Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
File:                     91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json)
Hash identifier:          pEYLPOZXfCSYSJ26cVD1b0YHyFyfIX20PylfyR2JD1c=
Subject key identifier:   28:AE:17:64:3D:11:0F:7F:2B:CC:AB:DB:E7:24:90:D3:74:A8:25:45
Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
Certificate issuer:       /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Certificate serial:       1517BFBAFB82267FBFE2827E3C82A73510FFCDEA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
Manifest number:          04C5
Signing time:             Wed 23 Apr 2025 05:41:14 +0000
Manifest this update:     Wed 23 Apr 2025 05:36:14 +0000
Manifest next update:     Sat 26 Apr 2025 17:30:14 +0000
Files and hashes:         1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: 45+OrhG0Ci2q59xaPMZF8fspDET2M42OYXgYygv43no=)
                          2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: 3EhYP5MSs4/lH/1jgs15OsXzjJMrCIK1YXQ3U8OD8SQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
                          rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:17:bf:ba:fb:82:26:7f:bf:e2:82:7e:3c:82:a7:35:10:ff:cd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
        Validity
            Not Before: Apr 23 05:36:14 2025 GMT
            Not After : Apr 26 17:30:14 2025 GMT
        Subject: CN=28AE17643D110F7F2BCCABDBE72490D374A82545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:f8:13:9c:6a:da:c9:89:66:d3:2c:ce:93:
                    f6:c5:13:03:b5:1e:e1:5e:6c:23:db:8e:7b:ae:b7:
                    3c:98:4d:98:95:bb:9a:3d:02:09:46:ac:b7:a7:2a:
                    a1:54:31:0e:fc:ad:45:2f:7b:57:6c:b4:e4:78:be:
                    30:34:79:60:f5:62:be:3d:3c:f7:4f:b4:fd:32:e7:
                    a3:a9:af:79:0c:07:4c:7b:dc:cf:56:54:a2:5f:5e:
                    e1:4b:ea:b3:30:6c:34:4a:c3:cf:da:0a:85:ba:21:
                    f9:8f:52:30:b5:72:a9:80:36:66:67:b4:e1:b1:f4:
                    fa:ff:3d:e7:1a:5b:90:28:95:9a:b3:59:6e:a4:8a:
                    c1:dc:e9:17:94:22:3c:80:62:39:fd:12:17:dc:c5:
                    fa:78:ef:a7:a3:4a:11:41:55:71:4b:4b:20:82:cb:
                    23:fd:a4:4f:ab:dc:f0:6d:51:d1:9d:5e:57:dc:09:
                    0d:33:e9:c2:1b:c9:74:80:e0:7d:38:a8:27:e2:a3:
                    c5:7d:fb:70:3d:6c:74:a1:ca:69:77:4d:27:7a:3a:
                    d9:ef:6f:db:64:c4:c9:b4:d4:7d:a8:c6:75:e7:0e:
                    b3:21:b3:6d:92:71:9f:0e:24:6f:e8:1f:4f:0f:d1:
                    e4:99:37:4e:95:63:ad:65:1f:ba:76:d9:c3:1a:45:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:17:64:3D:11:0F:7F:2B:CC:AB:DB:E7:24:90:D3:74:A8:25:45
            X509v3 Authority Key Identifier:
                keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:89:b3:b0:e8:50:27:88:65:a0:ff:bd:6d:e0:9a:ce:d9:5b:
         33:df:ec:11:ce:06:83:50:2f:cc:a0:2c:ed:82:e3:20:56:1d:
         91:19:0e:c4:5a:34:65:b5:a3:42:29:db:2b:a2:c2:df:f8:6b:
         60:71:3f:5b:93:4a:9c:d4:55:6e:41:03:85:c5:a8:45:8e:0a:
         a7:40:1b:51:5c:ff:94:21:d1:6f:72:6d:8a:62:e6:1e:f6:dd:
         85:71:fa:6a:97:de:3a:c3:7d:bb:85:8e:f4:04:e8:4b:0a:13:
         00:0f:20:fc:8c:05:fb:76:e6:0e:45:bd:36:83:fc:25:b7:e4:
         97:ae:84:14:4b:6a:17:29:0b:1f:57:fc:e1:4e:48:d1:49:f1:
         4b:14:82:82:62:b0:73:61:60:ae:dc:60:dc:04:57:4a:32:e1:
         b8:12:8f:8d:c2:fb:5f:13:cd:8f:fa:9b:d9:ec:c7:c0:02:c0:
         93:14:fb:72:b9:6b:f7:c3:c8:89:ac:e7:68:af:a8:16:02:02:
         4d:44:12:c2:07:49:95:da:24:03:fc:3a:85:f5:41:19:94:f0:
         ed:aa:f0:00:6a:9b:2a:cf:f8:04:0a:76:70:0e:4c:a2:0e:6f:
         fa:8f:ab:f8:fd:e5:ea:ea:c6:fd:ca:8d:3d:29:28:96:c0:4e:
         ea:14:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net