Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft
File:                     2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json)
Hash identifier:          bhvrNzaT6ZqeFtGHWDqIqaHPFKZV499rNrH+N5Xb1yA=
Subject key identifier:   AB:D6:80:F3:95:D5:73:45:C7:28:4E:5F:A5:12:50:69:92:3B:DE:27
Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
Certificate issuer:       /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Certificate serial:       3498DC6CE8DB7074C123ED236AC1E4752E816E73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft
Manifest number:          94
Signing time:             Fri 25 Apr 2025 14:52:02 +0000
Manifest this update:     Fri 25 Apr 2025 14:47:02 +0000
Manifest next update:     Tue 29 Apr 2025 01:16:02 +0000
Files and hashes:         1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=)
                          2: 3136302e32322e36322e302f32342d3234203d3e20313532383231.roa (hash: aH6okphqxpRkcbzrmJ8UaY/Jz90Uk2iHjb4VbDgQR/I=)
                          3: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: DIUFyHEuavSUwiVdMJKyrzh6J1q1Lrk4PYhYpWeO4Xw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl
                          rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:98:dc:6c:e8:db:70:74:c1:23:ed:23:6a:c1:e4:75:2e:81:6e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
        Validity
            Not Before: Apr 25 14:47:02 2025 GMT
            Not After : Apr 29 01:16:02 2025 GMT
        Subject: CN=ABD680F395D57345C7284E5FA5125069923BDE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:c4:01:43:42:67:22:5c:37:e9:09:c1:64:
                    93:bb:bb:70:63:1c:94:39:c3:f1:dc:67:5e:7d:7c:
                    f7:50:1c:e5:a1:1a:a3:a0:08:83:98:34:e2:6a:90:
                    eb:08:a4:7b:65:70:99:0e:a3:71:10:99:3b:92:32:
                    0a:5a:ee:17:de:6c:c4:a2:0f:29:65:cd:76:99:32:
                    d1:46:70:a1:15:12:eb:8e:73:6e:a2:53:a8:d3:3c:
                    ab:e8:79:b0:27:e5:6f:d2:7c:85:41:b3:04:82:15:
                    16:9b:30:9d:83:2f:17:ea:14:e5:69:03:e5:31:49:
                    2a:2f:1c:8b:41:88:e7:57:83:0b:c0:03:98:4a:50:
                    fe:4d:03:e5:4a:f0:65:78:a0:d3:be:f5:e7:ef:db:
                    5b:58:bb:33:14:65:16:03:db:a4:f4:3a:a1:ad:33:
                    78:58:0d:b2:93:24:3b:a3:66:a2:a4:2a:0e:27:b2:
                    43:58:ee:68:84:bd:f6:e6:65:f9:7e:a8:40:da:20:
                    19:10:c3:96:f0:2c:d9:fe:86:a5:71:42:a1:39:5e:
                    61:65:1e:19:dd:ad:fd:36:84:ce:67:18:b3:c2:fa:
                    52:ca:c2:14:7e:23:38:aa:56:12:db:ba:36:8e:9c:
                    f7:a0:8d:5a:df:1c:03:91:5f:a3:4a:9e:2e:3c:82:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D6:80:F3:95:D5:73:45:C7:28:4E:5F:A5:12:50:69:92:3B:DE:27
            X509v3 Authority Key Identifier:
                keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:1c:4b:63:3a:76:2e:dc:c9:8d:9b:47:c8:e1:26:10:39:b9:
         26:18:81:9a:11:5b:a5:32:dd:62:89:96:dd:4c:37:25:96:c5:
         a8:e1:f6:f7:42:08:87:aa:f6:96:97:ca:bc:19:20:ed:31:ea:
         84:4d:98:d6:67:7c:94:44:82:eb:2a:84:81:4c:ee:dc:36:5a:
         06:70:e2:bc:0f:f7:2b:4c:27:94:68:3c:b2:78:12:76:d4:23:
         60:be:ad:68:d0:24:34:68:f9:76:b4:1d:93:27:5a:6e:49:5a:
         52:2d:74:a7:ce:5b:d7:63:28:fa:3f:f6:e8:97:88:2f:ec:4e:
         8b:6d:af:27:7c:4a:f8:5c:11:0a:7a:99:96:ab:4d:de:ed:52:
         b6:55:7c:b6:2a:d9:c3:b6:ee:3b:ef:42:ac:e7:38:87:40:f9:
         9b:29:11:b2:49:9a:93:ea:55:e3:23:f6:9f:12:0f:d2:18:30:
         4c:0e:97:af:5f:5f:d7:db:7c:19:87:99:c1:ae:d4:92:96:b0:
         95:66:ec:a5:e2:75:a4:6f:5d:b7:f3:67:39:72:66:3a:b7:2d:
         f9:10:ba:9d:4a:bf:c6:87:9a:7c:e6:3a:35:f9:f2:a3:10:4b:
         0f:59:80:b3:8a:67:27:6a:38:96:b6:71:cb:9d:4f:09:61:23:
         13:a5:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net