Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
File:                     7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json)
Hash identifier:          z704hASK6+ledepztTXByYgN/I8AdlutpS1Po3i14ws=
Subject key identifier:   46:94:87:00:01:9D:29:58:E3:DD:C6:98:83:91:65:E1:11:B4:24:5D
Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD
Certificate issuer:       /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
Certificate serial:       137FDF9A8A602F8DA60969802A724F30E822A366
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
Manifest number:          04C6
Signing time:             Wed 23 Apr 2025 13:42:16 +0000
Manifest this update:     Wed 23 Apr 2025 13:37:16 +0000
Manifest next update:     Sat 26 Apr 2025 19:37:16 +0000
Files and hashes:         1: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: e8yc43ZQPEzbdBihK8Ij9q/MmzC2NhXes9d8NdZo39g=)
                          2: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 0SNOXJv5maedIGBL0Qm9Po7XI+eFbCTVR/NtX0bm6ts=)
                          3: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: JU0Fqn+bNHy7TO2FDGiu0v8Et06ozUzFP/f0/9F2tIA=)
                          4: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: qUMTZOKqFJrYj5YAPgs121X9//L8rpIE4d8u+ioonEM=)
                          5: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Se+JQojVLCUto29ucN5SOimVnmTwAPvqyMOWkGKak7Q=)
                          6: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: nvj4vFogJKPPYgFqYmFWvbmjSSvxwuNwrsXUM+va/jI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl
                          rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7f:df:9a:8a:60:2f:8d:a6:09:69:80:2a:72:4f:30:e8:22:a3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
        Validity
            Not Before: Apr 23 13:37:16 2025 GMT
            Not After : Apr 26 19:37:16 2025 GMT
        Subject: CN=46948700019D2958E3DDC698839165E111B4245D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:af:72:36:62:f0:16:c0:57:7b:da:6f:5c:
                    d5:43:94:af:51:27:55:ac:1f:a6:8e:96:e9:c4:c9:
                    e6:d9:6d:d7:4e:24:d5:68:f9:7b:e5:30:ee:60:a8:
                    c7:27:8a:97:7a:16:11:57:a0:89:85:8b:de:3b:36:
                    4e:16:1e:a0:62:03:ad:9e:3f:0d:2e:26:bc:70:00:
                    24:68:c9:e1:ff:c4:30:31:29:13:12:9f:35:42:73:
                    31:7d:25:6e:00:75:26:eb:a6:70:44:f8:12:a7:be:
                    a6:1f:c1:1d:8d:fc:19:8c:93:ff:3f:43:7d:10:e4:
                    87:65:6d:3e:45:26:01:4e:8e:e2:e6:33:96:b3:0c:
                    60:66:37:6a:0b:55:61:55:8e:3f:b4:aa:e5:d0:98:
                    22:94:30:99:ff:64:fc:34:74:b4:c9:83:bd:3c:36:
                    3d:d1:da:6c:c5:c1:7d:d2:be:8a:a4:d6:06:39:04:
                    62:58:13:3f:5b:01:4a:98:19:2b:39:77:ad:44:28:
                    74:86:be:5f:23:aa:ee:b5:9c:d4:a1:7f:7d:8a:a4:
                    bc:cb:9b:17:e1:4e:ae:97:19:fb:41:66:b7:63:08:
                    21:2b:b1:01:b9:e7:88:33:7d:2b:e0:30:61:48:12:
                    c0:2d:f0:1c:90:5e:83:12:af:35:e4:b8:a1:c2:29:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:87:00:01:9D:29:58:E3:DD:C6:98:83:91:65:E1:11:B4:24:5D
            X509v3 Authority Key Identifier:
                keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0d:9a:69:9d:82:ca:66:b8:94:0f:d6:ca:81:74:fd:e7:bd:
         cd:e0:7a:94:72:70:e4:5b:89:3a:bb:22:8c:17:cf:2b:13:ab:
         d8:30:2a:46:cb:f6:fe:2e:97:bd:2b:b0:5a:7b:5e:3f:72:a7:
         27:c9:8b:16:11:27:f4:8a:bd:9f:b4:93:85:79:d7:12:8b:30:
         a5:88:6c:c0:7a:0f:4b:02:a7:ce:da:5e:cc:a7:06:12:b7:25:
         a7:00:2d:e4:d8:74:55:4c:86:19:c7:7f:27:e6:f6:55:5c:5e:
         bc:73:5f:3c:d9:f8:f2:cc:bf:96:c2:7f:3d:0b:da:be:b6:10:
         b3:59:bc:4a:f8:7c:08:1c:27:e7:2e:fd:94:27:5a:d7:c4:48:
         fc:27:89:01:70:7d:61:fb:46:ee:17:41:94:6b:37:57:dc:be:
         3c:99:6c:47:10:b7:a8:1f:93:2b:6e:94:6a:3a:51:a6:7b:50:
         37:59:3a:47:4a:cb:c5:54:ce:2f:14:ba:d2:6e:d9:da:29:93:
         93:a3:81:ef:f6:56:55:ca:92:72:69:b7:2f:73:41:24:1a:03:
         08:1c:ac:39:5b:ec:a0:f0:c6:49:c3:a5:25:18:f5:a0:03:f8:
         a9:14:02:84:ab:fd:18:52:f3:be:ad:fe:54:88:b2:bc:66:8a:
         a8:35:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net