Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json)
Hash identifier: Yac+K2sqkxFlR/IaAaWzE9b0kR0W1puSSvseK1K/2WQ=
Subject key identifier: 5B:6B:A2:41:17:04:F1:C8:48:9F:62:5A:B5:24:80:28:32:B0:8C:34
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 1ACD54DD61C17A8FEE2A3A72FA71C477DC319D98
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
Manifest number: 04A7
Signing time: Fri 31 Jan 2025 17:30:31 +0000
Manifest this update: Fri 31 Jan 2025 17:25:31 +0000
Manifest next update: Mon 03 Feb 2025 17:44:31 +0000
Files and hashes: 1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: zsesejcFFyP62LeF02Um0DzzHwP7S2tFrMVRRgxJ++Q=)
2: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: vjfb289raMrIN3ob0KR2m3UsociFAEAJ1Pq2Uw+5tDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cd:54:dd:61:c1:7a:8f:ee:2a:3a:72:fa:71:c4:77:dc:31:9d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Jan 31 17:25:31 2025 GMT
Not After : Feb 3 17:44:31 2025 GMT
Subject: CN=5B6BA2411704F1C8489F625AB524802832B08C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:47:17:05:b3:fd:28:ce:cc:8e:c3:83:ad:
63:3f:03:99:29:0a:c7:33:dc:ba:08:12:c6:e3:b9:
c2:52:3b:f7:d1:f4:83:dc:ac:b7:94:fb:ac:74:b0:
46:16:46:5e:d8:ac:bc:e0:36:b3:f2:83:af:a6:97:
a2:bc:b8:88:d1:13:8e:71:5e:75:49:1c:23:d2:3d:
73:97:83:ba:ba:d7:a2:3c:61:84:b4:a6:d2:70:25:
d6:d9:ad:71:ba:53:1b:2f:06:a4:17:40:36:b6:93:
69:d9:be:8d:b5:57:75:2a:66:3f:fe:be:42:7b:44:
ed:8b:0b:72:75:3c:23:04:e3:b7:de:84:a7:2d:b4:
45:d2:26:a7:0d:6a:8c:60:21:d6:83:ad:7a:b4:02:
d5:af:d3:88:87:f3:fe:b6:ba:b8:22:e9:5c:ff:01:
44:0b:b7:44:d7:85:33:d0:7c:db:a2:b0:80:e8:eb:
34:bf:61:f8:b0:cb:d0:c7:10:29:44:5d:ec:12:c7:
d8:55:11:f3:15:e9:7a:db:60:2a:7e:02:32:56:4c:
35:3f:5c:67:eb:4b:31:29:ed:f2:c2:7f:3d:27:25:
da:d5:0b:1e:76:ef:73:0a:15:ff:21:c0:10:da:55:
bc:e0:b6:09:f5:11:5e:84:65:e0:12:91:49:8d:10:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:A2:41:17:04:F1:C8:48:9F:62:5A:B5:24:80:28:32:B0:8C:34
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e5:cb:60:f2:f7:12:89:fb:9d:d8:5f:1b:7a:cd:fb:29:e1:
f4:05:65:f7:31:ca:a3:d1:6c:ac:e9:6b:ea:98:d6:f4:c6:0b:
df:4c:41:8c:34:3c:3b:2d:14:d1:88:a4:f1:99:1b:dd:12:a3:
52:41:36:5a:f2:49:c3:fd:55:46:99:af:c3:7f:00:14:71:7d:
1b:06:99:f1:04:0b:5d:dd:1e:b6:d3:21:97:8c:33:85:21:e4:
c6:7a:7d:7e:dd:af:c8:ed:41:ea:62:a0:b6:aa:c4:3c:26:83:
90:18:3f:e4:fd:b9:32:29:f0:1e:14:70:95:f1:e0:b7:49:fd:
5e:a2:dd:69:b7:61:90:dc:04:da:70:4e:4c:69:b5:f6:12:df:
4c:88:da:72:91:47:fb:6c:f7:bd:0b:19:d3:1d:a0:bd:d4:22:
8f:d7:b8:34:3e:6e:a3:4b:1d:57:b9:b4:2d:4d:8e:35:68:b3:
5d:04:1c:af:38:e4:ba:7c:bb:bc:b5:66:72:d4:8d:49:e2:c6:
de:b9:55:5e:95:4f:df:43:1a:be:a3:38:88:96:cf:66:53:90:
66:67:c1:3f:9e:53:3d:b2:36:50:19:ed:e6:1b:20:83:04:ae:
45:b4:d2:52:b1:9e:f6:a4:18:e0:01:32:f8:66:3f:a3:49:d4:
6c:a7:38:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUGs1U3WHBeo/uKjpy+nHEd9wxnZgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MDEzMTE3MjUzMVoX
DTI1MDIwMzE3NDQzMVowMzExMC8GA1UEAxMoNUI2QkEyNDExNzA0RjFDODQ4OUY2
MjVBQjUyNDgwMjgzMkIwOEMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM4RRxcFs/0ozsyOw4OtYz8DmSkKxzPcuggSxuO5wlI799H0g9yst5T7rHSw
RhZGXtisvOA2s/KDr6aXory4iNETjnFedUkcI9I9c5eDurrXojxhhLSm0nAl1tmt
cbpTGy8GpBdANraTadm+jbVXdSpmP/6+QntE7YsLcnU8IwTjt96Epy20RdImpw1q
jGAh1oOterQC1a/TiIfz/ra6uCLpXP8BRAu3RNeFM9B826KwgOjrNL9h+LDL0McQ
KURd7BLH2FUR8xXpettgKn4CMlZMNT9cZ+tLMSnt8sJ/PScl2tULHnbvcwoV/yHA
ENpVvOC2CfURXoRl4BKRSY0QlPkCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBRba6JB
FwTxyEifYlq1JIAoMrCMNDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ
ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB
NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy
QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n
ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+XLYPL3
Eon7ndhfG3rN+ynh9AVl9zHKo9FsrOlr6pjW9MYL30xBjDQ8Oy0U0Yik8Zkb3RKj
UkE2WvJJw/1VRpmvw38AFHF9GwaZ8QQLXd0ettMhl4wzhSHkxnp9ft2vyO1B6mKg
tqrEPCaDkBg/5P25MinwHhRwlfHgt0n9XqLdabdhkNwE2nBOTGm19hLfTIjacpFH
+2z3vQsZ0x2gvdQij9e4ND5uo0sdV7m0LU2ONWizXQQcrzjkuny7vLVmctSNSeLG
3rlVXpVP30MavqM4iJbPZlOQZmfBP55TPbI2UBnt5hsggwSuRbTSUrGe9qQY4AEy
+GY/o0nUbKc4qQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:22 2025 by rpki-client