Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
File:                     A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json)
Hash identifier:          nBvboOZYy9aBYS9f5CxghWhdk05DFWMjmhbEcX3rHbM=
Subject key identifier:   94:B9:69:6B:25:00:9B:2F:47:11:A4:E9:7D:9C:D2:43:97:8F:0A:48
Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
Certificate issuer:       /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Certificate serial:       6300B198B6132ECA06724F9ED8C96A12AE6FB379
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
Manifest number:          CB
Signing time:             Thu 24 Apr 2025 16:21:32 +0000
Manifest this update:     Thu 24 Apr 2025 16:16:32 +0000
Manifest next update:     Sun 27 Apr 2025 17:43:32 +0000
Files and hashes:         1: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=)
                          2: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=)
                          3: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=)
                          4: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: ls3iOiE8pMaXXLf49Och4PdSVNUotX/28q7HnibKdhU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl
                          rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:00:b1:98:b6:13:2e:ca:06:72:4f:9e:d8:c9:6a:12:ae:6f:b3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
        Validity
            Not Before: Apr 24 16:16:32 2025 GMT
            Not After : Apr 27 17:43:32 2025 GMT
        Subject: CN=94B9696B25009B2F4711A4E97D9CD243978F0A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:1c:ed:60:cb:9c:e2:e7:50:74:5f:ac:a2:
                    d5:f9:29:87:62:bd:21:8f:8b:99:7e:4e:1e:16:4c:
                    1c:9c:ee:92:54:d8:30:98:da:91:b9:3c:9a:f7:76:
                    76:48:17:cb:ea:64:a8:0c:22:9d:fa:3c:b8:b0:61:
                    1d:05:65:17:90:42:67:d2:e8:fc:41:58:37:92:74:
                    89:56:11:ac:77:9c:b0:be:9d:5b:99:f2:5f:7d:ba:
                    fb:98:03:f7:37:01:a6:12:f3:59:4f:98:3a:2b:53:
                    db:35:fe:15:3d:65:26:4a:6b:0e:13:5a:30:d4:b7:
                    95:a6:eb:d7:c8:2a:df:8e:f7:44:cc:06:7f:1b:30:
                    3b:89:e5:63:3f:47:2b:eb:e6:27:8e:4a:35:62:a3:
                    25:da:a2:8d:b0:06:83:1a:82:bb:9e:e2:2a:ac:4e:
                    79:bb:10:05:4a:4b:be:69:51:36:78:bb:60:ee:c0:
                    17:50:8b:32:50:86:ec:b8:1d:9e:9f:71:4d:c3:78:
                    f6:d7:eb:c2:2f:8f:8e:51:8e:3f:ef:e5:50:4f:bf:
                    99:ae:73:8d:18:84:0f:d4:a3:46:cd:0f:d8:56:4d:
                    24:31:e0:36:87:74:69:e1:87:3a:4a:85:d5:9d:21:
                    ce:b7:46:d4:2e:c4:0b:43:0b:96:54:5b:a4:04:ca:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B9:69:6B:25:00:9B:2F:47:11:A4:E9:7D:9C:D2:43:97:8F:0A:48
            X509v3 Authority Key Identifier:
                keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:cd:32:28:3c:cb:18:3f:0c:ab:07:fa:7c:f0:43:f6:6e:01:
         61:a6:c4:d5:8d:a7:e6:b7:84:3d:67:cf:7a:2f:21:52:4c:32:
         e3:90:98:56:f3:e5:f3:58:a8:7d:66:7e:a4:63:3c:17:79:b7:
         0d:35:35:33:fe:e9:af:12:a7:6c:88:3a:11:90:41:fd:cd:2c:
         3b:48:10:44:ae:70:36:f7:ff:2c:82:57:88:0d:f3:73:55:4c:
         75:c4:ee:11:a0:72:86:45:ed:3e:7a:02:5d:29:a4:ee:ed:17:
         f9:b9:dd:42:23:8e:22:ca:a1:c5:2e:25:cc:8a:03:24:91:22:
         ec:7f:81:28:53:ed:ba:e4:37:39:e7:07:56:6c:a8:a8:f3:6d:
         ea:a9:9c:46:7a:69:83:d7:f7:31:79:96:48:66:c7:54:b8:ba:
         e3:c4:6c:24:8c:db:9e:ad:c3:83:d7:30:6d:91:37:86:66:50:
         3b:fc:d7:ca:de:65:11:69:1e:0b:10:21:8a:d7:c3:39:2f:47:
         e6:f8:f4:c0:43:33:45:d4:5c:58:16:df:b8:0f:ef:71:af:7d:
         cb:a8:11:8b:9a:cc:ce:30:15:7c:b3:89:77:03:56:03:16:67:
         92:a8:19:5c:e2:a4:30:72:d4:44:79:74:78:60:18:dd:90:f8:
         3f:4b:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net