Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json)
Hash identifier: 67Q1ikwGAiZWIbhaxWEkjdLcOdIbuT29FP+XLHtt8/w=
Subject key identifier: 7A:8B:F9:47:46:9C:1B:28:B3:B2:91:70:54:B6:85:D7:FC:2A:0D:C9
Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86
Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
Certificate serial: 5C270F701381414BD686A3820C421E0BFC042C9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
Manifest number: 0179
Signing time: Mon 07 Apr 2025 06:31:25 +0000
Manifest this update: Mon 07 Apr 2025 06:26:25 +0000
Manifest next update: Thu 10 Apr 2025 16:57:25 +0000
Files and hashes: 1: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: lf9EyI3NiTbfQLAp6AQzoEFmkdb7i49l018D3Zmqej8=)
2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=)
3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 7mgUNnKF1k9aQc8kIoMQeXk2Q+5QMh9pXTXHjbvLNw4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl
rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 16:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:27:0f:70:13:81:41:4b:d6:86:a3:82:0c:42:1e:0b:fc:04:2c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
Validity
Not Before: Apr 7 06:26:25 2025 GMT
Not After : Apr 10 16:57:25 2025 GMT
Subject: CN=7A8BF947469C1B28B3B2917054B685D7FC2A0DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:e2:71:c7:a9:a7:f4:12:3b:d8:c4:c0:4a:
9c:7e:c7:42:ea:f4:c4:cd:c7:28:28:a4:1b:df:e5:
59:ad:ba:46:05:80:c2:1f:92:69:f7:71:4a:78:a7:
10:15:d1:55:96:ec:1a:f1:78:07:d6:0e:3c:b2:05:
68:dd:39:4e:73:67:ef:4f:e2:57:65:75:f9:63:87:
74:7d:e3:6c:0e:72:b3:0d:fc:a5:3c:d4:46:b5:1d:
d4:f6:79:b1:7b:a4:f5:be:10:8c:fe:66:82:a9:19:
94:c1:b7:3b:e4:4c:e3:95:7a:58:24:db:84:66:69:
51:88:c0:80:2f:63:5f:1e:58:3a:b2:5d:db:43:e2:
75:2d:8d:7a:67:39:92:5f:bb:e7:33:16:f2:69:2e:
76:06:08:dd:d5:ed:89:85:3e:03:e3:51:fb:87:44:
10:76:ca:05:4d:15:9a:74:1d:2e:a6:ea:e3:7e:a0:
d0:f1:23:01:2b:2b:0a:81:f4:ea:07:be:0f:5f:dc:
54:09:a3:cd:dd:d2:cd:a8:2e:1f:b8:41:8a:29:9f:
e6:a0:2f:b6:56:0d:f5:60:53:88:c4:94:4f:f6:7d:
64:15:41:55:e3:3e:31:aa:82:57:f7:09:0f:5b:bc:
2c:4f:96:3f:a7:7e:aa:a5:dc:f4:4d:d0:6e:c3:2e:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:F9:47:46:9C:1B:28:B3:B2:91:70:54:B6:85:D7:FC:2A:0D:C9
X509v3 Authority Key Identifier:
keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5b:bb:ca:d5:3d:4d:95:a4:36:e1:37:c2:80:49:68:03:b9:
9b:ee:86:c2:5d:63:e1:a6:76:92:59:43:9b:14:0d:eb:c1:28:
ca:3c:68:13:12:b0:9d:7c:a4:b0:ee:43:55:1b:84:4f:a1:40:
2f:c9:ca:14:bd:e0:b5:a2:ea:78:8d:dc:17:5b:6c:24:d8:4d:
53:50:9b:dc:d1:d8:ac:fe:f6:c5:bb:7f:3a:bd:26:8d:5f:64:
3f:0d:6b:28:6b:d4:bc:ea:bd:41:8a:61:30:ba:1d:51:d2:5a:
d0:df:ea:42:a1:11:9b:21:1f:d3:fb:84:03:99:43:1a:b1:aa:
a4:be:8c:53:85:f8:9a:73:3f:0d:20:07:44:af:a1:4f:4e:e0:
ce:9e:96:c9:b7:e9:9b:b9:b5:46:92:51:53:db:42:59:df:75:
7f:1c:cd:29:df:29:e0:e5:9b:61:5b:41:cd:a2:90:da:53:2c:
d6:68:0d:65:85:82:aa:af:a1:19:88:5a:21:90:0b:c8:25:53:
71:b4:28:4f:5d:eb:04:33:8e:1f:38:75:e9:a5:43:82:39:a7:
d9:73:f1:71:06:16:a0:d1:d1:36:7b:99:18:07:24:57:48:a9:
fd:56:0c:72:53:1e:f6:0c:26:a4:6c:a7:39:04:b6:05:37:e9:
12:ae:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:37:38 2025 by rpki-client