
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json)
Hash identifier: fpw1TYNwccqRWSrhv17iAg/5OJ+5bcowmfFMUurRYTY=
Subject key identifier: FB:4B:4A:F7:A2:39:C4:D5:8B:D6:5C:47:BF:B1:6C:48:C0:40:94:95
Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Certificate serial: 65A180C61C1F62CED9C2943A632BA96F7ED2B505
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
Manifest number: 0202
Signing time: Sat 03 May 2025 18:32:17 +0000
Manifest this update: Sat 03 May 2025 18:27:17 +0000
Manifest next update: Tue 06 May 2025 19:18:17 +0000
Files and hashes: 1: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: SaPH7HaK551XjypVWlpYkwuEXOIyZy8UE0AxLqjlzlI=)
2: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a1:80:c6:1c:1f:62:ce:d9:c2:94:3a:63:2b:a9:6f:7e:d2:b5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Validity
Not Before: May 3 18:27:17 2025 GMT
Not After : May 6 19:18:17 2025 GMT
Subject: CN=FB4B4AF7A239C4D58BD65C47BFB16C48C0409495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:51:f7:88:61:d9:f7:b9:a5:02:b5:bd:d8:
27:af:9d:11:4c:91:75:c8:dd:71:85:40:13:a6:80:
94:00:8e:77:04:78:3b:28:b3:50:60:de:a6:e6:8f:
37:8b:f2:9a:07:39:ef:f3:b0:73:0e:47:38:67:da:
b9:67:6c:0b:77:62:fb:1f:b6:ec:e9:93:c5:1c:fe:
b4:e9:f2:ef:56:f4:2d:bd:06:14:94:da:4d:73:46:
31:8c:89:fc:df:e0:f4:4b:86:48:e9:cc:3f:12:12:
93:61:ca:a6:60:cd:d0:c4:0d:b9:d9:98:cc:ce:8f:
ca:62:c2:91:c0:b4:b5:3d:d8:b6:8b:2b:f2:67:cc:
87:37:ea:14:15:a9:51:4c:34:ef:86:4c:11:04:14:
2a:fc:d5:bf:3c:d9:1a:28:1f:0f:16:46:28:a9:32:
1f:ae:91:da:1e:1a:96:7b:95:c4:6d:72:98:be:02:
1e:10:e2:7c:de:89:d8:fa:99:36:a3:65:c7:82:66:
ef:7c:8c:3d:e4:68:ef:e9:56:c9:3c:09:a4:b3:f5:
b1:93:5a:5f:f7:8a:52:b4:ea:1d:df:cf:db:87:8f:
f8:b6:ec:e9:90:fd:c5:60:50:66:a2:d5:db:a1:4f:
e6:41:03:43:8b:7a:5b:5b:d1:77:aa:72:f6:b8:38:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:4A:F7:A2:39:C4:D5:8B:D6:5C:47:BF:B1:6C:48:C0:40:94:95
X509v3 Authority Key Identifier:
keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e7:dd:7f:4e:29:5a:a2:7a:2f:c8:24:42:98:bd:78:7b:90:
23:b5:a6:80:39:fd:15:90:ec:09:16:41:7d:98:79:43:27:21:
03:fe:6d:b7:d2:8e:65:89:93:15:cb:85:e9:87:75:43:f4:bc:
6f:dd:a6:08:8e:b0:ba:d2:37:db:a0:c6:f1:de:2f:08:d2:f0:
17:83:b5:fb:06:70:36:16:7e:25:82:32:02:05:6e:a2:9c:59:
b1:54:cd:24:32:1c:57:13:bc:33:8e:63:19:e2:15:83:c9:b9:
9d:e0:48:e4:fc:24:77:5f:6d:62:94:bb:18:1e:b2:74:e5:0b:
67:41:b2:44:72:ad:30:c7:f5:6d:db:d1:7a:5c:f8:01:4e:2a:
3b:83:0e:78:4c:3c:1d:87:b5:ee:42:69:b0:dc:d2:d1:eb:25:
0d:b5:1d:79:3c:94:f0:a5:0b:84:66:12:ff:fc:07:35:8a:8a:
4e:87:4d:e0:d7:3d:b5:fe:a9:89:21:3f:17:d3:f6:73:c1:94:
2f:48:f0:83:e0:e5:9a:e7:a6:bf:3f:1b:e6:be:2c:3d:0a:90:
c7:23:af:0d:00:e8:e5:50:ac:29:d7:d8:9d:91:2b:a6:00:99:
a6:53:92:56:47:31:93:d6:79:9c:47:19:c6:b5:58:91:61:9e:
7b:fc:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:17:10 2025 by rpki-client