Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json)
Hash identifier: AoCcLeg+vl9KpGyY5nM9CRr7ZGFKnmetUS9qRBv6zWw=
Subject key identifier: 59:E1:0B:E7:50:64:B1:93:D3:08:38:BE:D2:D8:A8:A7:3F:01:80:CF
Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46
Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946
Certificate serial: 6D120D31CF30BB7C57FA58ED1307DC499A01D607
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
Manifest number: 0489
Signing time: Mon 07 Apr 2025 07:40:38 +0000
Manifest this update: Mon 07 Apr 2025 07:35:38 +0000
Manifest next update: Thu 10 Apr 2025 13:57:38 +0000
Files and hashes: 1: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 09pTyAPGkDhkuez65QhC+JUUx/+DkLuWQ1gGTLu7lyc=)
2: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: fgSOFTmHBsm+tHxB6f309xDzUMsP9VUt4jQONOxHUT0=)
3: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: KvQlUIt+O8XkzXwyaibxzHplxyBpRPScmdyCJyB/bbo=)
4: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: eICFPX1ffRHHlODjPDwkCsraQZYn70z4zLEPXC3PC0M=)
5: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: swSQOZbID9BralwgaALL+QcHJjNF3WFYRSh2vANHz0A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl
rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 13:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:12:0d:31:cf:30:bb:7c:57:fa:58:ed:13:07:dc:49:9a:01:d6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946
Validity
Not Before: Apr 7 07:35:38 2025 GMT
Not After : Apr 10 13:57:38 2025 GMT
Subject: CN=59E10BE75064B193D30838BED2D8A8A73F0180CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:ca:6c:09:13:62:4f:2f:76:d0:1d:8a:72:
7c:7a:ef:cd:ea:70:c1:87:d1:dd:91:c1:65:04:e1:
80:8c:8c:43:90:5a:d4:cd:b3:2f:45:0d:b7:f5:ed:
66:14:4f:d8:ed:be:09:d0:42:ec:cd:fc:ba:b0:95:
0b:1c:a4:6e:c8:3b:05:84:83:c2:74:d9:d6:31:39:
1a:90:50:55:7b:be:4f:cb:6b:30:a6:aa:52:7f:f7:
fc:ae:97:2e:2b:bd:22:34:f0:59:c6:5f:8d:c4:67:
6f:45:6c:21:24:49:20:be:cf:50:00:7b:27:84:39:
d8:23:a3:97:a6:06:bc:42:65:44:26:f8:a5:64:b2:
2f:0e:98:fd:be:59:78:be:32:fd:4d:0b:62:d6:bf:
be:58:80:cd:4c:c3:0b:4f:fa:9e:07:cf:b7:8e:ad:
8b:23:5d:91:54:14:f9:aa:64:6f:63:93:52:b7:e9:
a1:70:c5:ca:ec:9a:e2:6e:58:c5:a8:93:25:4f:16:
ec:d3:c8:7e:ce:e8:c0:44:77:3b:74:21:34:67:84:
1c:c3:e6:84:cd:e4:22:a4:b2:91:26:e8:aa:e3:3b:
ef:67:8b:67:47:7a:fb:b4:1d:f4:74:50:e0:4f:00:
ba:0b:25:fe:19:3e:7f:0f:d7:ff:b5:93:28:ae:13:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:0B:E7:50:64:B1:93:D3:08:38:BE:D2:D8:A8:A7:3F:01:80:CF
X509v3 Authority Key Identifier:
keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c2:f1:59:16:f6:b1:4d:13:fb:a8:35:d5:63:64:85:71:13:
9e:e9:2f:e7:25:37:c9:45:71:12:c4:cc:55:24:8c:22:d0:2e:
f9:61:fb:32:89:5a:66:dc:79:3c:94:ee:68:59:00:0e:04:6b:
1d:d7:f9:df:69:2a:ab:35:df:f8:1a:7b:0f:f7:6c:15:f4:58:
4f:9d:52:18:42:e5:92:0b:4f:ae:0c:d2:16:9d:f8:e3:05:8d:
96:2f:29:cd:84:7b:a2:ca:4d:a3:25:80:31:9c:db:98:d9:53:
34:66:7d:8d:d3:4d:3c:80:b1:09:d0:ed:8c:f5:3f:35:55:17:
c2:ab:03:ac:62:1e:6b:d9:e6:ba:ac:f4:bd:4d:3d:66:09:08:
dd:4f:bf:a8:ce:8e:3b:1b:14:cb:d9:eb:ba:3f:9d:00:34:fb:
84:4a:39:b7:a8:31:29:0d:13:49:15:0b:b8:cb:41:a3:fc:40:
bb:c0:51:dc:65:5c:d0:f6:a8:02:2f:c6:02:58:69:51:53:55:
22:47:80:1b:cd:20:64:4d:05:7e:9a:1f:33:f0:c1:e1:20:35:
c3:af:f8:cf:e2:be:ec:3a:76:73:8a:81:cb:aa:4e:e1:db:36:
65:52:10:2c:94:26:1e:6d:87:62:e1:01:56:06:56:5e:0b:73:
d0:80:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:10:56 2025 by rpki-client