Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
File:                     DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json)
Hash identifier:          At4IkSN+INgpKvWYJRCmnCkoGsq1frol1w8ZgD9kGOA=
Subject key identifier:   BA:58:69:97:50:E9:D9:18:54:9C:E2:8B:A5:8F:7C:AB:8A:D9:FF:E8
Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0
Certificate issuer:       /CN=DB03D7B542C60D3D72565734C86589420DF070A0
Certificate serial:       55806E7FE02B4043106BCA2B014D28327380D210
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
Manifest number:          01E1
Signing time:             Wed 23 Apr 2025 17:13:30 +0000
Manifest this update:     Wed 23 Apr 2025 17:08:30 +0000
Manifest next update:     Sun 27 Apr 2025 01:23:30 +0000
Files and hashes:         1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=)
                          2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: Tp2/ppCK8M/JxE4NCf/gG+M6nkhaPbWmaDV12DXfnCU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl
                          rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 01:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:80:6e:7f:e0:2b:40:43:10:6b:ca:2b:01:4d:28:32:73:80:d2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0
        Validity
            Not Before: Apr 23 17:08:30 2025 GMT
            Not After : Apr 27 01:23:30 2025 GMT
        Subject: CN=BA58699750E9D918549CE28BA58F7CAB8AD9FFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:d5:29:21:be:a7:7c:3c:ac:db:f7:6e:45:
                    71:af:3a:fa:8f:0e:e6:86:9b:c7:66:05:8b:3d:fc:
                    ce:4e:51:46:ba:cc:c0:f5:2a:7a:d3:71:a2:64:ee:
                    64:0a:de:e3:8e:48:c3:7f:f1:c4:fb:1e:fc:26:6e:
                    33:d9:3c:ef:53:8d:a6:16:90:48:28:07:1a:13:1c:
                    b8:ca:b6:36:7d:59:2e:31:a5:d3:af:2e:72:b7:62:
                    ff:34:c1:d5:8a:c6:11:7e:84:03:39:f6:b1:38:9b:
                    6c:8e:c1:60:f1:5d:d7:8f:1d:a5:ab:01:dc:4d:aa:
                    86:bb:92:62:88:7a:2c:a3:4d:af:f2:94:88:20:a6:
                    03:2b:a5:c0:23:87:10:b6:7e:a7:ba:8e:b4:02:b7:
                    b3:ff:52:a9:a5:f8:b8:cd:17:6f:32:8c:07:7f:c8:
                    d8:7b:fb:38:94:6a:af:2c:03:9c:f4:89:e9:05:fd:
                    f6:b6:c6:4a:09:9d:15:7e:5b:7c:3f:9c:59:ec:0e:
                    f0:9c:29:c6:b6:d0:91:78:2f:b6:01:e0:80:05:e0:
                    d5:3f:a6:9a:14:58:6c:be:f4:0b:20:e6:0a:e7:97:
                    6c:4c:04:d7:36:dd:86:2f:50:92:e3:37:5f:8e:ae:
                    5c:23:e5:45:87:b5:60:0a:ff:cf:7c:eb:e8:0b:f6:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:58:69:97:50:E9:D9:18:54:9C:E2:8B:A5:8F:7C:AB:8A:D9:FF:E8
            X509v3 Authority Key Identifier:
                keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6e:08:7d:a6:0f:cc:42:eb:27:a2:1c:6b:b8:75:a4:af:5c:
         80:83:04:59:ff:de:f5:a4:e0:c7:d5:b7:82:f2:3c:9d:16:de:
         3a:2a:c4:44:8b:85:2d:5f:68:2e:42:9f:df:08:fd:49:bd:4b:
         f7:65:a5:65:ab:58:32:fb:02:c1:2a:fe:13:d1:28:b4:ce:ee:
         fc:9f:ba:b8:26:b2:ad:1a:72:59:84:25:e8:8d:ae:22:8f:50:
         3d:36:5e:4f:71:45:ee:d5:4b:80:28:70:a0:5d:85:e5:f5:b7:
         0a:d1:51:ce:2f:d8:f7:6c:a7:ef:91:1e:bb:42:d1:e4:c8:0a:
         ef:da:22:3d:77:15:85:0a:d0:a2:16:fc:e8:cd:31:02:a3:2f:
         5c:61:2d:ef:51:6f:9d:ac:b5:90:a0:66:6c:02:92:28:c5:76:
         c7:66:7d:bc:89:cb:47:47:47:cc:c1:74:dd:62:0b:ba:3a:53:
         13:2b:c5:a5:04:c2:be:19:2e:b6:2e:bc:4d:a4:14:76:df:e1:
         06:74:b4:a2:8d:aa:6a:3c:ec:b0:97:23:5b:11:f5:ca:da:c6:
         60:fb:b6:49:af:fe:cd:a6:58:ea:bd:8a:67:96:fb:ee:c8:5b:
         ad:ba:ae:ab:c2:50:fc:47:a5:51:80:5f:49:d1:d5:21:d9:54:
         72:73:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net