Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
File:                     754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json)
Hash identifier:          VU75eYZKFeArDYwpDvMHtTmkeJJejMOug+YXGGP9b4Q=
Subject key identifier:   7D:F6:64:60:64:3D:B0:EC:53:F2:5A:88:FC:BF:F7:74:56:49:21:F8
Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
Certificate issuer:       /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Certificate serial:       4388FA72DF8A36E3A4F3CF2359E6B436A3D20E55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
Manifest number:          01FA
Signing time:             Thu 24 Apr 2025 22:51:35 +0000
Manifest this update:     Thu 24 Apr 2025 22:46:35 +0000
Manifest next update:     Mon 28 Apr 2025 09:55:35 +0000
Files and hashes:         1: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=)
                          2: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=)
                          3: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=)
                          4: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: LxZN4UxUgmnYwr6eno+jpnLP2mhLLFmIM1e2BekA3pw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl
                          rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:88:fa:72:df:8a:36:e3:a4:f3:cf:23:59:e6:b4:36:a3:d2:0e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
        Validity
            Not Before: Apr 24 22:46:35 2025 GMT
            Not After : Apr 28 09:55:35 2025 GMT
        Subject: CN=7DF66460643DB0EC53F25A88FCBFF774564921F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:1a:7f:06:46:7c:bd:bc:f3:dc:59:74:35:
                    10:c1:04:85:4f:60:2a:34:05:d4:e9:b2:2a:2c:49:
                    0b:03:3a:cd:fc:c0:95:f5:f0:0d:6b:89:0d:1e:f2:
                    88:49:63:c0:af:fc:f5:d4:b6:e3:b3:9b:f1:f5:24:
                    44:d0:61:f7:82:eb:74:a6:3e:e3:6a:2c:6e:f0:e6:
                    ab:34:99:8f:12:ac:5f:9e:64:37:43:58:a7:c5:3a:
                    e0:b0:d7:83:42:f3:48:3c:c7:fe:92:f8:8e:2d:ed:
                    19:ee:ac:2c:b3:a8:66:86:58:d7:a7:a0:fe:12:7b:
                    89:3b:50:36:87:ae:b8:ff:e5:eb:30:d7:d8:75:66:
                    96:d1:ea:e8:1c:54:af:e2:92:0e:4a:00:db:08:56:
                    2d:23:cd:fb:b0:f6:46:b3:6e:42:97:77:a5:79:5c:
                    a4:2c:8d:f4:41:b4:aa:5f:62:0c:7c:73:89:a6:f2:
                    a2:f6:e7:e8:1d:e7:13:2a:72:90:8d:b7:3d:fa:4d:
                    aa:c2:ae:38:74:32:e5:99:96:2a:a2:3b:63:97:6a:
                    a5:d0:79:42:f0:6a:96:3d:f4:d4:65:56:e2:5a:cd:
                    11:8a:9d:bd:79:46:2a:8d:ba:a0:53:d9:cd:cf:fa:
                    ee:8c:a3:e7:dc:57:e9:9f:b2:65:d6:66:70:ca:ca:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:64:60:64:3D:B0:EC:53:F2:5A:88:FC:BF:F7:74:56:49:21:F8
            X509v3 Authority Key Identifier:
                keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:df:d1:c3:ea:a6:b4:f1:81:5e:e1:1a:20:9b:bf:92:68:fa:
         af:4d:a1:28:a7:49:29:01:ee:a5:e8:6e:4e:9e:4b:c3:9a:bc:
         37:4a:60:13:e4:84:25:11:af:6f:08:28:26:26:47:38:f5:d1:
         19:49:bf:d2:00:d0:3e:87:51:dd:25:68:68:16:6a:76:e3:6b:
         4b:90:cd:55:2f:cf:7e:35:b8:3d:5a:65:62:6a:8e:08:e2:ba:
         ce:f0:25:09:71:34:72:53:d7:df:0b:c3:81:66:df:f5:11:d5:
         14:ca:5f:64:47:10:7a:70:d5:83:7c:cc:36:11:ce:18:1a:b2:
         19:6f:7d:e1:8a:01:eb:d2:a9:1c:7a:71:fe:9d:37:cb:ef:de:
         a1:9a:aa:33:aa:17:4a:5b:9e:19:74:1c:c6:b2:f5:a2:e0:cf:
         53:9e:b9:4d:89:0d:56:e4:6e:15:05:9f:46:2a:9a:5e:f6:d5:
         7b:66:52:26:51:b8:e6:3e:a1:79:0c:00:9b:19:23:12:49:0a:
         e8:99:c8:ad:5b:de:0e:ca:bf:3c:1a:7a:9b:dd:28:da:f2:cf:
         29:7f:5b:76:e6:b0:bc:4d:cd:a2:31:f5:53:ea:b3:50:2a:43:
         2a:09:f8:07:43:f1:f7:19:3c:a5:68:d3:ee:95:2a:00:f3:5b:
         a3:7a:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net