Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
File:                     D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json)
Hash identifier:          fQ3w9ltcffhINsqbazvesRT3f6IviA/1Oul9hPymyqg=
Subject key identifier:   26:72:09:AB:44:F2:90:95:80:C3:16:C0:1A:DA:08:0D:A7:A1:69:96
Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B
Certificate issuer:       /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
Certificate serial:       622B0043B22134F95B5978BA86AAF682DC289732
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
Manifest number:          AF
Signing time:             Wed 23 Apr 2025 18:12:14 +0000
Manifest this update:     Wed 23 Apr 2025 18:07:14 +0000
Manifest next update:     Sat 26 Apr 2025 23:04:14 +0000
Files and hashes:         1: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=)
                          2: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: 40bbVpOflbwORACv4FI2qZAG8S5+uKG5Uc9q4DddG8c=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl
                          rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 18:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:00:43:b2:21:34:f9:5b:59:78:ba:86:aa:f6:82:dc:28:97:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
        Validity
            Not Before: Apr 23 18:07:14 2025 GMT
            Not After : Apr 26 23:04:14 2025 GMT
        Subject: CN=267209AB44F2909580C316C01ADA080DA7A16996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:7a:41:5e:e2:71:66:96:9e:62:0f:c4:55:
                    b9:32:4d:de:92:1b:62:c3:30:ac:65:1c:51:52:7a:
                    86:47:5f:dd:02:74:4e:62:d6:d4:69:c9:29:5b:d8:
                    e7:43:20:e0:c7:f3:0f:97:84:19:5b:f0:a8:4e:dc:
                    d2:c9:c7:2d:53:f7:d4:c6:b4:72:4e:2c:34:e8:d1:
                    bd:82:58:52:d2:7f:ce:02:3b:d8:64:e2:ef:a4:36:
                    1d:f1:e5:b4:68:bf:5f:7d:45:45:0f:35:98:c3:11:
                    6c:41:02:a7:95:9b:f9:c5:ed:93:6e:2d:1c:c2:db:
                    3f:17:c2:c9:c6:40:48:39:7e:58:7a:aa:e6:38:07:
                    92:69:a5:83:ab:f4:56:cd:d6:df:75:bf:b3:54:3a:
                    fa:a9:b9:2e:bb:91:9e:37:91:66:94:47:e6:16:d1:
                    6d:e6:b0:08:06:d0:f4:80:9d:f7:b1:48:8d:c1:21:
                    1a:fb:45:0e:3c:9a:6f:1e:e5:20:28:4e:b4:07:1b:
                    d5:f8:01:5d:f5:0d:14:d1:06:df:04:db:47:8d:39:
                    f8:2d:08:a8:5a:0d:67:39:30:02:a7:bc:61:63:a7:
                    51:ce:94:e8:9e:eb:73:17:11:09:31:59:ea:c9:79:
                    38:8d:32:b0:2c:b7:40:31:e9:7b:f0:9c:0b:19:c0:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:09:AB:44:F2:90:95:80:C3:16:C0:1A:DA:08:0D:A7:A1:69:96
            X509v3 Authority Key Identifier:
                keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:04:55:74:65:e9:73:00:b9:8b:a6:a1:9f:49:96:25:5e:
         2e:15:70:b3:9b:61:bd:bd:79:40:2a:f3:fe:e1:d7:82:9c:89:
         8d:89:48:1d:fb:93:d2:0e:d8:d7:76:29:46:52:80:ff:4c:83:
         1d:4d:51:16:41:a6:be:67:91:3b:b7:24:65:5f:92:f1:f1:62:
         6f:39:96:a0:c1:44:e7:18:a0:92:ce:38:d9:d5:1a:17:57:d1:
         1c:6a:19:db:0e:3d:fc:34:43:b3:fc:bb:5f:89:2a:2a:3f:76:
         12:e4:5d:f1:d6:2f:20:23:37:56:00:cc:c5:8b:1c:40:c2:9e:
         85:b3:9d:2b:2f:bd:1a:7d:27:20:9a:09:92:c5:3b:97:ca:ac:
         a1:a8:2d:ea:1e:c6:69:5b:8b:76:a3:af:90:18:72:e5:06:d2:
         02:f1:7d:d8:df:d6:e7:5c:b0:bc:e7:4d:43:95:47:3b:78:5c:
         9f:58:46:05:eb:a7:b1:24:82:e7:20:12:f7:fd:5a:57:7b:5f:
         e2:3b:00:b5:1c:df:a5:d3:8f:00:08:73:eb:75:42:75:9b:2a:
         e0:80:10:89:4c:69:ca:f7:83:91:20:56:05:b7:ad:84:eb:9a:
         c8:4f:60:1f:ea:2f:07:ad:18:32:81:1b:80:0c:e3:d1:2c:05:
         03:2b:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net