Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          9ZbSmpC/FyzrXCPDvWLFJC4OhtXQYIE6IUGLtm6aSuY=
Subject key identifier:   33:82:55:10:82:BD:48:A1:27:4D:74:1D:66:59:26:01:16:57:46:30
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       376727980D36F502C382751586364B09BE9327AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          98
Signing time:             Tue 22 Apr 2025 14:31:22 +0000
Manifest this update:     Tue 22 Apr 2025 14:26:22 +0000
Manifest next update:     Sat 26 Apr 2025 01:50:22 +0000
Files and hashes:         1: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: 12eKUXGhIz6FHVGhhjWlfvlhTiivVo5sPJpz1GDHaMw=)
                          2: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: IUWcIIvw/5B79/1vlmhpjp2xq/bxBr1gvBDlm1MJkEE=)
                          3: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: htvHw1UId6QYt8Zem0GwkkJ79UHzGuY9MeNMUAYecR4=)
                          4: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: vJHjXSNbN+nrHshiQZVlbnAzNovBDlJVOtnmhWeep78=)
                          5: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU=)
                          6: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: Rd+MYgkYtI8Em6b7VkPxEFn2gv60uz4eRZ5jfkklOME=)
                          7: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: amybII68a8VE28x622WWbP3X6DorgNErjKJn51v04hU=)
                          8: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 2kWw72G7y9+iu7Oj2LdzHrFFqPrgZYlByeJlEDz3xGE=)
                          9: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sw0SlIxt+FA7pZy4rkUInlCn0uAcgR4nYJ5Re3N9oxc=)
                          10: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: /Nnh6j9dQCYcuoIKmMpFeUVi7V4lhYfyFAMUQ8KcTyY=)
                          11: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: Wdn8WLm/z70TbHCfvi7cPeFpinXRYOP3acHf9F2yoZI=)
                          12: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9hl66Fb3ZZtaq9RTVyzyMYKvn9CeIA27uiDhLsoWI3A=)
                          13: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: CExyw62yhaULfuFNwHgJQzvOaDneumlJpO9PSL24k5c=)
                          14: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: 2dvpZD7SkLIO8Bb1a+NTuA+XOzdWGBmc4e1hLBWS+aY=)
                          15: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo=)
                          16: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: VrqEqcYe4ew7uni6W9u41N7qHk2GgBXWkfjAlNiKflw=)
                          17: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lc21YQEjyBtBR3cEzA2MpTAYh2Z++8zZog+Taujf5EA=)
                          18: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: BcmLy7eGAXxwcAZfEvgQEqwzVahjl/LS8t/7DNQb3O0=)
                          19: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: Z2kUGl4d2/nWr+hivZqHD1txvHpg/IJVAL0dy1bjHtc=)
                          20: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: opmintFf7rKX4t8MJAAA/SPs3kIqRtIjgx+RStmQ20g=)
                          21: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: /RbGQNrG5f2b5xUZmbLZIUIJCT8zlW48+GUxpa/P1BY=)
                          22: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: D+iPrGNMxkJb+4q2Qy4Gu4KwSuz1XN2zWtYy9r8xhz0=)
                          23: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: balnJcNONLw8SBYvt7tVe9VLlUUBAlIKjs8CUCdy5n0=)
                          24: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: cFUzi273SYArAUsUFdIqNgQFTFMOnTlJq02/dC40bZE=)
                          25: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: jSQKKM5t1FotHl9IvmmOV1bpO2Bm+Ktc/PrlSfNtDhw=)
                          26: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: PWcu8n1GQVYIbIpIIeTmS8WPhGjRtUMxtKVHKNkmcLA=)
                          27: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: DUx1uGcFaMxSBQpP1ITofuirpaclZNzBSNRp/I11LcM=)
                          28: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: v0m70RT7TsMBD2CfWXOxviOzxM9VbD9adOYfqtuzcmg=)
                          29: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: +efjUKkfN7wyOn1gEZ4iK+HOgdi5kSwgmzRJxOnk92c=)
                          30: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: NVdbP46U9HcnF9BcVuhppXenoJ+oGsK6bpcGbNkhYrY=)
                          31: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: FCPjRuILimc1y3AzWysntAW1lv6bPjvpNuCAb/4Y8KY=)
                          32: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: T8cBlOmjcetrSbtW+daV9YtXlBHJ/TgUuSP0ZRu08us=)
                          33: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: bZomEerwTckK0uovhCRCPeCKuhMrW+Qy9Lz5ot1+QLM=)
                          34: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: mdadZ+r3nk3ljg8TD8Qk3FJTWop4VzOG0q1+8q98qdQ=)
                          35: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: f+QA2MdOH3pD5wnFB0dGm2Zrsg4T8gtTfRmGOdNWdhQ=)
                          36: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: hfVgYmT+s3T/gP2ZWIlWtZU/K6JQ3MvR1bPnXxp9XLc=)
                          37: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: CswFvDupWqQkmZpyiNQV19oxsV8YOajNmUapEbDiz6Q=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 01:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:27:98:0d:36:f5:02:c3:82:75:15:86:36:4b:09:be:93:27:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Apr 22 14:26:22 2025 GMT
            Not After : Apr 26 01:50:22 2025 GMT
        Subject: CN=3382551082BD48A1274D741D6659260116574630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:b1:f0:af:a1:2a:6b:88:06:20:f5:74:5b:
                    90:2e:2b:b1:b4:65:5e:a7:ee:2f:da:cc:1c:69:2b:
                    46:dd:42:43:9b:a2:f3:04:bb:3e:81:e9:24:9e:63:
                    af:cf:ed:b1:1d:ba:78:86:0d:05:09:3d:e1:b4:0a:
                    37:6a:fb:e0:a0:3a:2a:a8:34:e8:83:a2:5c:6d:4b:
                    fc:fc:fb:4a:c7:e9:84:78:37:59:08:05:a7:cd:78:
                    9b:91:3f:63:10:86:ce:11:40:4c:8a:a5:35:47:91:
                    bb:fc:f5:f0:71:2f:39:4e:bb:fd:43:0c:25:27:8f:
                    2b:65:60:5f:f0:7a:07:77:e8:37:50:34:54:97:a8:
                    90:b2:f6:a2:d4:ea:9d:77:eb:51:e1:ea:2a:39:4b:
                    04:ef:32:87:04:38:5d:de:e2:7f:2b:b6:ad:e9:0d:
                    9f:6d:af:c1:09:87:b8:39:3b:5f:d3:3c:ef:07:a8:
                    47:c0:8e:76:80:cd:b2:90:52:ab:9d:79:fc:3d:b7:
                    b7:f8:f8:96:2c:8e:07:92:6d:88:2b:d4:be:79:19:
                    f5:ec:11:12:46:28:25:86:ec:0a:31:95:ad:cc:36:
                    61:36:db:9f:5b:f8:ac:02:a6:8b:4e:39:33:d6:23:
                    59:ca:dd:53:49:bf:69:b3:b1:11:d7:72:a3:5b:ee:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:82:55:10:82:BD:48:A1:27:4D:74:1D:66:59:26:01:16:57:46:30
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:af:72:32:f5:74:39:54:8d:c1:c1:0d:30:0a:66:8b:36:
         2c:97:01:89:0f:86:18:7d:03:85:b1:3a:37:7e:5a:f9:9a:70:
         6a:e4:46:52:cb:dd:b9:0b:a0:a7:2b:0b:05:91:a1:12:ad:86:
         36:08:5d:b1:c4:ce:4c:3d:72:81:e5:1b:9a:46:66:d8:91:03:
         62:64:a2:4c:f1:d5:d6:67:e2:32:da:55:db:04:34:a8:6b:7b:
         22:ee:5d:3a:b4:7d:b3:5b:2d:a0:42:41:44:e1:04:41:7f:8f:
         32:73:32:93:13:4a:de:59:09:8e:6c:5a:b3:9d:39:67:67:d8:
         5e:71:6c:1a:67:53:55:bc:3f:3a:92:5c:f6:a6:63:ee:06:ea:
         a1:e7:e9:d0:b7:cd:f0:10:cc:7e:cd:b8:ad:01:6e:d0:6d:b4:
         7d:10:12:8a:08:b0:f4:ea:8b:79:aa:77:db:f9:82:43:88:9e:
         18:fc:85:5d:19:3d:93:a1:80:dc:92:2c:b7:09:31:f4:c0:8d:
         ab:27:f3:73:a7:b3:09:83:48:7b:b3:16:2d:ce:51:81:c1:4c:
         74:5c:bb:81:76:19:ed:02:9e:ae:fc:6f:dd:db:22:c5:74:e0:
         8e:ac:2f:54:b9:e3:75:82:1f:c8:00:c1:6c:0b:83:d6:d3:74:
         90:4c:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:57:25 2025 by rpki-client on console.sobornost.net