Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft
File:                     E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json)
Hash identifier:          DZhYjLB7wIh8jfQtUjtAfpSgU+rKi0hiHHRKXBlWid0=
Subject key identifier:   BA:AF:3A:BA:F5:0F:DF:F2:19:D8:64:B5:2B:3A:0F:B9:DA:26:3A:AF
Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9
Certificate issuer:       /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9
Certificate serial:       095E4CD41DEDA28576E6C1AC6E6CC5A3C3A3A1CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft
Manifest number:          01AC
Signing time:             Thu 24 Apr 2025 22:11:28 +0000
Manifest this update:     Thu 24 Apr 2025 22:06:28 +0000
Manifest next update:     Sun 27 Apr 2025 22:57:28 +0000
Files and hashes:         1: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: ePfj8hKbJltEy6Eyx1tWlWexir0qO46WUOc55tFK4vs=)
                          2: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: D0t/YeMSaxANRp7Cjj+UYZjgVfcPEy0eqBQGOyEnZWA=)
                          3: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: imfZYd+PwuMIdN7UcBrml21Vlzc4h9f5RzLmotI9hlU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl
                          rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:4c:d4:1d:ed:a2:85:76:e6:c1:ac:6e:6c:c5:a3:c3:a3:a1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9
        Validity
            Not Before: Apr 24 22:06:28 2025 GMT
            Not After : Apr 27 22:57:28 2025 GMT
        Subject: CN=BAAF3ABAF50FDFF219D864B52B3A0FB9DA263AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:68:c3:a5:7b:86:78:f3:b7:91:1a:53:52:
                    a9:ae:65:61:bd:23:9c:dd:37:39:0e:72:6e:4c:c8:
                    6e:8b:cc:55:8e:f4:6f:8e:b9:da:49:c9:63:fa:f1:
                    bb:9d:26:a6:58:34:3e:85:c0:7f:e6:60:49:e2:7c:
                    77:a1:dc:2e:ff:8c:1f:5e:63:89:ae:3d:61:a8:98:
                    ac:cf:e3:e8:1f:e8:b6:f8:d3:91:17:44:3c:bd:14:
                    72:6e:40:2e:dd:de:ea:72:12:ef:48:39:b7:a5:ce:
                    c4:f5:5a:1a:dd:da:da:2a:b3:5d:58:bf:a2:c3:f9:
                    ce:ac:a6:18:68:d9:53:ff:f3:e2:bd:ec:60:cb:e9:
                    96:ec:39:31:67:4e:95:09:34:e1:5b:c4:59:9f:37:
                    d2:46:24:a5:5b:ee:8e:1e:58:ab:89:b2:ad:d4:a1:
                    9c:83:83:d5:1f:da:42:19:ed:cf:82:a9:01:e9:06:
                    94:ff:89:9a:9b:33:35:be:25:22:f6:99:34:64:0b:
                    5b:dc:0a:a7:07:15:24:7e:bb:17:c0:9c:46:a4:22:
                    7b:41:3a:09:a9:e5:4b:a7:14:cc:ca:b8:fd:04:50:
                    db:14:b7:9c:c0:6d:3b:e0:cf:81:92:ee:7e:c8:5b:
                    a2:87:a3:a7:13:46:59:b8:ab:2d:a4:99:f0:4d:95:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AF:3A:BA:F5:0F:DF:F2:19:D8:64:B5:2B:3A:0F:B9:DA:26:3A:AF
            X509v3 Authority Key Identifier:
                keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:fb:50:b5:67:e6:64:e4:d9:a8:ad:79:67:f3:8a:ca:e4:
         57:19:4b:6a:6a:41:39:6d:11:53:52:b1:6a:19:8c:17:e4:d2:
         3c:fb:6b:53:86:e2:ba:e8:dc:ea:02:8c:80:77:bf:c1:c3:18:
         fa:6b:ec:9a:c0:db:1a:0f:5f:41:e6:34:19:fa:ae:d5:05:8b:
         6a:67:d7:b9:9c:eb:ee:e6:59:18:bf:0e:a8:7c:d4:1e:7a:be:
         39:d1:30:8f:62:41:bb:e2:66:b3:dd:14:f3:e8:ea:d6:58:09:
         a1:b8:fd:37:8b:d4:4b:61:4b:79:7c:6a:4e:d3:b3:e5:43:5d:
         dc:90:bf:bd:29:94:48:73:9e:c2:85:88:de:f5:fb:da:24:e7:
         f3:d8:5b:c6:8f:47:31:31:bf:01:c1:43:81:83:31:72:5d:49:
         89:c9:c7:c6:54:f1:2b:19:3d:fb:6a:52:d9:d7:fc:2e:57:14:
         8b:39:74:c9:60:a1:13:b1:89:e8:6c:8e:d0:cd:bc:dc:d1:f6:
         49:b5:be:8d:b2:20:78:f5:e3:25:b3:72:88:1e:8c:f5:96:f2:
         5b:ae:8d:14:56:73:94:08:65:15:7a:0d:3f:ac:77:11:67:b8:
         fe:dc:20:7c:18:03:33:ea:ee:48:0e:97:69:6e:bf:b3:de:49:
         44:82:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net