Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
File:                     D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json)
Hash identifier:          fHmWAYyojw/MZO4Z2aPgxeqY9nBR9aqWF+B4YbfDGDs=
Subject key identifier:   CF:75:B8:7E:87:D9:E3:87:33:3F:EF:81:A4:D8:88:FC:BA:22:E7:96
Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
Certificate issuer:       /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Certificate serial:       04DE375C30DBD7471D855E113ABA59DA3FC6BCD9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
Manifest number:          019A
Signing time:             Wed 23 Apr 2025 06:21:36 +0000
Manifest this update:     Wed 23 Apr 2025 06:16:36 +0000
Manifest next update:     Sat 26 Apr 2025 16:22:36 +0000
Files and hashes:         1: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: D+djLL/u5j7CNgpe5s73rFfmNkIkZvT7IIpbCapRgDA=)
                          2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ZU6cyNYkIUPGF40k5MNIL/bcfaMQCK3GLUO1mmc7O+4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
                          rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:de:37:5c:30:db:d7:47:1d:85:5e:11:3a:ba:59:da:3f:c6:bc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
        Validity
            Not Before: Apr 23 06:16:36 2025 GMT
            Not After : Apr 26 16:22:36 2025 GMT
        Subject: CN=CF75B87E87D9E387333FEF81A4D888FCBA22E796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:9b:13:3b:af:7a:b1:c5:2b:11:6c:d0:12:
                    aa:5f:9b:fb:4c:9e:8b:e0:dc:ab:bc:6f:23:e4:a7:
                    aa:3d:ee:d4:e2:5a:91:53:87:a3:5e:47:21:a0:df:
                    f8:af:df:05:b9:8c:60:0f:87:f5:01:54:3c:ca:3a:
                    cc:cc:13:66:8a:05:45:f1:72:f8:3b:49:61:74:cf:
                    4d:a5:3b:a7:60:1c:97:d9:31:f8:f2:e5:e5:99:47:
                    20:cb:8f:3f:96:79:05:69:51:07:a2:8b:80:23:87:
                    50:fe:7d:96:c1:61:e1:ab:5e:e8:ae:46:68:a9:ab:
                    2c:c1:3d:d7:57:e6:77:6b:99:80:cf:ba:0c:af:f4:
                    01:d0:d2:7d:a5:a9:e4:f8:37:eb:fe:03:2b:25:7d:
                    aa:19:3f:e3:d1:05:4b:29:b3:09:6d:7e:3c:29:43:
                    51:0e:ad:d2:bf:f9:cb:aa:4b:00:05:17:20:1d:96:
                    c8:a4:4d:25:59:e1:38:f7:da:d6:6c:a3:fe:f9:0f:
                    df:77:4e:81:8c:3f:04:34:88:6c:00:65:8a:8f:87:
                    88:da:53:aa:72:62:eb:a8:02:f8:4e:b8:b5:29:93:
                    f9:ad:9c:16:48:4b:8e:42:97:27:0d:0d:01:33:cb:
                    e4:df:d1:eb:68:ef:5c:b4:5f:15:d3:60:da:ae:d2:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:75:B8:7E:87:D9:E3:87:33:3F:EF:81:A4:D8:88:FC:BA:22:E7:96
            X509v3 Authority Key Identifier:
                keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:eb:9b:91:23:16:b8:a7:a4:1a:5e:03:53:4f:ef:95:71:b0:
         84:a5:09:6f:e2:16:2f:f3:ab:8e:b4:aa:a6:59:72:4b:b7:fb:
         55:dd:1e:a1:25:b9:92:79:93:ed:48:2a:c9:25:e3:47:48:61:
         b1:7f:bc:94:e8:28:1a:a1:46:c3:69:e7:49:cc:a9:eb:19:07:
         42:1f:8b:f9:7b:c6:0f:36:fe:2f:ff:5a:74:3c:1f:3a:95:ac:
         30:bb:0d:a6:c9:b5:e3:f5:f4:f3:61:b5:80:65:b7:70:f3:60:
         00:08:64:22:a4:69:3c:8e:a1:ca:8f:11:2e:7c:2e:1b:5a:7e:
         3a:00:67:15:de:d7:10:90:28:f1:b2:ac:59:12:54:08:67:52:
         60:c4:53:d8:25:1d:cf:bd:f3:ab:0e:e6:7a:06:df:03:ea:3f:
         fd:f4:55:b7:2e:ce:08:24:ad:b0:36:90:39:88:93:20:1c:88:
         5a:6e:66:83:7b:0f:f9:78:ad:6a:bd:ce:05:2c:96:c0:50:bc:
         26:1b:ac:cb:2d:64:0d:43:68:97:4a:70:8c:50:d9:ad:78:77:
         e9:59:a1:3c:48:4b:3e:b1:16:b4:33:7b:7e:91:11:a6:2a:c5:
         de:c2:0b:01:50:94:77:9d:e9:33:1b:a5:0d:5e:4b:81:a2:64:
         f0:6e:30:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net