Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft
File:                     25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json)
Hash identifier:          K5v4Zq+4j/ROhJY/2K1+cwWS4scAoENu1czSXMtEv4Q=
Subject key identifier:   22:2F:BD:17:A7:C0:8D:94:F2:85:C6:EA:DB:8D:32:0E:21:86:63:DC
Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15
Certificate issuer:       /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15
Certificate serial:       0587998399214C26A1D21259199B97845552180D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft
Manifest number:          04C6
Signing time:             Thu 24 Apr 2025 15:31:07 +0000
Manifest this update:     Thu 24 Apr 2025 15:26:07 +0000
Manifest next update:     Sun 27 Apr 2025 21:43:07 +0000
Files and hashes:         1: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: RZy6TYvU/OnVoAwKApvUrLMBSgr2tYCN+5iMb33gzqM=)
                          2: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: iuulXr2jlJ2kjU/lLH1YZPPEQESP6/65roSL+R/Tos8=)
                          3: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: CFj+K+liKZAqcSf36DIkxqcEF84Z38vPTkYjTuanCG4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl
                          rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:87:99:83:99:21:4c:26:a1:d2:12:59:19:9b:97:84:55:52:18:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15
        Validity
            Not Before: Apr 24 15:26:07 2025 GMT
            Not After : Apr 27 21:43:07 2025 GMT
        Subject: CN=222FBD17A7C08D94F285C6EADB8D320E218663DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:1e:d1:af:99:73:3d:55:d2:86:49:e7:8a:
                    15:67:21:d2:fe:e1:7a:08:30:4a:5b:48:97:20:f9:
                    49:a1:fe:a6:8a:ea:9f:16:d7:84:ba:77:6d:25:19:
                    a4:b0:cf:b4:13:a4:a2:bd:20:0c:99:57:6f:1a:7e:
                    33:e3:2e:16:eb:0c:9c:61:db:6e:d7:8d:36:69:31:
                    4c:9a:16:9c:7a:52:fd:5e:31:49:c9:a1:53:4b:88:
                    80:8e:2c:d1:9a:cc:bb:f1:3d:4c:57:40:8b:f0:7d:
                    03:6f:fa:bd:66:9a:70:bd:6b:a2:6a:3c:00:1e:e5:
                    ab:0f:38:1c:62:76:c3:07:66:07:05:6b:7a:73:67:
                    37:58:18:70:9c:ad:ba:cf:a4:ec:d7:ae:5c:77:4f:
                    cf:c8:db:f2:78:cf:93:5b:d7:97:9a:a5:78:9f:98:
                    9c:58:f8:e0:a6:b4:91:da:ba:20:59:43:24:68:5c:
                    f7:25:4c:46:0c:75:bf:59:c8:05:fd:db:ab:75:b5:
                    82:f5:0e:3c:81:c8:94:fe:eb:d5:2c:d8:f1:a3:41:
                    93:bd:21:8e:16:9f:6f:0a:7a:a1:d1:5e:5e:66:2d:
                    60:bf:07:86:d8:8b:0b:e6:5e:08:48:49:e0:19:27:
                    fd:37:1d:b4:56:9d:6b:64:9d:32:92:ed:08:3e:00:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2F:BD:17:A7:C0:8D:94:F2:85:C6:EA:DB:8D:32:0E:21:86:63:DC
            X509v3 Authority Key Identifier:
                keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:82:d3:7f:c3:04:c2:95:35:2c:0e:cf:89:7f:70:b4:7c:c4:
         d9:ce:f9:f6:7f:1d:49:a9:99:38:1f:81:62:87:e6:02:08:e3:
         23:c3:8b:73:24:64:27:80:b1:bc:6e:3e:a6:e1:4f:c6:4e:e2:
         69:1f:84:79:54:bc:d8:a2:5a:9a:62:3d:a0:15:9d:62:66:52:
         6f:69:63:39:40:bb:b1:24:ce:69:3f:fb:dd:2e:ab:89:61:10:
         18:8c:e4:6e:a8:b0:8a:ad:40:e3:46:4b:b0:8d:6c:00:71:5b:
         3f:a5:b6:9e:80:00:7e:30:4e:80:9d:a6:ef:35:58:4f:3d:ac:
         00:f2:bf:39:e8:fd:25:88:24:1d:1d:e5:b6:6a:a1:e5:86:55:
         43:42:e7:06:89:fb:55:01:e8:41:70:2c:5b:54:c8:fa:2c:ef:
         81:56:46:13:5b:3a:14:88:22:33:34:57:be:af:9f:dc:ea:e2:
         01:1c:82:22:58:38:6f:4a:9c:e6:a3:3a:c5:f4:cc:af:03:a4:
         56:8e:c9:07:25:3c:5a:45:83:99:e9:b3:ba:18:18:fc:b9:ea:
         f2:c8:9b:4c:3e:84:4c:b9:76:2d:53:a2:22:56:4f:d7:f6:e8:
         4a:da:c8:58:20:15:a0:8c:9e:72:66:6a:d3:a8:6c:48:0e:d2:
         7c:dc:01:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBYeZg5khTCah0hJZGZuXhFVSGA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1
QTI0NUUxNTAeFw0yNTA0MjQxNTI2MDdaFw0yNTA0MjcyMTQzMDdaMDMxMTAvBgNV
BAMTKDIyMkZCRDE3QTdDMDhEOTRGMjg1QzZFQURCOEQzMjBFMjE4NjYzREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxax7Rr5lzPVXShknnihVnIdL+
4XoIMEpbSJcg+Umh/qaK6p8W14S6d20lGaSwz7QTpKK9IAyZV28afjPjLhbrDJxh
227XjTZpMUyaFpx6Uv1eMUnJoVNLiICOLNGazLvxPUxXQIvwfQNv+r1mmnC9a6Jq
PAAe5asPOBxidsMHZgcFa3pzZzdYGHCcrbrPpOzXrlx3T8/I2/J4z5Nb15eapXif
mJxY+OCmtJHauiBZQyRoXPclTEYMdb9ZyAX926t1tYL1DjyByJT+69Us2PGjQZO9
IY4Wn28KeqHRXl5mLWC/B4bYiwvmXghISeAZJ/03HbRWnWtknTKS7Qg+ADGTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIi+9F6fAjZTyhcbq240yDiGGY9wwHwYDVR0j
BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy
QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0
NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx
M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC
QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAaC03/DBMKVNSwOz4l/cLR8xNnO+fZ/HUmp
mTgfgWKH5gII4yPDi3MkZCeAsbxuPqbhT8ZO4mkfhHlUvNiiWppiPaAVnWJmUm9p
YzlAu7Ekzmk/+90uq4lhEBiM5G6osIqtQONGS7CNbABxWz+ltp6AAH4wToCdpu81
WE89rADyvzno/SWIJB0d5bZqoeWGVUNC5waJ+1UB6EFwLFtUyPos74FWRhNbOhSI
IjM0V76vn9zq4gEcgiJYOG9KnOajOsX0zK8DpFaOyQclPFpFg5nps7oYGPy56vLI
m0w+hEy5di1ToiJWT9f26ErayFggFaCMnnJmatOobEgO0nzcAXQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net