Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
File:                     25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json)
Hash identifier:          zXHxP3wTLEy3K4vGfDTtOgGZaxODFBzykYP0AvDVMa0=
Subject key identifier:   CA:EA:DB:57:FB:DA:85:FB:58:DF:A6:BB:98:83:AD:BB:61:79:6A:13
Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0
Certificate issuer:       /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0
Certificate serial:       630FCB22939459B7B764518DA029FEDE63EDB51B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
Manifest number:          02C8
Signing time:             Fri 25 Apr 2025 04:20:44 +0000
Manifest this update:     Fri 25 Apr 2025 04:15:44 +0000
Manifest next update:     Mon 28 Apr 2025 16:17:44 +0000
Files and hashes:         1: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: QAmyr+BrVNVkMRRm1F3Bsd5Wr6b2pdDhAdoQtLGZn/Q=)
                          2: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 5QR0rWF2IYw3MMT+ABenqub20374tAd3/MqhQ2MqKAw=)
                          3: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: MWqeWjmTixAOn+Gc9tFKycHUfhr7BF4hgDw5O4FK2PY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl
                          rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:cb:22:93:94:59:b7:b7:64:51:8d:a0:29:fe:de:63:ed:b5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0
        Validity
            Not Before: Apr 25 04:15:44 2025 GMT
            Not After : Apr 28 16:17:44 2025 GMT
        Subject: CN=CAEADB57FBDA85FB58DFA6BB9883ADBB61796A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:50:ff:8d:fe:f5:ab:d9:78:ae:f3:95:ca:
                    83:74:e3:ce:e3:fd:8a:9b:29:e4:06:03:61:dc:2a:
                    8d:40:1e:26:cf:32:9e:b0:02:7f:cc:be:3f:75:ae:
                    61:bc:ed:bc:fb:ed:c7:bb:c2:c1:62:c2:89:ec:c4:
                    a6:49:26:71:86:b6:23:49:c9:eb:6a:47:a3:a8:bc:
                    03:c0:d5:77:7f:bd:82:d0:bf:b3:97:74:7b:5b:0c:
                    a9:03:73:a6:41:e3:c8:cd:ce:58:4c:d5:ee:bd:3a:
                    12:5b:5d:b1:9b:5b:ae:22:8a:1d:1f:bd:1f:78:28:
                    4f:17:e9:1d:a2:07:9d:71:99:c8:b6:e6:0a:e9:6a:
                    a0:3b:17:01:69:98:68:be:0a:5d:f5:b1:ac:2e:6b:
                    8f:f2:e1:56:87:41:62:2b:e5:2f:5b:2b:39:ec:fe:
                    0b:6d:04:6a:e9:04:f8:f0:92:a0:d0:70:bb:ba:7a:
                    3e:5d:6d:cd:3b:04:4e:d5:b2:82:c2:29:b3:e6:5b:
                    1c:18:99:f0:fa:4a:5d:45:fe:90:bc:80:94:46:fd:
                    71:20:79:b9:bd:37:6c:80:55:fc:93:30:f9:53:50:
                    5b:52:ff:58:60:e9:c1:26:0f:97:aa:87:cf:7f:e0:
                    b5:9e:1f:fb:20:bd:05:21:ab:b3:b2:99:ed:29:9e:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EA:DB:57:FB:DA:85:FB:58:DF:A6:BB:98:83:AD:BB:61:79:6A:13
            X509v3 Authority Key Identifier:
                keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:02:2e:a2:26:80:0e:82:83:cb:11:aa:a1:d5:64:01:4a:
         cb:84:8d:aa:54:64:89:1e:d0:6f:c3:60:df:cc:53:54:94:fa:
         8e:0e:80:57:ff:5d:50:a3:5e:42:dd:44:8f:57:a7:b5:15:b5:
         d6:8d:5c:61:61:bc:67:08:ba:d3:01:b9:f6:05:94:48:01:32:
         ef:c5:c0:d1:d9:e3:1e:49:fd:13:70:3d:3f:57:f5:d5:7e:6b:
         d0:be:25:39:28:e5:53:9e:45:35:ad:c4:b4:96:ac:12:83:5f:
         86:e6:49:59:24:1e:eb:8a:b9:27:ef:5b:cb:dd:24:f1:13:5a:
         cd:02:bb:fd:1e:21:8b:ef:b7:fe:27:19:c9:32:1a:71:1b:68:
         95:57:f3:5a:a8:53:dc:22:1d:cd:82:65:f0:bb:91:0f:8f:de:
         ac:81:8b:77:13:ab:dc:9a:f8:4b:33:49:cf:09:d5:42:2d:8e:
         6b:87:16:c0:c2:98:74:0d:dd:95:e0:d8:23:8d:93:ba:2d:bc:
         04:9b:da:04:84:ec:f4:2d:bd:66:30:1c:b5:da:2f:57:6b:51:
         dd:51:aa:e3:49:33:b5:a7:ff:cd:df:c4:cc:a5:dd:38:ac:e0:
         f0:7e:9b:1c:38:15:a7:0e:d3:4a:c5:3a:41:06:ac:dd:53:04:
         f2:d4:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net