Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File:                     DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier:          tPVhSLYNl4GLhoRVj4IX9gY7uTaPfjS9Z4XMNeeqG2w=
Subject key identifier:   58:8D:8A:B0:53:34:BD:73:9F:A0:37:40:9F:52:6D:97:FE:3D:4A:91
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       03A2942787C166D6146A454227E2B759E3FB31F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number:          01CB
Signing time:             Thu 24 Apr 2025 17:40:53 +0000
Manifest this update:     Thu 24 Apr 2025 17:35:53 +0000
Manifest next update:     Mon 28 Apr 2025 02:39:53 +0000
Files and hashes:         1: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: e2HqifDE2zqm7hc6mVGwgym4teEIVro1P/Dib1/JCA0=)
                          2: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: gnvkAYb2umU0griV4VC5cvG1nJTwGT+tn0HlX2+7sXk=)
                          3: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
                          4: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: Z9IAhIGPSW0D8q8SOrPrTN5/ox6RaXTEZEZk4SdKFWk=)
                          5: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: pmDuIeKiCmHuPfFT0QmPrlI3I9HfBdnX8d/IZN7sKf4=)
                          8: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
                          10: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=)
                          11: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: sic167d6uDgMGkobFwky0f/36JQQxAskztr9NEz1SIc=)
                          12: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
                          13: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
                          14: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a2:94:27:87:c1:66:d6:14:6a:45:42:27:e2:b7:59:e3:fb:31:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Apr 24 17:35:53 2025 GMT
            Not After : Apr 28 02:39:53 2025 GMT
        Subject: CN=588D8AB05334BD739FA037409F526D97FE3D4A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:76:44:3b:4f:e9:23:91:f4:7a:be:fb:2e:
                    02:e0:ac:8e:48:2b:99:e4:05:4b:bf:2b:7b:b9:41:
                    e0:8a:2c:ec:41:09:3a:75:88:af:f1:3f:02:cb:4d:
                    12:a8:1c:a9:2a:48:95:6d:fd:6a:6c:6a:7d:ee:51:
                    5f:fa:b1:25:b1:f1:db:cb:16:29:6e:e5:9b:9a:f6:
                    2f:b2:59:78:22:14:28:00:a9:1a:5e:a3:50:95:a3:
                    8f:30:b8:5a:a7:31:29:93:05:bc:a5:d3:51:9b:7f:
                    d2:4c:b5:59:2a:63:f4:48:f9:6d:2e:aa:98:bc:26:
                    d2:ec:96:4c:df:6d:88:33:0e:e4:27:9f:58:9a:7e:
                    53:39:27:08:fd:96:dd:cf:79:f3:0f:71:70:13:af:
                    8e:6d:17:fb:d8:46:d4:b6:89:dc:2c:97:27:5f:6d:
                    d1:9c:8a:8e:bd:4c:7c:e7:c5:f0:f1:be:c2:38:71:
                    3d:ba:5c:94:68:ba:b0:28:3b:c8:c9:55:46:45:fa:
                    0c:f6:0e:4c:88:f4:d9:4e:ad:c2:fd:09:1c:39:b7:
                    95:a0:2c:1c:15:ed:5d:50:7b:28:7f:bd:6e:6b:13:
                    c8:e7:dd:2d:e5:04:51:25:11:15:df:0c:c6:e9:67:
                    05:af:70:ed:f9:55:9e:77:69:df:18:bc:af:14:42:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8D:8A:B0:53:34:BD:73:9F:A0:37:40:9F:52:6D:97:FE:3D:4A:91
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:53:5c:4a:f0:93:d8:0f:a7:d3:2a:40:48:8c:05:c5:89:62:
         69:c1:3d:9d:3e:82:e8:cc:1b:13:de:db:c4:fd:9d:14:82:ce:
         ef:4f:3b:17:ee:c6:18:8f:5b:5d:76:7a:71:70:74:40:05:20:
         57:de:64:bb:25:8e:ce:fb:32:d9:49:5c:90:e8:b5:ed:0b:6c:
         e7:92:71:6c:7f:9a:8c:42:6a:c6:58:6b:77:b2:94:4c:a2:16:
         a4:4f:69:4e:56:36:df:c9:b5:03:49:5b:ab:ed:f7:74:9b:09:
         07:3a:e8:b2:7f:6c:ae:34:07:4f:f8:59:b6:c4:65:23:43:c6:
         e5:a4:72:af:57:8b:41:b9:26:f4:89:3c:98:f2:ea:30:a4:4f:
         9c:e2:46:8d:83:61:9b:f4:ce:1e:9a:7c:f7:7f:89:13:b8:a3:
         cb:4e:9e:dc:ae:cd:98:9d:af:94:69:dd:c8:92:4f:70:cf:df:
         ac:84:4f:2a:61:f8:39:2c:5e:95:1a:b1:53:d9:9c:5d:42:5b:
         63:37:12:26:e8:4b:19:62:64:6e:ed:28:3e:43:7a:45:fe:ab:
         e3:9f:4a:b9:78:5e:3c:92:b0:23:ab:d9:51:a6:6d:d2:47:ac:
         4d:f2:26:b3:98:ba:21:ca:84:4a:6e:a5:a6:5c:02:70:72:28:
         d5:43:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net