Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft
File:                     B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json)
Hash identifier:          wI6Q9h2LmpKuzk+sK84F38fHQWJo4UY3yYNVJqH+WhU=
Subject key identifier:   A4:A2:D6:F4:20:50:D6:82:56:19:74:41:68:D2:48:7D:E4:6C:2F:12
Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B
Certificate issuer:       /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B
Certificate serial:       466616499BB16B30606162A6D43FBDC9A8CFF714
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft
Manifest number:          01BB
Signing time:             Thu 24 Apr 2025 18:40:57 +0000
Manifest this update:     Thu 24 Apr 2025 18:35:57 +0000
Manifest next update:     Mon 28 Apr 2025 01:14:57 +0000
Files and hashes:         1: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: Qhz1RApXBe0gWEJjcaGGU332QJ8ddI3BbDQYhOlylDg=)
                          2: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: JBVzNlkrTsaf8/JJpwgMvNVTS3EssxmRTilKE7KCUi8=)
                          3: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: LWGboPtK+gSwHRL85RymH7WpCh3CMf7M7Q8ltJJ+Juc=)
                          4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: UNWcrqMVPII2nZgBgi4GoZC81KPxNlA5wkzFAvBkC14=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl
                          rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:66:16:49:9b:b1:6b:30:60:61:62:a6:d4:3f:bd:c9:a8:cf:f7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B
        Validity
            Not Before: Apr 24 18:35:57 2025 GMT
            Not After : Apr 28 01:14:57 2025 GMT
        Subject: CN=A4A2D6F42050D6825619744168D2487DE46C2F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:95:15:a4:00:73:63:53:a2:ba:3d:a4:0f:
                    ad:4f:4e:90:90:6c:53:fe:32:a4:d8:ea:c8:3f:5e:
                    5a:3a:23:71:43:c6:6c:65:ea:0c:83:a6:04:9a:52:
                    6b:03:5b:91:83:88:42:4c:ae:0f:f9:99:f9:3f:89:
                    7d:e2:16:96:6a:bc:1c:6e:79:cb:3d:3b:fd:db:6b:
                    1c:35:cf:b0:a7:9d:6f:98:7c:c9:46:e4:0f:25:21:
                    a8:73:43:56:29:73:c8:26:99:f0:00:ef:cf:42:b0:
                    2e:73:ce:d1:55:56:06:8e:57:d1:36:8a:65:82:14:
                    98:e8:e7:be:b4:bf:e6:f0:8a:d7:46:dd:3a:f7:99:
                    a5:7a:60:32:e7:c7:fa:cf:98:e7:00:c9:4a:b7:66:
                    19:55:68:21:4f:e8:43:a5:58:ad:38:86:8e:73:0c:
                    b9:ba:2d:e3:3c:84:c0:1c:57:88:98:95:98:7d:ed:
                    9c:f2:0f:71:6a:2c:d0:a3:6e:6e:f3:5d:20:9a:03:
                    a8:26:33:fe:2d:21:5d:66:5f:a9:37:d3:dc:e2:1c:
                    cc:b5:68:31:a5:2a:74:c3:aa:56:8b:a6:f2:cb:99:
                    a9:1e:68:3f:b0:28:d8:4e:0c:92:b4:8a:69:fa:aa:
                    f6:17:bc:e1:94:97:df:96:b4:53:cf:d3:da:8c:df:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A2:D6:F4:20:50:D6:82:56:19:74:41:68:D2:48:7D:E4:6C:2F:12
            X509v3 Authority Key Identifier:
                keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:fe:3e:98:79:fd:9d:1a:9f:d6:6f:10:66:81:32:fc:68:
         0a:9c:04:d2:84:0f:29:cf:89:8c:3f:86:f7:65:4e:12:c0:ee:
         91:31:d3:32:83:bc:0f:aa:2b:64:cc:00:65:cf:f2:d6:50:18:
         d0:94:cf:3e:11:4a:ba:29:cb:a4:cd:ba:96:a0:04:41:97:d6:
         e8:c4:d4:34:8b:24:ef:c5:97:68:42:b2:b9:20:2a:b9:fa:fb:
         ea:48:aa:f1:c9:bd:2b:86:5d:b3:01:d9:df:5f:07:95:35:85:
         12:91:4f:69:b2:e3:17:4e:2f:cc:02:65:eb:23:c6:6b:a3:ff:
         a5:14:f6:cd:b8:23:4c:7b:e2:8b:87:ee:6d:66:e0:a0:96:f1:
         6b:3a:e1:2e:ed:14:5c:95:ff:65:6a:89:2a:87:dd:06:bf:34:
         58:9e:c6:0d:53:d3:f8:8f:49:c3:05:09:94:4d:a6:ec:4d:23:
         35:a6:ab:9e:2e:a4:c7:81:18:20:e5:e4:98:fd:fe:18:b1:dd:
         c4:6d:19:da:81:8a:21:ce:fd:cb:73:65:c6:9d:35:83:cf:d8:
         63:2a:66:a0:0d:57:70:f0:c8:dd:6d:4d:64:8a:9c:fc:d4:c0:
         0e:30:b3:75:b5:76:79:2c:73:89:29:02:6f:4b:3e:cb:da:78:
         1b:11:2f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net