Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft
File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json)
Hash identifier: R6M3+jY9xzcczpPaiFG5459r39z/jtwinLEiZh7QI3s=
Subject key identifier: 6B:95:4F:AB:B0:B4:29:77:2C:B8:07:0A:EA:16:8B:18:78:B2:2D:F9
Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46
Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46
Certificate serial: 77E712F28DA0147DD10170078E7FA8A20CEFB0C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft
Manifest number: B3
Signing time: Fri 11 Apr 2025 22:50:02 +0000
Manifest this update: Fri 11 Apr 2025 22:45:02 +0000
Manifest next update: Tue 15 Apr 2025 02:29:02 +0000
Files and hashes: 1: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=)
2: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: Q+lbsFM+MvydCNGyhy/jt/NAMJi3/pgQdIm/IaS6a3c=)
3: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=)
4: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl
rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 12:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e7:12:f2:8d:a0:14:7d:d1:01:70:07:8e:7f:a8:a2:0c:ef:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46
Validity
Not Before: Apr 11 22:45:02 2025 GMT
Not After : Apr 15 02:29:02 2025 GMT
Subject: CN=6B954FABB0B429772CB8070AEA168B1878B22DF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:5f:76:94:53:e2:9a:ce:62:31:c0:17:6c:
79:79:79:bd:a9:38:41:99:11:b0:05:2c:d0:68:ee:
52:85:71:68:4c:c8:34:16:4c:24:dd:44:69:07:64:
26:82:8e:c3:d7:8d:61:75:5e:c2:6a:dc:e1:75:1c:
1a:92:15:33:48:2e:2e:84:e6:67:22:87:57:cb:60:
a7:ab:a9:8f:bb:9a:31:b7:c0:fd:50:fd:2e:d2:d6:
31:d5:b0:43:cf:51:0b:74:56:08:3d:d1:e8:22:b2:
96:33:86:b8:24:54:42:28:94:58:08:5c:5b:b2:22:
55:05:72:48:64:1b:31:47:a8:0c:59:66:90:b3:4d:
76:45:00:18:f2:fd:54:fd:49:83:c6:f8:f9:09:d4:
99:ac:5f:fb:5b:6d:82:67:a6:41:ae:8c:61:96:b2:
40:c0:32:56:7f:bd:f2:a6:c1:6a:9b:e0:4f:65:e0:
1f:a8:eb:fa:2c:6b:35:cb:d4:a2:5d:1b:f5:f2:06:
a8:74:93:32:5b:da:17:98:59:61:e0:ba:0c:b2:08:
96:21:28:2f:62:bf:64:5f:37:22:5d:7b:f9:69:f7:
35:da:d5:25:d9:66:74:24:ef:4c:98:e1:3b:01:44:
c9:b5:71:09:55:5b:3c:ec:3d:14:58:72:d3:31:ea:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:4F:AB:B0:B4:29:77:2C:B8:07:0A:EA:16:8B:18:78:B2:2D:F9
X509v3 Authority Key Identifier:
keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:00:80:25:e3:a0:12:ea:4b:3b:92:0d:0a:c8:e3:2a:1b:f2:
b4:14:9f:ff:0b:83:ed:d6:3a:ea:5e:8e:67:5f:20:cb:d5:e7:
b0:ab:05:5b:0e:9f:18:27:24:ab:2e:c1:c2:96:40:0e:0e:59:
27:4d:57:b3:f3:7b:69:a9:5e:c0:21:3f:5c:80:f1:41:f4:c0:
ad:8c:65:23:ec:f7:bc:0b:79:90:51:95:28:83:76:1f:4c:c4:
30:96:94:68:8c:b3:70:7d:2d:7c:93:32:c3:5f:ed:44:0c:a2:
d5:2a:0b:50:05:69:72:ab:e2:95:0e:74:83:ce:f7:de:91:13:
b7:34:3b:e7:6d:db:64:ba:dd:2f:f7:f4:6f:48:55:5f:3c:39:
2f:c9:95:1c:fb:66:84:8a:79:ba:2f:cc:eb:24:e5:50:6d:3a:
c9:64:d8:24:be:6e:f1:3c:94:51:43:bd:a6:30:e0:65:a3:3d:
c8:da:2c:9a:71:d0:01:57:a2:71:c6:94:4e:c5:67:d9:78:21:
81:4d:4d:ca:e5:69:ff:99:fd:2b:da:00:72:ff:15:de:60:6b:
5a:79:a4:5e:ab:89:79:1a:5e:23:d2:d2:65:96:a2:50:ef:ef:
d4:20:66:04:1e:ab:c4:b1:d0:32:aa:e2:cf:a8:88:ab:8c:16:
d6:d7:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:37 2025 by rpki-client