Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
File:                     04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json)
Hash identifier:          JWKwnTySUeFQUs187Z1vU8+9RKmymsAqq9GNzPUpUk8=
Subject key identifier:   DF:74:23:6F:4F:55:FA:D4:F3:80:C8:65:2B:12:9C:53:BC:EA:85:A3
Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00
Certificate issuer:       /CN=04D3D2E060243AD917D4F682922E4A805EDE3300
Certificate serial:       7348BCE50832C64B8430914DB3A1C0251F773E8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
Manifest number:          99
Signing time:             Thu 24 Apr 2025 23:51:51 +0000
Manifest this update:     Thu 24 Apr 2025 23:46:51 +0000
Manifest next update:     Mon 28 Apr 2025 07:14:51 +0000
Files and hashes:         1: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: XvXbpB+Wz8shksjJebj9sIvZqMD2aBdhQOUk+5epe4w=)
                          2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=)
                          3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: YOfV9l8mIphWSX9GO2VG6QOcO1lYY9wjqJShR8OC/dU=)
                          4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: /J4qwElze/bQ2HOvKHKpbauyy3nIBEQmoLrnIDKLWb0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl
                          rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:48:bc:e5:08:32:c6:4b:84:30:91:4d:b3:a1:c0:25:1f:77:3e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300
        Validity
            Not Before: Apr 24 23:46:51 2025 GMT
            Not After : Apr 28 07:14:51 2025 GMT
        Subject: CN=DF74236F4F55FAD4F380C8652B129C53BCEA85A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:5c:06:15:a9:d2:8a:9e:bd:7d:03:2f:02:
                    b6:8f:a2:65:ac:2b:ea:cf:c0:35:ed:48:3c:c1:ac:
                    43:1d:3e:a0:89:84:df:38:0a:d2:fe:40:55:21:e2:
                    c4:22:54:ee:85:e0:aa:f0:cc:e3:02:2a:95:08:5b:
                    ca:cd:25:15:01:7d:e5:e9:f3:21:b8:73:7e:47:31:
                    dd:1d:0a:ec:44:1e:a7:3b:80:3c:1c:4a:de:2b:85:
                    6d:ed:7d:7a:3e:2f:34:ff:43:f2:d8:d2:77:a9:51:
                    cf:40:79:b5:cf:ed:28:66:0f:bc:65:ab:73:40:1d:
                    1a:ad:75:e8:0f:14:40:e7:d2:0f:b8:d9:74:74:88:
                    38:96:ab:4a:d8:7e:ec:47:0f:96:e5:cc:9b:0a:88:
                    f5:f8:b3:47:e8:12:2a:2e:55:69:be:4f:74:be:41:
                    0c:2b:5d:2d:92:b4:a0:8e:a5:2f:2d:f0:23:9a:78:
                    82:df:13:51:74:55:38:ac:57:59:c5:79:b1:7b:18:
                    f4:76:c2:fb:b5:2a:ae:78:52:7c:e8:25:fd:08:d6:
                    65:82:f6:6d:36:79:50:eb:e0:47:5e:7f:f3:2a:a7:
                    c7:44:a2:b9:7e:ae:4a:61:24:3a:8e:2e:b5:4e:91:
                    39:5b:f2:8b:41:ea:0c:01:8f:ae:96:1e:18:f8:9f:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:74:23:6F:4F:55:FA:D4:F3:80:C8:65:2B:12:9C:53:BC:EA:85:A3
            X509v3 Authority Key Identifier:
                keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:78:db:54:04:3b:c7:91:40:7f:23:db:85:b3:d2:99:15:8e:
         ac:69:13:d8:db:4a:07:95:ba:66:87:cb:01:18:e9:64:4e:61:
         9e:78:87:ab:e2:d9:5a:19:51:87:13:04:c5:ca:bb:29:68:96:
         f7:92:91:9e:18:e1:99:61:a8:fd:ce:62:4b:e1:52:ef:6e:c9:
         dd:aa:75:b2:6d:47:07:db:24:fc:da:89:12:ce:11:de:27:59:
         a1:e9:a3:66:3e:74:b9:b0:81:f9:41:81:6c:11:7f:3d:1a:aa:
         9d:98:bd:b1:0c:7e:5e:08:22:40:b3:d1:94:7a:61:c0:38:11:
         a3:58:b5:96:83:78:45:22:3e:03:ab:ef:a3:bf:48:d9:f1:96:
         2f:2f:66:1c:30:15:7d:2e:02:73:6b:e5:c9:c5:12:1e:e5:e5:
         f1:1e:2f:12:b0:72:8a:10:bb:e3:1d:cd:bf:7e:2d:5f:e4:bb:
         eb:78:c8:ae:e8:d0:03:6f:01:86:8f:9d:14:61:f6:ab:b2:61:
         ff:d2:e1:da:1f:fe:56:2d:f7:59:20:02:23:ee:76:87:05:78:
         89:c4:4a:23:f7:a1:ab:f4:d5:4b:46:32:c6:84:1e:62:32:8f:
         2a:56:79:11:5c:72:71:96:fb:4c:36:4b:28:c3:c8:0f:71:11:
         e5:4f:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net