Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json)
Hash identifier: JMrVv7gDYllVW76mNkG89iZRuDTLW6GnU6/orCkgV6Y=
Subject key identifier: 4D:9E:6B:99:11:16:F5:68:96:37:1E:D4:A0:8E:2A:54:33:47:E3:87
Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48
Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048
Certificate serial: 436D2F7E3321B211D8FD0DE01170B2786D6DCC57
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
Manifest number: 64
Signing time: Sat 03 May 2025 18:21:29 +0000
Manifest this update: Sat 03 May 2025 18:16:29 +0000
Manifest next update: Wed 07 May 2025 04:51:29 +0000
Files and hashes: 1: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: qO+OvNhI94mCKfmK0e+iTLE/2bwh4qZhUqY83ceH/Q8=)
2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: 713xk7V5/TbDWlUXCIZDu0PtZguq6d4Z3/NB3BJnuQA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6d:2f:7e:33:21:b2:11:d8:fd:0d:e0:11:70:b2:78:6d:6d:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048
Validity
Not Before: May 3 18:16:29 2025 GMT
Not After : May 7 04:51:29 2025 GMT
Subject: CN=4D9E6B991116F56896371ED4A08E2A543347E387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:8d:37:a9:e7:67:96:a1:f2:dc:56:22:83:
76:1b:46:94:a9:08:c1:7b:43:55:90:bb:37:60:d7:
e8:87:e7:f3:47:9a:bd:d0:65:5a:f8:24:5e:6b:58:
d0:7b:33:80:66:17:33:c7:42:c0:52:c7:19:88:74:
1b:bd:75:0b:76:d1:42:64:cb:e3:0c:4f:67:38:ee:
5f:84:b2:a2:de:ee:80:fa:b9:e8:d5:d3:d8:0f:e0:
f6:55:81:96:4c:ae:70:e6:67:a6:1e:93:b5:d4:54:
66:31:89:cd:c8:01:c1:06:e5:24:f5:1d:4a:83:1c:
c5:df:86:0c:7d:4e:9a:17:07:7d:54:af:3b:bb:ae:
44:87:2c:14:0d:5f:80:55:f9:8c:74:04:ff:32:90:
9d:23:5b:cb:5b:46:d7:33:4a:ac:60:df:3f:5d:24:
31:b8:f2:64:72:4d:2b:2c:4a:8c:a9:bb:31:72:85:
62:94:7d:64:89:4b:d6:10:f0:75:2f:a9:4d:6b:7f:
77:36:af:f8:0c:0b:53:6d:bc:3c:66:5d:1a:14:cc:
b8:8c:ed:d8:d0:1d:20:b2:47:dc:4b:27:ee:38:bb:
f5:d5:eb:08:75:46:0c:46:a6:23:5a:75:d1:32:e9:
3e:a3:00:51:8f:3f:c1:10:96:90:9a:06:9c:f9:99:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9E:6B:99:11:16:F5:68:96:37:1E:D4:A0:8E:2A:54:33:47:E3:87
X509v3 Authority Key Identifier:
keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:54:ea:35:ca:7d:45:2d:9c:4c:70:a3:76:f9:a1:45:c9:14:
2c:f0:9a:17:0c:1c:9a:4f:13:97:6d:10:1e:be:f7:62:e5:db:
6b:99:99:a1:06:a7:89:44:9b:df:66:b6:3c:b4:08:47:8b:47:
cc:9c:8a:85:80:43:0d:a6:ae:e6:3f:7b:2f:fa:88:4e:11:ce:
a8:ca:bc:41:3d:35:c9:fc:f4:d7:a1:2a:d3:51:e8:3e:c1:9e:
2f:2d:65:51:7d:7b:53:6d:4d:f8:de:44:a4:19:fa:d5:cf:3b:
f4:3f:aa:2a:9b:39:e6:6f:58:6a:8f:88:df:33:b9:42:c8:32:
98:1c:2e:b1:53:56:38:ba:44:37:24:87:d3:6a:d5:6a:de:fa:
e4:6f:e9:6f:f0:50:9e:4d:1c:c6:03:6d:4b:b5:02:4c:aa:7c:
3d:40:72:92:e7:34:9c:3f:21:f8:0c:e6:66:90:a4:08:95:43:
2f:3f:1a:55:59:86:ad:88:0c:e0:f2:f6:3d:ca:46:74:45:b6:
ab:66:2d:77:ba:d4:f6:83:b8:6f:5d:bf:9a:25:6d:d1:38:13:
3e:12:cf:f4:49:3b:ab:b7:4c:6a:7c:f3:27:12:9d:72:92:6f:
23:01:80:ea:e3:a4:5e:68:13:b5:6c:cc:3e:11:30:e5:bf:96:
cf:41:e4:5a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQ20vfjMhshHY/Q3gEXCyeG1tzFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE
NzRDRTA0ODAeFw0yNTA1MDMxODE2MjlaFw0yNTA1MDcwNDUxMjlaMDMxMTAvBgNV
BAMTKDREOUU2Qjk5MTExNkY1Njg5NjM3MUVENEEwOEUyQTU0MzM0N0UzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJo03qednlqHy3FYig3YbRpSp
CMF7Q1WQuzdg1+iH5/NHmr3QZVr4JF5rWNB7M4BmFzPHQsBSxxmIdBu9dQt20UJk
y+MMT2c47l+EsqLe7oD6uejV09gP4PZVgZZMrnDmZ6Yek7XUVGYxic3IAcEG5ST1
HUqDHMXfhgx9TpoXB31Urzu7rkSHLBQNX4BV+Yx0BP8ykJ0jW8tbRtczSqxg3z9d
JDG48mRyTSssSoypuzFyhWKUfWSJS9YQ8HUvqU1rf3c2r/gMC1NtvDxmXRoUzLiM
7djQHSCyR9xLJ+44u/XV6wh1RgxGpiNaddEy6T6jAFGPP8EQlpCaBpz5mc5vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTZ5rmREW9WiWNx7UoI4qVDNH44cwHwYDVR0j
BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0
ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD
RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk
MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC
OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEJU6jXKfUUtnExwo3b5oUXJFCzwmhcMHJpP
E5dtEB6+92Ll22uZmaEGp4lEm99mtjy0CEeLR8ycioWAQw2mruY/ey/6iE4RzqjK
vEE9Ncn89NehKtNR6D7Bni8tZVF9e1NtTfjeRKQZ+tXPO/Q/qiqbOeZvWGqPiN8z
uULIMpgcLrFTVji6RDckh9Nq1Wre+uRv6W/wUJ5NHMYDbUu1AkyqfD1AcpLnNJw/
IfgM5maQpAiVQy8/GlVZhq2IDODy9j3KRnRFtqtmLXe61PaDuG9dv5olbdE4Ez4S
z/RJO6u3TGp88ycSnXKSbyMBgOrjpF5oE7VszD4RMOW/ls9B5Fo=
-----END CERTIFICATE-----
Generated at Wed May 7 13:44:18 2025 by rpki-client