Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File:                     C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier:          anpAVOdSQKpglYWomgfpHqKZ5ruF2vKhPaOuPLm49no=
Subject key identifier:   B9:7D:A3:EE:E6:33:9C:4C:84:3E:95:33:DD:DC:C3:84:3A:23:FC:97
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer:       /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial:       24772AAAD2B53B76A55CE09B590505A9F64FD4D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number:          04D9
Signing time:             Wed 23 Apr 2025 06:01:05 +0000
Manifest this update:     Wed 23 Apr 2025 05:56:05 +0000
Manifest next update:     Sat 26 Apr 2025 15:32:05 +0000
Files and hashes:         1: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: C3I03bKwqahoZs1vLJC2P0W/gVIIwRIvwhkzt1QShKA=)
                          2: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: YQVR8UOeiYmY2kyG9i2CqFsAi/62Mch9mbYUm4aJz9o=)
                          3: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: b8zDNPy2xqVlrDOAlQUUDIWMMOfRTaQ0mid2lPIB3KA=)
                          4: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: 8RrRORobg42yyo6LFcje0JxeCKUFuSga1jy/CkFuTm4=)
                          5: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: 1il+bYXQjl2Z5M2afvU115zEzq23jQfoWNPWBzr6QnM=)
                          6: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: mSUh/L4o3WxZWaFk4Syf4IAQb9zhHbALhTc1/MotUbk=)
                          7: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: EGI9o7CM4WRok9jPW02rkd7C68LQY6lwOHLdbhuimwI=)
                          8: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 5rg1EeqRUgeSLgMy7lGVLTMSo/SW/vkwy5TwRaBl/j8=)
                          9: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: LnfQWSkhBeT+G4FyLtKt+mDAFcmNfarKzOkWL9aGALQ=)
                          10: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: 1o8DlASzD1h5rLwZpUfGkMuC7vcLBZAtiAo0vRsnL6M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
                          rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:77:2a:aa:d2:b5:3b:76:a5:5c:e0:9b:59:05:05:a9:f6:4f:d4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
        Validity
            Not Before: Apr 23 05:56:05 2025 GMT
            Not After : Apr 26 15:32:05 2025 GMT
        Subject: CN=B97DA3EEE6339C4C843E9533DDDCC3843A23FC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:be:e1:c0:94:0d:07:be:59:e5:a6:b7:34:
                    50:c3:d4:b9:86:e4:77:44:ad:71:3d:e2:dd:42:58:
                    dd:02:ab:f8:65:8b:3a:49:f7:c5:7a:6a:44:d0:61:
                    2c:c7:0a:d6:08:33:64:17:4a:4c:e5:a7:d5:9f:1d:
                    1f:f7:0c:0e:9a:46:7c:3b:bd:db:3c:51:7b:3c:1e:
                    6e:86:8b:3d:9e:3d:d6:c1:9e:fc:4c:74:f8:30:00:
                    08:3a:f0:9e:5b:05:94:e2:8e:9b:12:02:26:10:67:
                    07:79:7b:6f:33:f9:e1:9b:a8:2c:2a:31:55:b7:17:
                    fb:e8:f2:c2:0e:ca:a0:eb:b4:73:b5:cf:e9:00:14:
                    90:d8:2f:d1:4e:f8:a2:ba:92:69:4b:ff:03:0c:40:
                    89:f2:67:a0:87:26:bc:f1:0b:a1:47:e3:48:ce:28:
                    5f:92:f9:a4:a9:cb:b5:85:d7:c3:ca:e7:c6:12:90:
                    fc:5f:b5:5b:96:cd:c3:6a:75:a6:07:2b:42:f6:26:
                    0e:d0:cc:13:c5:80:62:00:8c:b0:18:13:5b:25:6d:
                    58:fc:24:3f:41:f6:cf:5b:ba:6a:ac:fc:41:ff:5a:
                    37:c7:b3:f8:43:17:f1:42:77:ac:c7:92:90:1e:d3:
                    38:4d:d5:50:f3:fd:5d:07:e2:47:2e:2d:06:61:c3:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7D:A3:EE:E6:33:9C:4C:84:3E:95:33:DD:DC:C3:84:3A:23:FC:97
            X509v3 Authority Key Identifier:
                keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:30:bf:8e:24:6b:3b:c6:f6:3f:81:96:50:f7:e4:0a:cd:f1:
         3c:e9:77:f7:9e:a1:c0:88:54:65:43:4e:e9:2c:2c:e2:a0:54:
         0c:c1:1e:21:29:4c:5c:8f:27:b4:72:9d:44:a1:78:47:51:22:
         26:94:e4:1c:d2:a1:45:fb:f8:b3:1f:b3:23:9a:57:15:d0:b7:
         1a:47:fd:e1:95:5e:2c:91:4d:49:41:b0:ea:38:22:18:d6:67:
         82:87:17:a4:a4:a3:13:02:10:e1:40:21:8a:76:f8:ee:d0:cc:
         b9:f0:dc:3a:aa:60:c6:c0:71:4c:14:39:23:5c:01:84:c3:60:
         f5:fa:a6:2b:15:64:ee:b4:91:2b:93:c2:84:39:74:27:bc:76:
         d5:57:c6:c7:3a:bb:96:bd:6e:f7:51:4b:5b:50:a8:24:c8:f6:
         1c:4a:ed:7e:84:ab:21:e3:c7:17:93:11:42:ec:11:5a:12:57:
         5b:db:ee:b2:cd:c4:7f:6c:26:b8:d6:17:69:82:7e:8a:3e:c6:
         98:b8:e5:b3:a4:03:c5:cf:04:50:74:af:3a:a5:81:a1:21:9c:
         db:e4:96:65:a5:fe:80:ec:05:3f:57:6f:f4:5c:ae:a7:60:eb:
         fd:e2:4d:be:4a:7e:57:a5:aa:32:4b:f1:8d:fc:c4:f3:7e:04:
         d0:82:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net