b:e7:ab:12:e5:a8:c4:8e:
1c:e0:d8:1f:68:0e:20:bd:f2:d4:f4:a7:4f:a1:1b:6b:72:3c:
9e:31:4a:72:3b:a9:6c:73:0e:fa:a6:3d:a8:db:52:fd:1f:3d:
df:e8:83:bd:ac:19:fd:5e:d5:15:42:01:43:40:5d:ef:1c:f8:
f0:af:91:d6:ac:90:ec:7c:22:fb:51:2f:78:a9:5f:55:bd:d7:
59:bb:8a:e9:59:2f:54:a4:e0:39:db:b1:da:b4:0e:37:ea:a0:
08:bb:cd:13:50:94:c5:6e:e0:1e:2a:88:af:b6:7f:03:8e:68:
f0:06:7e:76:9c:8e:3a:82:f9:f7:e9:30:6c:cf:b2:ca:44:40:
1e:87:fa:10:3d:ed:2e:50:c9:3d:d0:ee:e6:b1:0f:00:09:17:
37:bc:cc:dd:0b:17:71:dc:a0:72:90:64:cb:43:4d:60:28:5e:
2d:b8:f2:85:40:e3:31:50:e6:6f:ce:c7:ce:c6:13:39:0f:2d:
ea:4a:fa:44:94:3f:2d:74:84:9d:af:0f:75:b0:ea:a6:6e:da:
bc:ad:86:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:31:27 2025 by rpki-client