Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
File:                     FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json)
Hash identifier:          dzWmK70TOEKcMDJ+VBNCv4CVToszCAgx8Bi4aRNUN9Y=
Subject key identifier:   90:B7:14:FF:6E:55:5D:2D:B0:24:E1:FD:F2:CE:74:79:28:9F:3E:9B
Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
Certificate issuer:       /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Certificate serial:       197880ABC0C74A434F79D4A328020233342A1E09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
Manifest number:          88
Signing time:             Fri 25 Apr 2025 12:50:41 +0000
Manifest this update:     Fri 25 Apr 2025 12:45:41 +0000
Manifest next update:     Mon 28 Apr 2025 16:15:41 +0000
Files and hashes:         1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: Qz1Kg1HQXiKB/AScS9V+bE6Z+oOPaOLRSzeXmFVh+Jk=)
                          2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: lnD7eacY5G5/7+p6v3mkCjeG0yF+m6gx3DYWqyqq5mA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
                          rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:78:80:ab:c0:c7:4a:43:4f:79:d4:a3:28:02:02:33:34:2a:1e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
        Validity
            Not Before: Apr 25 12:45:41 2025 GMT
            Not After : Apr 28 16:15:41 2025 GMT
        Subject: CN=90B714FF6E555D2DB024E1FDF2CE7479289F3E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:d9:0f:7a:f1:18:b4:a7:d2:db:2f:e0:b4:
                    96:47:ac:13:4d:2e:94:55:b8:64:5a:e2:a2:ad:e9:
                    7a:b2:e7:8d:10:2b:20:60:5d:e8:e8:eb:95:46:64:
                    f6:23:6d:1c:62:1b:e0:51:ae:c9:43:6e:ce:83:c9:
                    78:e1:75:4d:e5:3a:57:4b:d9:2f:9f:89:fc:50:0a:
                    65:11:30:6e:2f:03:3f:35:90:f2:4f:5b:2a:5c:ee:
                    6b:dd:08:ec:b0:bc:23:94:94:57:7d:8c:55:9b:6c:
                    a3:9c:a9:29:dc:a9:e9:90:0f:e2:71:f8:a5:fc:15:
                    61:31:49:1a:47:ce:bf:07:9d:8d:b6:7a:43:1b:c7:
                    8a:e9:1b:50:24:96:6a:40:55:1f:f5:86:5c:5e:ac:
                    3e:66:50:25:32:0f:46:52:6c:8f:ee:a7:fa:aa:00:
                    30:56:d4:6d:c7:04:a8:f4:e0:69:71:a4:3c:62:13:
                    b0:64:66:3e:fe:2f:94:32:de:ea:97:13:00:be:3d:
                    fa:43:05:34:4e:b3:dc:32:45:50:ad:ca:31:5b:90:
                    3e:c0:df:06:c0:d1:24:ea:dd:f8:8c:a9:1f:f2:4b:
                    88:e3:a0:61:c5:b2:64:b2:dc:84:36:70:5d:c9:c8:
                    9c:16:bb:f2:7f:09:ea:49:90:f0:5d:e6:5d:40:bf:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B7:14:FF:6E:55:5D:2D:B0:24:E1:FD:F2:CE:74:79:28:9F:3E:9B
            X509v3 Authority Key Identifier:
                keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:88:11:c6:48:59:59:f4:54:54:3c:bf:78:74:65:3e:71:
         fb:a5:9c:98:4a:4a:6b:f4:89:6f:3b:9e:16:7e:98:a2:5f:81:
         4f:48:70:50:80:48:c7:fa:9f:d3:97:1c:54:d7:59:ff:f5:14:
         58:dd:5e:1f:1d:65:55:15:51:68:75:50:d9:37:e4:6d:58:3d:
         61:f8:e8:f0:6d:7c:d9:44:30:f0:ab:8f:94:c2:bf:9d:6f:d7:
         38:91:b7:57:91:83:9c:02:f5:7f:40:88:f2:22:03:a4:46:99:
         d9:e4:3a:a8:8e:21:bd:b3:9c:cc:6f:47:28:4c:5b:f9:d8:94:
         28:6b:e4:87:2b:2e:b4:85:4a:64:0e:fe:e4:30:fa:9f:e9:19:
         2b:2a:06:84:c4:b8:e0:11:28:ee:0d:e4:cd:2a:03:b3:44:ca:
         cc:06:52:af:0e:e2:87:a0:bd:4b:36:74:88:89:68:07:0b:25:
         1a:ae:4d:85:20:ef:71:f5:26:d5:88:33:36:fe:81:78:f6:cc:
         68:ae:49:2b:f9:4e:60:63:76:e3:bf:0b:8d:1b:e9:31:0e:68:
         8c:3b:e6:91:71:15:87:59:96:82:0b:f6:fe:b3:a1:1e:fc:e8:
         85:06:66:ed:47:9d:92:94:44:e8:65:05:48:25:7b:71:a7:fd:
         ab:27:c5:29
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGXiAq8DHSkNPedSjKAICMzQqHgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG
QjA3QzRCNjAeFw0yNTA0MjUxMjQ1NDFaFw0yNTA0MjgxNjE1NDFaMDMxMTAvBgNV
BAMTKDkwQjcxNEZGNkU1NTVEMkRCMDI0RTFGREYyQ0U3NDc5Mjg5RjNFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zdkPevEYtKfS2y/gtJZHrBNN
LpRVuGRa4qKt6Xqy540QKyBgXejo65VGZPYjbRxiG+BRrslDbs6DyXjhdU3lOldL
2S+fifxQCmURMG4vAz81kPJPWypc7mvdCOywvCOUlFd9jFWbbKOcqSncqemQD+Jx
+KX8FWExSRpHzr8HnY22ekMbx4rpG1AklmpAVR/1hlxerD5mUCUyD0ZSbI/up/qq
ADBW1G3HBKj04GlxpDxiE7BkZj7+L5Qy3uqXEwC+PfpDBTROs9wyRVCtyjFbkD7A
3wbA0STq3fiMqR/yS4jjoGHFsmSy3IQ2cF3JyJwWu/J/CepJkPBd5l1Av6o3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkLcU/25VXS2wJOH98s50eSifPpswHwYDVR0j
BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0
NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3
QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl
MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1
RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH45iBHGSFlZ9FRUPL94dGU+cfulnJhKSmv0
iW87nhZ+mKJfgU9IcFCASMf6n9OXHFTXWf/1FFjdXh8dZVUVUWh1UNk35G1YPWH4
6PBtfNlEMPCrj5TCv51v1ziRt1eRg5wC9X9AiPIiA6RGmdnkOqiOIb2znMxvRyhM
W/nYlChr5IcrLrSFSmQO/uQw+p/pGSsqBoTEuOARKO4N5M0qA7NEyswGUq8O4oeg
vUs2dIiJaAcLJRquTYUg73H1JtWIMzb+gXj2zGiuSSv5TmBjduO/C40b6TEOaIw7
5pFxFYdZloIL9v6zoR786IUGZu1HnZKUROhlBUgle3Gn/asnxSk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net