Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json)
Hash identifier: W+yu1knsUxARl3dKwWWrX8WT5SlO2XqvUSJFWEnvh+U=
Subject key identifier: 86:B0:27:2F:21:4E:E7:1F:93:A0:07:00:EB:4C:72:93:12:C1:F0:60
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial: 4591C60EE536BB8E52CA3346753890915F1E5540
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
Manifest number: 0316
Signing time: Thu 10 Apr 2025 01:21:01 +0000
Manifest this update: Thu 10 Apr 2025 01:16:01 +0000
Manifest next update: Sun 13 Apr 2025 10:14:01 +0000
Files and hashes: 1: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: hMEvC8JbpEDxWoQtYSNLeiQxPmXaOnQexX4+Ap+gXWQ=)
2: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: fhHYRVOyLx3EWvXLGXFYvmq/vgj8Oa201e8XUizUgAA=)
3: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: dr9xu7CIi6+ik1UpGLg3wt8yFQdd1RVO43AbherDW7g=)
4: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: BAj6wGXRStOevsKAAs4sF+Q+V6U6g9tECkAMCeQYV7c=)
5: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: IG6t7nYlULhsMgBABVk9BSJ2moXKjUg9u7BBivZ69qI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Apr 2025 10:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:91:c6:0e:e5:36:bb:8e:52:ca:33:46:75:38:90:91:5f:1e:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Validity
Not Before: Apr 10 01:16:01 2025 GMT
Not After : Apr 13 10:14:01 2025 GMT
Subject: CN=86B0272F214EE71F93A00700EB4C729312C1F060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:ef:3d:3f:0b:b1:41:b9:9c:4f:94:de:25:
4f:94:45:17:b5:0a:31:11:19:8f:40:3e:98:5d:b4:
f1:5b:39:8e:24:5f:a1:e0:7b:59:4e:a9:01:e9:78:
66:97:97:87:37:bc:4d:2c:16:bb:96:dc:cb:5e:13:
b0:99:9c:f0:0a:5d:99:33:f8:ea:e6:0c:ef:69:2d:
2b:68:83:05:3e:f7:ea:83:49:6c:22:16:f6:c3:1a:
f7:6e:69:10:81:71:1c:65:db:de:f7:55:b7:fa:70:
3a:c5:f1:fb:d9:ac:07:3d:cd:51:02:7d:a6:e2:cf:
fe:a5:29:11:fd:f1:f8:0d:d4:49:3c:f3:f1:3d:33:
0c:c3:08:43:71:ec:05:4c:e0:f0:88:8a:6a:78:95:
c0:4e:11:68:f3:aa:28:cf:2e:52:1e:2d:2c:06:4d:
f0:a2:f5:72:21:71:3e:ef:5b:42:b8:6c:46:c7:87:
70:a9:80:c3:c1:07:78:bc:52:3d:ac:b4:b3:3e:98:
40:07:6c:ee:43:f1:25:ad:12:a3:c2:32:8d:dd:42:
3e:ce:f1:a1:2c:c0:59:e6:8c:07:ba:72:71:ec:ba:
6f:41:f2:3d:76:bf:31:23:d8:85:6f:6c:90:66:84:
32:70:2e:14:d5:bf:a8:98:16:cd:c8:94:59:84:e7:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:27:2F:21:4E:E7:1F:93:A0:07:00:EB:4C:72:93:12:C1:F0:60
X509v3 Authority Key Identifier:
keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:01:49:c2:4f:d6:3f:38:82:87:d3:82:83:be:d6:f6:2f:56:
e4:d6:ba:32:4d:28:59:2f:e9:d7:08:22:f9:e0:fb:34:9a:82:
9b:84:5e:f6:31:24:ec:ea:4a:41:5a:cd:fa:24:75:a6:54:a3:
7f:d9:97:16:65:b2:64:2a:55:36:70:d4:65:c5:93:de:16:1b:
35:4e:bd:8d:5f:83:3e:58:8e:ea:e5:43:79:7d:c4:32:c4:6b:
53:f3:f7:ba:58:82:37:45:bf:a9:a8:09:aa:e9:4a:82:c6:95:
ef:48:a5:f3:ad:bc:d7:e3:07:02:07:60:41:64:37:5a:28:5a:
24:c3:24:51:e8:99:03:8d:a9:2f:43:31:36:2c:dd:46:8d:d2:
37:2b:da:75:54:dc:93:0d:ac:84:a9:6d:1b:da:d2:50:67:52:
b0:4a:5a:94:2e:cc:95:d4:d4:09:73:a8:7a:5d:9b:3f:98:d9:
52:e3:81:2b:94:25:f6:33:0a:ce:2f:79:0d:68:60:0b:30:b0:
43:0f:1c:ef:ae:c2:b9:bf:b4:a7:eb:14:11:b3:2e:4f:6f:70:
7d:e6:81:39:4d:af:a9:6d:c5:3a:06:c1:34:d6:49:74:28:fc:
77:52:69:11:ad:71:24:d8:54:22:9b:c1:36:33:11:41:c7:d1:
23:75:a5:7c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURZHGDuU2u45SyjNGdTiQkV8eVUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4
QTNCNkU3OTAeFw0yNTA0MTAwMTE2MDFaFw0yNTA0MTMxMDE0MDFaMDMxMTAvBgNV
BAMTKDg2QjAyNzJGMjE0RUU3MUY5M0EwMDcwMEVCNEM3MjkzMTJDMUYwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcte89PwuxQbmcT5TeJU+URRe1
CjERGY9APphdtPFbOY4kX6Hge1lOqQHpeGaXl4c3vE0sFruW3MteE7CZnPAKXZkz
+OrmDO9pLStogwU+9+qDSWwiFvbDGvduaRCBcRxl2973Vbf6cDrF8fvZrAc9zVEC
fabiz/6lKRH98fgN1Ek88/E9MwzDCENx7AVM4PCIimp4lcBOEWjzqijPLlIeLSwG
TfCi9XIhcT7vW0K4bEbHh3CpgMPBB3i8Uj2stLM+mEAHbO5D8SWtEqPCMo3dQj7O
8aEswFnmjAe6cnHsum9B8j12vzEj2IVvbJBmhDJwLhTVv6iYFs3IlFmE5xbFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhrAnLyFO5x+ToAcA60xykxLB8GAwHwYDVR0j
BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB
M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC
NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh
OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG
QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFQBScJP1j84gofTgoO+1vYvVuTWujJNKFkv
6dcIIvng+zSagpuEXvYxJOzqSkFazfokdaZUo3/ZlxZlsmQqVTZw1GXFk94WGzVO
vY1fgz5YjurlQ3l9xDLEa1Pz97pYgjdFv6moCarpSoLGle9IpfOtvNfjBwIHYEFk
N1ooWiTDJFHomQONqS9DMTYs3UaN0jcr2nVU3JMNrISpbRva0lBnUrBKWpQuzJXU
1AlzqHpdmz+Y2VLjgSuUJfYzCs4veQ1oYAswsEMPHO+uwrm/tKfrFBGzLk9vcH3m
gTlNr6ltxToGwTTWSXQo/HdSaRGtcSTYVCKbwTYzEUHH0SN1pXw=
-----END CERTIFICATE-----
Generated at Thu Apr 10 08:22:50 2025 by rpki-client