Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft
File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json)
Hash identifier: 0EHnOdKVKsgLnOuTWgWr4tEgb3vTO9f2T7lvu5LABMA=
Subject key identifier: F6:AF:C7:A4:3D:AF:4F:C2:F1:1D:7B:21:6F:86:26:76:BD:82:26:33
Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0
Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0
Certificate serial: 4FE7F7182D7B1EB2705E40395331265BB3E5743A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft
Manifest number: 01A2
Signing time: Sat 03 May 2025 07:20:49 +0000
Manifest this update: Sat 03 May 2025 07:15:49 +0000
Manifest next update: Tue 06 May 2025 15:17:49 +0000
Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=)
2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: wUre30zOsM6p1wH1fWQbozxRg5+QxiNMC6DKGsn+FD0=)
3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e7:f7:18:2d:7b:1e:b2:70:5e:40:39:53:31:26:5b:b3:e5:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0
Validity
Not Before: May 3 07:15:49 2025 GMT
Not After : May 6 15:17:49 2025 GMT
Subject: CN=F6AFC7A43DAF4FC2F11D7B216F862676BD822633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:d8:32:2d:c3:0e:9d:b7:82:de:a8:22:89:
17:49:02:da:4d:a6:ab:98:c8:60:9b:dd:73:16:e2:
29:2b:db:7c:a7:31:79:df:f2:9a:2e:b5:a6:d7:80:
d2:5c:bb:7b:84:e0:dd:f1:52:18:45:19:a3:1e:c9:
ce:56:73:2a:d4:dc:4c:a9:74:f2:6f:49:39:81:d4:
39:64:e0:71:f7:db:1f:8f:87:55:56:34:67:b2:90:
d5:ca:b6:61:86:96:75:f3:22:1f:90:a9:cc:21:f8:
1a:f0:f4:6c:54:e9:13:94:b6:f0:46:4e:6f:52:5f:
ee:61:1a:1d:ab:f3:d2:d1:7f:6c:59:00:99:91:9d:
ad:1a:81:0b:c4:4d:2d:bd:62:c0:f3:53:da:a8:ed:
27:1b:b3:1b:4c:9f:b1:37:47:70:d4:2a:cb:42:f0:
87:e0:1d:35:db:15:16:f2:9b:51:af:05:a2:a7:8a:
8d:61:95:f8:a7:1b:1c:98:e6:39:73:33:58:70:d4:
1d:93:71:a7:59:81:a5:40:1e:72:43:49:3a:39:76:
d7:5f:6f:44:9a:11:dd:08:19:bf:9e:7a:e4:a9:90:
be:ab:b6:ae:bc:f6:83:ac:7d:04:62:5d:ce:16:df:
61:7b:35:cf:30:d4:8e:6f:7c:b2:90:f3:36:7d:60:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:C7:A4:3D:AF:4F:C2:F1:1D:7B:21:6F:86:26:76:BD:82:26:33
X509v3 Authority Key Identifier:
keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d9:55:df:e7:27:fc:9b:4d:ec:ef:9a:20:03:b2:b4:52:ab:
31:f3:1c:1f:ab:64:32:27:98:66:e9:08:70:9e:d7:20:b5:03:
b2:de:cc:b9:d9:1f:72:18:66:f4:d0:32:f6:93:75:d4:67:35:
24:43:9b:f6:a4:fa:e0:e3:2b:4e:24:95:53:8b:66:53:88:a5:
d2:3d:68:24:1b:0a:e0:e7:b2:22:67:4a:55:bd:fc:cb:40:4a:
3e:10:9a:77:99:5d:d6:13:90:67:ae:ba:cb:f3:7e:c7:0c:87:
79:2f:ff:e0:c6:a9:b6:98:b2:8d:ac:7c:9f:9a:42:67:de:0c:
7f:fc:d4:e0:e5:d3:dc:82:d1:0a:67:41:e5:f0:fa:26:73:37:
9c:b0:9d:f2:35:23:60:6c:b4:44:f4:54:6f:2c:19:d2:cd:a7:
01:1b:09:68:f4:ed:f4:0c:69:2e:f9:9b:cc:85:63:8f:52:ef:
eb:a0:35:f8:f3:9d:e1:d3:3d:f7:86:e2:d2:b7:4c:f0:c3:83:
b1:01:4e:a7:63:cd:08:03:25:d9:8a:33:ba:d2:94:b7:35:9e:
f1:9d:ea:52:b3:5e:31:4c:55:40:b6:58:38:4e:a7:0e:a0:45:
d3:1c:cd:79:ae:fb:54:2a:42:80:86:4a:38:98:5f:97:d3:60:
80:aa:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:58:58 2025 by rpki-client