Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
File:                     3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json)
Hash identifier:          Aog8JV7JCBeLjebalPSCXc5oXomgLRdaTAV8Z3QbtU4=
Subject key identifier:   A1:E2:0C:FD:0B:D7:F6:BE:14:48:BA:29:4B:0A:2D:9F:22:BE:AB:F8
Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A
Certificate issuer:       /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
Certificate serial:       2ECCD05D2DEB87327F72310CC75EBBE329A05FB3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
Manifest number:          01F9
Signing time:             Thu 24 Apr 2025 00:04:09 +0000
Manifest this update:     Wed 23 Apr 2025 23:59:09 +0000
Manifest next update:     Sun 27 Apr 2025 03:11:09 +0000
Files and hashes:         1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: wVRb/hhWbnMDFPxCNLvJynoFELXMVdYHUPAAmqv5U3g=)
                          2: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: qEESKP1G6kL7skHKdUKTS2xIl/KiWLXe6x+5+B4bun4=)
                          3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: mpWFCHVjj+zZBz81oEax+KJdChdml8WVupB6NX9bDqg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl
                          rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 03:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:d0:5d:2d:eb:87:32:7f:72:31:0c:c7:5e:bb:e3:29:a0:5f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
        Validity
            Not Before: Apr 23 23:59:09 2025 GMT
            Not After : Apr 27 03:11:09 2025 GMT
        Subject: CN=A1E20CFD0BD7F6BE1448BA294B0A2D9F22BEABF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:11:74:48:5b:a9:c5:32:b5:26:ea:cc:aa:
                    9d:a0:b6:2a:d7:c4:68:19:7c:90:f4:1a:21:1d:af:
                    f0:b5:2f:34:46:fd:7e:9d:5e:1e:4e:31:51:85:bc:
                    34:15:1e:40:78:98:b0:d8:7f:5f:8a:db:07:dd:fe:
                    e3:56:47:b7:2b:63:9f:81:61:52:ea:3b:69:ac:a8:
                    71:eb:56:f7:47:93:15:a9:32:36:a0:0a:66:a9:31:
                    29:eb:5d:75:98:ef:07:ef:c4:e4:8c:38:b0:6b:b6:
                    56:b0:17:d4:10:a4:72:cf:91:dd:d8:29:28:77:25:
                    ac:09:8c:96:57:5d:1b:4c:d6:32:bc:af:d1:bd:5f:
                    0a:2f:38:02:af:39:c7:3b:8a:68:d1:e5:1d:b2:c8:
                    e0:28:ed:4b:3e:58:a3:d1:e8:45:db:16:99:68:e0:
                    21:7d:c8:cf:28:db:4b:06:81:5b:96:ea:8d:38:14:
                    93:62:f7:00:30:e1:ee:a3:fa:ca:05:72:41:b1:40:
                    35:88:55:2a:a2:3f:39:e8:3f:56:32:a2:0c:7b:06:
                    ac:f1:5e:32:cf:a5:58:b9:f3:13:ce:77:24:3e:a4:
                    46:f4:bd:ab:5d:76:7f:40:30:3a:c3:f1:15:cb:d8:
                    02:c7:d7:2c:0c:ae:3a:b2:15:3b:87:41:84:93:fd:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:0C:FD:0B:D7:F6:BE:14:48:BA:29:4B:0A:2D:9F:22:BE:AB:F8
            X509v3 Authority Key Identifier:
                keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:11:b3:93:36:e0:e7:e8:98:c8:8c:ae:a4:2c:fa:04:5a:
         27:43:5f:83:b1:23:4b:0d:e8:c4:18:f3:52:59:4d:56:d9:27:
         e7:e0:e6:78:1c:67:f3:b6:21:86:55:44:c4:c5:a7:57:41:4d:
         d4:35:87:0d:b4:ba:78:b4:f3:73:23:f6:e2:2e:02:22:40:90:
         0a:72:5c:ff:16:cc:09:37:b1:bf:e5:bb:d2:d1:1d:34:71:22:
         aa:ec:8e:65:6f:26:a9:c6:60:bf:42:54:49:ee:48:d9:9e:c7:
         eb:43:c4:d9:57:10:66:d5:c3:88:f4:22:7a:5c:4b:e1:56:6e:
         b3:19:91:b4:47:c1:69:0f:8e:7c:33:da:49:fe:64:17:83:56:
         de:60:a6:46:05:53:79:8c:6d:5f:6e:2d:76:c0:9b:31:b5:8e:
         8c:4e:d1:38:56:6f:b2:1c:af:c6:c9:b7:3c:e5:19:5f:ba:59:
         ec:a7:ef:ad:38:36:4f:b5:f8:76:3b:67:35:78:6e:c6:08:de:
         42:5a:ef:1a:bc:16:a2:bf:35:00:ed:4b:31:5a:a6:ab:4e:08:
         9e:1a:08:9e:6d:84:1c:72:37:36:53:6b:38:02:7b:47:a5:40:
         40:10:5d:f2:53:5d:9e:fe:5f:7d:7c:35:de:33:43:c8:1a:ec:
         b5:6e:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net