Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft
File:                     3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json)
Hash identifier:          eshySXQiMMJrNKaq7QLOb+zaSbvxXFLhCvfeRxs1EDY=
Subject key identifier:   F9:4F:DD:F9:B6:17:B5:A1:06:C8:82:6B:9E:F8:2C:02:39:01:A1:48
Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5
Certificate issuer:       /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5
Certificate serial:       3FBAA3A289BD66F1C4EE0661663BC9CCE0D8B689
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft
Manifest number:          34
Signing time:             Wed 23 Apr 2025 11:00:45 +0000
Manifest this update:     Wed 23 Apr 2025 10:55:45 +0000
Manifest next update:     Sat 26 Apr 2025 20:51:45 +0000
Files and hashes:         1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=)
                          2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: DdEUQioqwwO6iLVa1+0E0nXxFXNlyfK96lC5PuaiGX8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl
                          rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ba:a3:a2:89:bd:66:f1:c4:ee:06:61:66:3b:c9:cc:e0:d8:b6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5
        Validity
            Not Before: Apr 23 10:55:45 2025 GMT
            Not After : Apr 26 20:51:45 2025 GMT
        Subject: CN=F94FDDF9B617B5A106C8826B9EF82C023901A148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:23:a7:26:3e:9a:a8:06:00:95:c8:8e:3b:
                    3c:0d:e0:fd:e7:3b:2e:98:20:f6:25:18:c7:f6:44:
                    61:b5:a7:96:2c:79:c5:d3:6d:71:82:1c:4b:5f:11:
                    a1:c1:ca:76:cd:16:ca:1c:74:45:ff:b3:27:5a:f7:
                    9f:37:c2:70:74:6c:eb:9f:34:0d:d7:18:16:93:9d:
                    29:f7:16:7b:1c:a5:44:01:37:d9:bc:b6:6a:47:fd:
                    dc:82:8e:ed:64:86:38:13:b2:59:15:88:46:6e:1e:
                    9c:80:4d:b9:f7:df:9f:42:77:1f:b3:25:c2:f9:2c:
                    d7:49:e7:04:98:85:1b:51:d8:89:b0:91:7b:b9:d4:
                    ec:4e:0c:d1:f0:36:b7:7d:1b:d2:72:a9:e0:85:9e:
                    83:cc:31:2c:99:b7:37:ec:8f:40:e9:86:95:6b:66:
                    2c:09:b6:45:ac:a4:5b:84:80:b0:43:be:8c:39:87:
                    6a:29:64:00:45:b1:8f:6d:4c:a2:d6:b7:c9:c4:c6:
                    4f:e1:fd:a0:45:74:aa:f5:26:88:54:d1:c8:8d:2a:
                    f4:6b:b3:b6:97:f7:d8:bb:1b:85:08:32:79:1d:72:
                    18:1e:05:88:1a:90:cd:9d:76:09:59:09:f5:d7:7f:
                    f4:b1:ee:94:3d:0b:ab:11:78:a0:48:74:c9:60:16:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4F:DD:F9:B6:17:B5:A1:06:C8:82:6B:9E:F8:2C:02:39:01:A1:48
            X509v3 Authority Key Identifier:
                keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:8d:93:03:2d:9a:69:9c:8e:b7:03:d5:f8:b9:01:77:3c:
         4a:17:5b:1e:02:f9:eb:f9:44:5c:f4:a4:20:f7:03:a3:e2:c9:
         bc:f2:d8:ef:a8:72:4d:65:dc:3a:68:e2:c3:38:8e:86:53:9e:
         86:58:d2:2d:da:56:cc:80:50:8e:5b:9b:fa:d0:ad:53:df:e8:
         2f:5f:6c:3d:7c:e0:38:5e:2b:df:19:c0:1a:1c:02:48:88:1e:
         b3:3b:e5:61:85:6b:b5:95:e2:93:06:41:19:65:42:fb:9f:26:
         b8:95:13:24:b2:03:a2:ac:2d:39:82:81:aa:65:3c:40:fe:71:
         12:fe:75:8d:4b:ba:05:c8:ea:29:ed:9d:46:97:e9:88:6c:56:
         16:de:0d:bb:9d:d1:3d:5f:d1:53:b4:58:2a:b8:98:8f:e4:7c:
         7e:1a:8c:66:97:b6:b2:5f:dd:4b:0a:84:55:e9:6d:47:1d:47:
         2d:8f:87:be:10:91:a3:0a:90:35:ae:e2:30:a6:ba:e8:c6:4b:
         96:d5:13:37:6b:8e:27:28:af:1f:95:fb:93:ef:34:12:4d:f9:
         b7:12:72:2a:e8:6f:4c:4b:d7:ac:1d:fb:03:5d:75:74:8e:2f:
         1d:8f:a0:79:aa:62:8a:ae:8d:c3:7f:1d:d0:a6:40:d1:16:84:
         af:08:99:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP7qjoom9ZvHE7gZhZjvJzODYtokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF
RjEzMjlCNTAeFw0yNTA0MjMxMDU1NDVaFw0yNTA0MjYyMDUxNDVaMDMxMTAvBgNV
BAMTKEY5NEZEREY5QjYxN0I1QTEwNkM4ODI2QjlFRjgyQzAyMzkwMUExNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDetyOnJj6aqAYAlciOOzwN4P3n
Oy6YIPYlGMf2RGG1p5YsecXTbXGCHEtfEaHBynbNFsocdEX/syda9583wnB0bOuf
NA3XGBaTnSn3FnscpUQBN9m8tmpH/dyCju1khjgTslkViEZuHpyATbn3359Cdx+z
JcL5LNdJ5wSYhRtR2ImwkXu51OxODNHwNrd9G9JyqeCFnoPMMSyZtzfsj0DphpVr
ZiwJtkWspFuEgLBDvow5h2opZABFsY9tTKLWt8nExk/h/aBFdKr1JohU0ciNKvRr
s7aX99i7G4UIMnkdchgeBYgakM2ddglZCfXXf/Sx7pQ9C6sReKBIdMlgFhzBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+U/d+bYXtaEGyIJrnvgsAjkBoUgwHwYDVR0j
BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0
NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz
MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5
ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2
QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABH/jZMDLZppnI63A9X4uQF3PEoXWx4C+ev5
RFz0pCD3A6Piybzy2O+ock1l3Dpo4sM4joZTnoZY0i3aVsyAUI5bm/rQrVPf6C9f
bD184DheK98ZwBocAkiIHrM75WGFa7WV4pMGQRllQvufJriVEySyA6KsLTmCgapl
PED+cRL+dY1LugXI6intnUaX6YhsVhbeDbud0T1f0VO0WCq4mI/kfH4ajGaXtrJf
3UsKhFXpbUcdRy2Ph74QkaMKkDWu4jCmuujGS5bVEzdrjicorx+V+5PvNBJN+bcS
cirob0xL16wd+wNddXSOLx2PoHmqYoqujcN/HdCmQNEWhK8ImY0=
-----END CERTIFICATE-----
Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net