Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
File:                     295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json)
Hash identifier:          HyrlSqBwc4LOnCrc7WhTUvgxyfpcyW/Gb4zK8UzJxsc=
Subject key identifier:   78:69:31:78:48:86:A1:17:72:29:B1:A5:FE:D8:A2:1F:09:EF:43:F2
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       49C02D0FF3CA806369FA610F105ECE4DE0D9D9F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
Manifest number:          04D1
Signing time:             Thu 24 Apr 2025 15:31:36 +0000
Manifest this update:     Thu 24 Apr 2025 15:26:36 +0000
Manifest next update:     Mon 28 Apr 2025 00:29:36 +0000
Files and hashes:         1: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=)
                          2: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: nBKHI+10Ut06FOJtH41J5R/AAE9svDrS9ER1fZDd350=)
                          3: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: P7Z6XRJZfWLIwLc37QAohPD8GShqj3t7azYOQZsaPgs=)
                          4: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: M8Jg7RXp9q2IokSrSE72Qz1D7tYQ3VERLgs0YJ8PYrM=)
                          5: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: UDms7HIaDGeGiYCJtIOU53UdSKHvDK+0OFralrpfjuY=)
                          6: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Ccc9Rz2j35EkvfbNz2T6X50a6oTWv2x4bbeSyVrqI+E=)
                          7: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: CjnGMuo6kzSGcDViA+mE+eOFvqdnyc2QnISe2b021aQ=)
                          8: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=)
                          9: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: d4njcKCxXvuiPQpiLgPI2iTaalRvfXwt51s7xl9S/7E=)
                          10: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: T0qy24Jw4nMkx0vavFP/FymLrM7UIs0+axCAYFq5t24=)
                          11: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: gU2bGz0QcfX7jz+4pmy6dDNu6epMK9rp4iwrG6+Vboc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:2d:0f:f3:ca:80:63:69:fa:61:0f:10:5e:ce:4d:e0:d9:d9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Apr 24 15:26:36 2025 GMT
            Not After : Apr 28 00:29:36 2025 GMT
        Subject: CN=786931784886A1177229B1A5FED8A21F09EF43F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:69:90:a5:66:13:c5:24:1c:ab:14:a0:c8:
                    c3:ef:e2:b1:6b:09:6c:bf:64:d9:93:b6:00:b6:dc:
                    82:53:28:03:fd:40:4d:83:9c:09:af:ae:60:7e:e2:
                    30:01:c7:64:13:4e:75:b3:f3:1e:d6:3a:fe:15:be:
                    e6:44:c3:83:39:c1:6d:12:c5:0e:d7:b0:f9:84:98:
                    7b:ca:b4:98:48:8b:62:54:fa:bd:00:22:f0:09:c4:
                    d0:81:fb:b5:bb:e4:c2:cc:9d:c4:e3:c2:8b:04:3e:
                    85:ea:a4:ff:c7:df:4b:fe:e9:ca:e0:fb:b4:0d:74:
                    88:25:fb:03:44:11:ff:b4:14:ab:a4:1d:3b:cc:0d:
                    46:0d:88:86:b3:f1:18:18:f4:2a:6d:4c:83:7e:d6:
                    5b:33:4a:b4:2f:43:d0:75:21:a4:2f:6f:91:7b:f1:
                    e9:9f:15:2d:26:a7:0a:3d:f6:35:36:d1:e3:0a:fb:
                    97:0e:27:e4:99:f0:ee:cb:be:c8:96:ed:84:77:87:
                    86:99:22:ac:7f:3f:3f:5b:fd:91:02:a6:53:87:9c:
                    77:77:71:48:18:5b:5e:fc:28:74:d2:1c:5b:af:57:
                    eb:01:28:0a:41:39:3f:91:77:75:90:54:64:07:25:
                    76:6d:c0:88:aa:94:78:86:20:45:f8:1f:e6:b7:b2:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:69:31:78:48:86:A1:17:72:29:B1:A5:FE:D8:A2:1F:09:EF:43:F2
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:4f:40:c7:0a:1f:17:3a:64:50:d0:d8:ed:c5:7b:bc:22:
         5a:a7:b3:4d:31:e1:ee:bd:1e:51:f4:e2:d5:dc:f9:68:2b:9a:
         4f:57:6e:35:fe:f0:23:56:14:3f:17:6d:c7:cb:03:cd:c1:e2:
         d6:fc:3e:4b:59:70:f8:42:9b:8b:fb:d3:c1:27:bb:11:98:08:
         90:80:67:02:3b:69:78:82:13:7a:b8:74:76:93:84:78:40:a9:
         e2:09:f9:c6:f4:a9:e3:aa:be:66:f0:de:aa:91:3a:8c:94:02:
         a1:af:da:1b:bb:67:9a:7d:c0:fa:9e:5b:85:e7:b8:66:15:a1:
         f7:44:f6:1e:c4:aa:c3:76:ee:c7:5e:26:76:57:d6:38:db:9f:
         a2:c8:72:18:b4:84:32:6d:fe:03:ef:cc:66:d9:13:65:2b:02:
         64:95:09:e8:03:93:f3:04:2f:1a:da:9d:48:a5:7b:16:f5:d0:
         43:9d:53:d9:a8:eb:6e:ac:a4:d7:3e:54:54:4e:e7:58:d6:be:
         69:8c:d6:7c:21:2d:55:c4:66:92:ac:2d:50:96:c9:a2:fa:5c:
         00:cf:52:36:57:2a:09:b4:1c:5a:f1:41:1b:05:2a:a2:17:96:
         f9:00:9e:5a:db:ba:71:b8:af:ec:6c:e3:6a:b9:c3:58:8d:45:
         b4:2a:8a:59
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUScAtD/PKgGNp+mEPEF7OTeDZ2fkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy
NzJEMkYzMzAeFw0yNTA0MjQxNTI2MzZaFw0yNTA0MjgwMDI5MzZaMDMxMTAvBgNV
BAMTKDc4NjkzMTc4NDg4NkExMTc3MjI5QjFBNUZFRDhBMjFGMDlFRjQzRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8mmQpWYTxSQcqxSgyMPv4rFr
CWy/ZNmTtgC23IJTKAP9QE2DnAmvrmB+4jABx2QTTnWz8x7WOv4VvuZEw4M5wW0S
xQ7XsPmEmHvKtJhIi2JU+r0AIvAJxNCB+7W75MLMncTjwosEPoXqpP/H30v+6crg
+7QNdIgl+wNEEf+0FKukHTvMDUYNiIaz8RgY9CptTIN+1lszSrQvQ9B1IaQvb5F7
8emfFS0mpwo99jU20eMK+5cOJ+SZ8O7LvsiW7YR3h4aZIqx/Pz9b/ZECplOHnHd3
cUgYW178KHTSHFuvV+sBKApBOT+Rd3WQVGQHJXZtwIiqlHiGIEX4H+a3spO1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeGkxeEiGoRdyKbGl/tiiHwnvQ/IwHwYDVR0j
BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE
Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE
MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2
N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1
NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJX2T0DHCh8XOmRQ0NjtxXu8Ilqns00x4e69
HlH04tXc+Wgrmk9XbjX+8CNWFD8XbcfLA83B4tb8PktZcPhCm4v708EnuxGYCJCA
ZwI7aXiCE3q4dHaThHhAqeIJ+cb0qeOqvmbw3qqROoyUAqGv2hu7Z5p9wPqeW4Xn
uGYVofdE9h7EqsN27sdeJnZX1jjbn6LIchi0hDJt/gPvzGbZE2UrAmSVCegDk/ME
LxranUilexb10EOdU9mo626spNc+VFRO51jWvmmM1nwhLVXEZpKsLVCWyaL6XADP
UjZXKgm0HFrxQRsFKqIXlvkAnlrbunG4r+xs42q5w1iNRbQqilk=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net