Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json)
Hash identifier: H+Y4sJCW2IquzeQCmETWsiIAAbZGH9tvnF8pLjdpteo=
Subject key identifier: B8:79:7F:94:F0:9B:FB:96:5B:DF:14:F2:C2:D3:12:5F:95:CD:0B:FC
Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4
Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4
Certificate serial: 1803D8A859C17065712CD7AB3B961978C4ED413D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
Manifest number: 01E4
Signing time: Mon 07 Apr 2025 05:11:29 +0000
Manifest this update: Mon 07 Apr 2025 05:06:29 +0000
Manifest next update: Thu 10 Apr 2025 14:18:29 +0000
Files and hashes: 1: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=)
2: C70A343932991281F91796DB87B011987603BBF4.crl (hash: LBJBFGZcvHI4MA2GmjV+N5Zhg8lq4I3ZiSs1phUeCpY=)
3: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=)
4: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl
rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:03:d8:a8:59:c1:70:65:71:2c:d7:ab:3b:96:19:78:c4:ed:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C70A343932991281F91796DB87B011987603BBF4
Validity
Not Before: Apr 7 05:06:29 2025 GMT
Not After : Apr 10 14:18:29 2025 GMT
Subject: CN=B8797F94F09BFB965BDF14F2C2D3125F95CD0BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:a0:0d:33:68:84:26:46:1b:1d:86:b2:8b:
91:6a:20:bd:6e:59:30:63:22:4d:d1:ef:db:92:01:
72:6c:97:9c:22:45:ea:ee:35:b1:fd:fc:a7:86:e6:
d8:25:97:62:07:78:ec:4e:c4:68:e6:25:3d:6b:53:
ae:e6:27:75:e4:4b:b3:b9:bd:7d:34:3b:c0:1e:c9:
1c:24:b2:3a:34:91:8b:1f:97:73:68:e5:94:22:01:
2f:c4:1d:4b:30:e4:64:0d:b2:fd:fd:55:61:05:3c:
06:78:93:35:b5:22:d4:6a:1c:29:5e:bd:b3:b3:6e:
0c:6b:8d:9c:6c:e0:c6:40:d8:55:18:56:51:5c:67:
aa:fc:69:1e:7d:1c:32:98:9c:1a:b2:e6:8c:f8:14:
71:d4:69:d2:72:12:0a:61:61:56:5e:04:c1:c2:e0:
4e:f3:d5:70:12:54:6f:d2:ad:e8:eb:38:32:11:9f:
3f:15:89:99:a7:c6:0f:96:48:9d:0c:f4:33:80:be:
94:20:f6:86:7b:01:af:2b:21:92:5d:47:79:9f:39:
43:27:1c:84:20:1f:84:af:58:89:78:02:90:d0:65:
32:4d:f6:ce:53:b8:01:2b:e5:f9:d7:34:fd:f7:ae:
c5:23:85:5d:df:85:2d:3b:a1:2e:1b:04:99:d8:04:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:7F:94:F0:9B:FB:96:5B:DF:14:F2:C2:D3:12:5F:95:CD:0B:FC
X509v3 Authority Key Identifier:
keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d1:08:cd:6a:91:23:b4:b9:49:ff:fc:2d:b7:51:95:72:7f:
56:69:85:6c:bb:e0:42:5a:17:3a:cf:e6:1e:28:cc:78:50:59:
4f:a6:b2:df:6f:b9:b8:07:43:17:34:ba:32:bd:4a:e1:49:58:
a2:25:b9:fa:e6:96:ed:ee:48:6d:85:ba:ce:b4:f2:be:83:e7:
d3:a9:12:09:de:4a:64:b0:4d:1d:f6:86:28:8d:30:e0:91:f9:
c4:bb:af:23:06:cc:1c:dd:95:ab:9e:21:93:bd:31:a7:d1:69:
dd:f6:90:6f:3a:ef:be:fe:4b:57:80:ca:2a:64:66:d6:ff:31:
60:f9:7e:39:02:33:82:13:c7:ea:1d:f9:9d:d4:1c:9c:5f:95:
57:dd:6b:ec:63:f8:6c:2d:d2:98:bd:62:c1:71:24:91:83:a1:
b9:9d:b2:cc:cd:a8:db:38:6a:07:87:79:0a:50:bb:8a:d2:f9:
95:c2:17:3d:fe:26:76:6c:ba:a3:b5:0b:2b:a3:e4:fc:b1:95:
97:a9:39:1e:6c:b3:c2:61:9d:09:4c:4c:e7:01:8f:79:ef:d9:
7b:28:ce:5d:37:c0:95:b0:5f:8f:f9:1d:43:dc:48:85:73:32:
ea:b3:40:a1:c4:35:fd:3f:ad:98:e6:59:04:ec:22:51:71:fd:
ba:6d:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:08 2025 by rpki-client