Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft
File:                     014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json)
Hash identifier:          HaKxCUTiwIs5mTMW4TLm0xHdA6zDCQITIrYy8T7dj+8=
Subject key identifier:   8C:60:83:AF:53:05:F5:60:5A:04:8C:DD:E7:8B:24:66:36:C8:4D:EA
Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78
Certificate issuer:       /CN=014253C9E01BAC5FD1E7C286A296948F302AA578
Certificate serial:       7B3262B8304D6264BBE53B9E0665284EFC827D11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft
Manifest number:          3F
Signing time:             Wed 23 Apr 2025 02:01:42 +0000
Manifest this update:     Wed 23 Apr 2025 01:56:42 +0000
Manifest next update:     Sat 26 Apr 2025 12:20:42 +0000
Files and hashes:         1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: fZQ3qeSFUu6v7TLno11QL2xU1BNeVTIHwazX31o18/M=)
                          2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: Gtp/+K549azB+5pUUWPxLkTWkLDGicnzvBzvU09wiAY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl
                          rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:32:62:b8:30:4d:62:64:bb:e5:3b:9e:06:65:28:4e:fc:82:7d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578
        Validity
            Not Before: Apr 23 01:56:42 2025 GMT
            Not After : Apr 26 12:20:42 2025 GMT
        Subject: CN=8C6083AF5305F5605A048CDDE78B246636C84DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:7e:08:9f:b1:8e:da:71:e4:8d:b7:60:91:
                    b2:65:ed:ca:3b:9b:b9:fd:83:e3:45:f4:92:39:25:
                    96:41:37:16:78:6f:54:1a:37:15:61:cb:ae:5c:0d:
                    dc:2f:76:db:c5:26:62:3b:3b:0b:21:16:a3:2f:aa:
                    79:ee:06:89:55:5b:a5:46:a2:c4:0f:45:b9:e3:75:
                    dc:26:d2:dc:21:17:c9:a6:27:2e:c7:74:a4:33:bc:
                    28:0f:72:98:97:b1:7b:6c:b4:3e:db:f9:95:bc:fd:
                    3d:ec:49:6e:75:0b:8d:52:d5:14:ad:8f:5f:d5:ad:
                    cf:91:9d:36:6c:44:b9:b5:c1:76:c3:01:23:a9:c9:
                    77:40:ef:60:d5:6b:f7:4a:26:88:0a:a4:68:fa:45:
                    0e:21:8d:f7:10:9d:a0:87:80:ce:b0:47:49:e2:e4:
                    4e:37:3a:c7:6c:da:b5:96:b5:22:e3:f6:47:3f:33:
                    d6:f7:6a:2f:47:fa:67:4b:8f:20:b3:9c:f9:92:60:
                    1f:5e:a9:8e:21:4c:d6:82:c0:48:9a:46:45:5c:29:
                    5b:35:a2:d6:47:9e:9d:b4:38:00:46:dc:e1:0f:34:
                    70:02:bb:a1:ec:b3:52:2a:84:22:23:56:f8:7c:34:
                    96:59:51:b0:f5:20:82:21:78:d5:66:8b:7e:1a:6c:
                    7a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:60:83:AF:53:05:F5:60:5A:04:8C:DD:E7:8B:24:66:36:C8:4D:EA
            X509v3 Authority Key Identifier:
                keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:a3:fd:61:c3:0a:ad:68:e3:2e:52:18:6e:cf:d2:cb:c2:
         37:46:18:ee:99:36:11:4b:44:e1:fc:79:24:91:af:b4:da:db:
         b2:5a:c5:d7:ef:6d:95:18:b9:b1:60:20:c7:78:30:84:8f:89:
         bb:0a:93:a6:c5:b0:a3:98:e3:87:17:20:db:6c:be:59:7a:bf:
         81:2b:23:c7:8d:e7:d6:12:0b:be:bb:96:81:ce:a4:38:8a:36:
         3e:30:07:b0:5e:72:e9:20:3a:3b:b4:74:6d:2f:2e:1b:d2:92:
         87:6e:b1:cd:9e:b4:dd:12:73:e0:d3:80:76:9e:ba:c3:99:5d:
         a7:54:e8:af:27:17:a7:50:6e:10:7d:2e:9a:48:0a:e0:b4:2d:
         3b:8a:e5:25:9b:a8:11:35:86:02:6d:1b:9c:34:08:87:0f:5f:
         22:d8:60:6d:1f:94:82:52:ff:79:5e:5c:df:cf:47:2e:c3:53:
         01:8d:62:7b:a2:fc:10:78:d5:00:a7:ed:f1:5c:e1:ec:eb:41:
         e5:d5:0b:ec:18:66:bd:e8:6c:7e:0e:ea:4a:9b:0e:af:34:dc:
         3e:d0:54:f0:f6:59:3e:84:93:7e:b8:55:ce:06:44:52:2f:93:
         9e:06:f3:a8:e7:a4:d4:e9:48:1a:62:36:53:4e:f7:10:5b:64:
         c4:59:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net