Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          afk3MuFKZBQgGzWS4Q20gt6gUJenCcVFAKgHhoopTnc=
Subject key identifier:   C3:84:3A:B5:AB:15:DC:5D:66:C9:E3:9F:1C:57:66:39:CA:45:EB:E1
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       035CF856774F7ABBFA95AD4E97BE54B880F96C6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          04C7
Signing time:             Fri 25 Apr 2025 10:51:40 +0000
Manifest this update:     Fri 25 Apr 2025 10:46:40 +0000
Manifest next update:     Mon 28 Apr 2025 17:20:40 +0000
Files and hashes:         1: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: DPT2KnFo+j/wGnEOe0FeHMRN87ddzlG5/+viaBnBaYY=)
                          2: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EK6IOQrf2rr4CozcXpyHn0lnKDzMTXzhLY1ojyQBefA=)
                          3: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: NkL9p0vnYsYadH38tfco3JpzrvJDis7ZkYMD3zMprFQ=)
                          4: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: RTIwq7shR7bXdamWXaTuuLysxlJ3zoLqtpVO/z6TjXA=)
                          5: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: qkSNUdJkDxdqKObXFqJ7YGM+qaLs/AFZbanOaV69gsQ=)
                          6: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: J9LMzNjTfq8117LmMgk4XK1mYRtXVZzkGAU9iFEulaM=)
                          7: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: Ljte3plUxakf1AvmLvyn5ZBd+3DR/9Jpvk/gL8v2UXA=)
                          8: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: 4fgr8pnAQyhzmUnk9mguo5zm84SrVO1dIjnC4wxY3dM=)
                          9: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: ZDywncesSAjMu6O/tvcMI1s4FDR1nuIEwpOi5m0PtTE=)
                          10: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: 5lHQNRH9ZyHtRlqVq3mhv2CF0AIKUXgULtiM3hQL6BM=)
                          11: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: ZwR9FjboZAZDVU/wKbYd21qYjHtnOrshCk3dUigmn3Y=)
                          12: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: p56aDnFiB/sHhi4D9oPCP6BupyFFvyZDIPu2wfqqfRI=)
                          13: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: f3iCk3LjLjEMoJPF3LFNtbgYp3UzsumaaaJ0MXf+xdI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 14:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5c:f8:56:77:4f:7a:bb:fa:95:ad:4e:97:be:54:b8:80:f9:6c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Apr 25 10:46:40 2025 GMT
            Not After : Apr 28 17:20:40 2025 GMT
        Subject: CN=C3843AB5AB15DC5D66C9E39F1C576639CA45EBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:0d:0b:e8:95:29:00:d4:53:27:7c:1b:fd:
                    39:3c:9b:f0:a9:72:5d:80:7d:30:2d:10:25:7d:6e:
                    4f:31:6c:98:c3:3c:8e:cd:dc:dc:cc:e6:5e:93:19:
                    42:5e:0e:68:a9:7f:8b:28:3d:5d:d2:cf:c1:9e:22:
                    49:d5:83:89:f9:56:28:82:3a:83:59:7a:42:93:9a:
                    7c:54:82:ba:33:77:bf:76:73:75:d6:2f:d6:ef:c3:
                    8f:34:02:6f:31:d7:47:73:25:2e:20:63:bc:05:96:
                    23:c6:f4:7a:5f:b0:10:1b:e1:36:9c:53:96:a1:4a:
                    1d:6f:cf:40:f4:06:52:1b:36:03:66:2b:9e:a9:6a:
                    78:dd:5d:5f:58:42:6c:36:77:33:96:39:92:c4:96:
                    dd:e9:56:77:53:e7:8f:c1:e3:13:bd:05:df:39:6e:
                    cf:14:bd:50:68:62:d3:6b:e7:f9:e8:9a:20:99:34:
                    b6:78:fe:91:06:f8:a9:2d:75:e2:72:93:4c:eb:bc:
                    67:c4:15:81:3b:18:63:ea:4d:13:23:f5:d8:a0:14:
                    c1:2f:7d:fe:3b:46:47:4f:82:11:a0:c5:7d:60:c5:
                    74:1d:30:75:bc:0d:0b:9b:55:d6:eb:19:3f:22:81:
                    5d:75:83:4a:0f:87:1b:62:8d:60:d8:6e:99:cd:4e:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:3A:B5:AB:15:DC:5D:66:C9:E3:9F:1C:57:66:39:CA:45:EB:E1
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:aa:53:2c:e5:60:1a:78:ff:11:d1:a9:94:3c:c7:95:cb:
         a7:3d:0d:2c:f0:bb:de:cb:ca:51:7d:47:37:4f:09:e9:56:a6:
         6d:ab:7f:38:74:61:56:3b:b3:98:fc:2c:cf:d4:10:ec:e3:dd:
         bf:b2:93:2e:78:44:fd:47:a2:76:45:9a:bb:5b:a1:33:45:06:
         ea:a2:cc:2f:69:6c:76:79:ad:3d:b9:60:f2:54:1f:84:c3:3c:
         f7:7e:77:e4:44:0a:f8:4f:73:6d:ec:67:34:f8:58:b6:ad:5b:
         d8:48:29:5e:7d:53:d9:79:65:a4:29:57:25:d1:26:62:6c:0e:
         25:15:fd:fc:cd:22:fc:2a:3c:1a:77:53:ed:c0:8c:10:d3:74:
         0e:64:b9:54:ab:1b:2d:98:81:8c:7b:61:f8:eb:2f:9d:c8:37:
         11:f3:31:cb:ab:ef:35:d9:41:07:92:ef:25:9a:b8:1a:91:01:
         8e:77:e9:e5:02:60:17:dd:26:5b:cc:95:dd:e4:bc:6b:f5:72:
         c1:52:03:52:47:6a:34:21:73:2b:74:00:66:75:24:b2:1d:42:
         71:18:4b:2c:19:5c:e8:47:b9:d3:46:24:d7:85:33:9c:a6:15:
         7f:41:f5:8d:70:bc:d4:e8:5e:cb:4e:94:55:2f:aa:a2:53:23:
         72:df:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:05 2025 by rpki-client on console.sobornost.net