Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          QIMRK5/slhHWD6uHLQa40DJNXgVGqxcAm4y08ybHrao=
Subject key identifier:   68:75:72:B6:2B:87:9D:D8:E0:26:5E:39:78:64:57:EE:4E:CF:81:D8
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       4998406AD77B86796CF451FF37D424AB5B8CEEDB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          04D4
Signing time:             Wed 23 Apr 2025 20:51:04 +0000
Manifest this update:     Wed 23 Apr 2025 20:46:04 +0000
Manifest next update:     Sun 27 Apr 2025 06:24:04 +0000
Files and hashes:         1: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: m0CFS0bXXlC2sSkkYuX1uK7YpHcSKbwTasnOg//5UpE=)
                          2: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: qPhFyLO5p2XLEIOO0toGgTiGmQ5k4sJq0J9ZvFILUNg=)
                          3: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: hm/9X3cuyk8jd/AB2iBbcuodpHF2xW4uztYBSuY3yNU=)
                          4: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=)
                          5: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: iv0At4Oeueo57x1vdPZ8SVWvO7rIBV/xKbQmx2X640g=)
                          6: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: Sy6BflqYLR0sZsbRWtHtSQOlWDRu7he2nETil7/zL5w=)
                          7: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: 3p/hk5MLyUzRcTjxx6VZclvMzV7vaFx0cjt9/zXwI+E=)
                          8: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=)
                          9: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: qw0lOUkhaAxZB0W6Uovf+8Fl+4ITR1IdmbPGHHrVmrg=)
                          10: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: 2/x4Qw/F/zsfsvc9JOJlY2G2LhkflQn7lD5v28Bqntk=)
                          11: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: 0sBla2F+xJflsd2yz8rdqt4EVXBKtybHxVc7lgMh8yQ=)
                          12: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: H5UbeEY/iKVWeyVEanGtaf2L0y0JUm9EF64WOl/HBQQ=)
                          13: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: 7qHsw3w27NVdqWTWhdv7nrW74KPBDCmwGCBiiRBioWQ=)
                          14: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=)
                          15: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: mkruWkyUTX+c2Tw+0w7WwT3w2s3+OGAbVUZStH/a/n8=)
                          16: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: CTD8Xvgjr9YDqDwDOqgLumiXOGwu1HyyyOVZc6JRmTw=)
                          17: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:98:40:6a:d7:7b:86:79:6c:f4:51:ff:37:d4:24:ab:5b:8c:ee:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Apr 23 20:46:04 2025 GMT
            Not After : Apr 27 06:24:04 2025 GMT
        Subject: CN=687572B62B879DD8E0265E39786457EE4ECF81D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:b5:92:39:7a:a1:b3:64:e8:c9:ec:89:c7:
                    e9:9d:32:84:86:4b:ce:44:0a:21:f5:a0:80:9c:65:
                    3b:08:9c:f1:58:5a:3a:65:27:f0:c8:be:f2:1a:55:
                    57:36:4a:50:23:cb:d1:1c:4d:e5:bb:23:5f:e3:af:
                    12:ad:e6:8b:38:8a:46:ed:9c:f6:28:64:b1:39:9f:
                    78:de:0c:e4:50:88:ea:f8:ca:46:60:c7:8b:09:c0:
                    1b:e0:ec:84:75:6a:89:a6:ca:94:40:f0:f7:b1:5f:
                    90:2d:3e:c3:6a:58:1b:1d:85:ab:dd:9c:1b:9d:60:
                    51:10:b0:70:8d:5b:5c:97:ff:04:8b:e1:fd:ce:39:
                    02:8b:bb:32:6c:59:ae:3b:38:86:23:96:1a:51:d1:
                    99:ce:ca:61:80:66:15:d2:20:21:95:97:6f:8c:f5:
                    61:f0:2a:b5:4d:81:a3:08:dd:90:4b:ab:94:2e:57:
                    27:8b:83:36:2c:35:77:cb:8b:9c:b8:50:f9:40:a1:
                    de:b9:2a:dd:05:8c:18:6d:95:89:06:2b:37:79:24:
                    1b:f8:3c:2f:5c:45:b1:34:55:64:42:1c:85:5f:03:
                    68:96:15:0f:1a:e8:be:71:e6:86:7b:90:00:2c:cf:
                    85:67:0f:09:0b:06:6d:c2:11:0c:64:d7:76:db:3e:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:75:72:B6:2B:87:9D:D8:E0:26:5E:39:78:64:57:EE:4E:CF:81:D8
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:97:e7:a6:25:84:9a:e6:b5:6a:8f:de:f9:b8:ee:c0:6e:0c:
         99:65:64:82:67:16:d1:2e:b5:e1:a8:f3:26:f7:56:a7:2e:ab:
         96:9b:65:b3:cf:0c:45:0b:a8:22:0b:ec:e3:7b:d1:0c:e1:10:
         79:04:e6:67:0c:17:2a:6c:e5:51:e8:24:e9:60:c4:e1:bb:38:
         96:2b:bc:1f:fc:3b:85:35:4f:46:c2:aa:f5:3b:bf:04:2d:6e:
         a1:a0:04:db:3b:f1:4d:91:60:f3:48:c1:19:eb:fa:53:98:80:
         d1:01:bc:03:4f:dc:9a:9d:a5:17:28:f9:d2:e0:8f:53:3b:68:
         a1:71:b2:bd:97:45:ae:7a:51:88:6c:db:81:77:e8:54:20:5c:
         6a:f3:47:4b:93:64:e6:14:6a:f5:cc:da:6e:b0:ec:63:26:b3:
         c7:34:85:85:11:8e:9e:65:5e:f0:19:fc:ab:2d:e9:23:42:09:
         f6:6a:0a:b1:e1:36:04:00:52:07:96:f9:24:ed:83:af:1d:3c:
         6e:fb:d0:87:9b:4d:66:ff:bd:5f:3b:d3:d7:9d:06:c3:18:a5:
         ad:c7:65:c3:95:8f:87:f0:21:1d:1a:57:6e:3f:04:c5:3e:52:
         10:51:f7:ef:2e:8c:9c:08:23:51:2f:9d:ad:95:ce:45:f0:55:
         fe:f0:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:05 2025 by rpki-client on console.sobornost.net