Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
File:                     37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json)
Hash identifier:          QzAh581d6NtBRgicMRVYDmXy4CJjde+sL+ZytBS9hXo=
Subject key identifier:   07:0F:CC:04:86:37:A5:09:EF:63:97:F5:BF:A0:DB:0B:AB:E2:74:27
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Certificate issuer:       /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial:       4BEFF98949D3308B4906ACED747719561B79AEC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
Manifest number:          01DE
Signing time:             Thu 24 Apr 2025 15:01:03 +0000
Manifest this update:     Thu 24 Apr 2025 14:56:03 +0000
Manifest next update:     Sun 27 Apr 2025 15:40:03 +0000
Files and hashes:         1: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=)
                          2: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=)
                          3: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: mBXIjZF28+1dv0Hkfd5es2t6x8G58KOd3bY+DGjJTGA=)
                          4: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=)
                          5: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=)
                          6: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
                          rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 15:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ef:f9:89:49:d3:30:8b:49:06:ac:ed:74:77:19:56:1b:79:ae:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
        Validity
            Not Before: Apr 24 14:56:03 2025 GMT
            Not After : Apr 27 15:40:03 2025 GMT
        Subject: CN=070FCC048637A509EF6397F5BFA0DB0BABE27427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:6d:cd:8d:e2:7b:e8:e2:83:91:57:c6:a1:
                    05:c6:cc:ad:b0:36:bd:3e:5e:22:69:ed:63:bf:44:
                    6b:04:8c:42:b6:3a:c3:82:f4:35:27:a9:c1:66:19:
                    b7:f7:1c:37:e7:b2:b1:58:27:b5:69:f6:22:8d:fd:
                    3a:87:04:51:24:6d:c5:57:07:49:47:f3:c7:2d:cb:
                    0a:06:b6:ca:44:44:7d:fd:42:c6:67:61:3c:93:81:
                    1f:2b:bb:64:10:42:32:9b:3b:3d:27:33:a0:3c:27:
                    53:85:54:71:2d:22:8c:7b:89:03:b1:92:05:5a:6b:
                    f9:30:be:9a:96:74:47:19:88:c0:3d:fa:d3:b5:43:
                    e8:95:c4:3d:bf:a6:0b:23:1d:c5:e1:a1:b6:9d:30:
                    ac:6f:24:1b:30:94:00:f5:bb:ba:dd:10:37:8a:13:
                    c6:e0:1c:43:67:7d:9e:cd:12:8e:20:dd:4a:0a:5e:
                    47:75:36:fb:9b:d4:bc:0d:2c:9c:e5:bf:b9:b6:b1:
                    ed:b8:5a:63:2c:10:04:c1:2c:4c:7c:aa:ec:93:84:
                    4f:24:aa:18:49:0c:39:ee:6a:10:27:ce:e0:b0:2a:
                    bd:30:ee:e4:de:a4:c7:c9:2b:24:f3:fb:73:b1:dc:
                    90:44:4a:f5:6e:ca:3c:75:69:6f:33:c7:4c:96:d2:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0F:CC:04:86:37:A5:09:EF:63:97:F5:BF:A0:DB:0B:AB:E2:74:27
            X509v3 Authority Key Identifier:
                keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:b2:ed:14:e6:be:5c:fa:79:4e:1b:60:60:53:31:53:11:
         c0:1b:ab:ef:d5:0f:57:6d:17:eb:56:4a:6e:38:99:b6:9d:cf:
         a0:28:0a:f7:78:2b:b0:57:36:07:7d:0f:80:18:cb:67:1e:b4:
         4a:18:f9:76:7a:fe:7b:48:46:44:21:e9:ed:03:87:39:eb:a0:
         0b:a2:e4:64:38:19:10:0f:54:b8:87:0f:7c:93:2f:aa:0b:4c:
         22:5b:e0:ad:15:3f:d0:20:44:b7:f0:7c:df:4e:dc:63:6b:4b:
         39:c3:e5:5d:c7:a2:2f:df:b8:91:9d:2b:ad:25:2d:8c:a2:66:
         22:01:98:ad:b8:8d:1b:2e:a5:0d:38:a6:1b:69:cd:de:a0:51:
         0f:66:37:c3:4d:d9:7c:29:f4:04:3b:04:a8:d2:f5:4a:e7:38:
         07:20:10:cd:2c:0e:a3:f8:b3:5b:fe:ca:65:fd:ff:e8:27:a6:
         2b:2a:03:64:2e:e5:69:47:c5:73:15:e2:31:f5:0b:f5:2e:94:
         0e:c4:5f:6f:47:15:1d:6b:ab:ac:62:3a:3f:db:68:e3:6c:01:
         a7:24:46:df:62:e6:5f:93:7b:21:02:b3:b5:1e:b2:d7:ae:e2:
         31:f8:d1:75:1f:02:23:17:e7:81:ec:f5:86:03:06:e5:56:63:
         f2:25:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net