Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft
File:                     11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json)
Hash identifier:          Bs9UMXpzrhvojMQwC3yMdIUxLxf96sUtwmdQSIk8qNs=
Subject key identifier:   72:D6:77:AE:4A:63:B2:A9:6D:F6:CD:75:AB:39:3C:ED:2D:C6:CE:7E
Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
Certificate issuer:       /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Certificate serial:       0174861462069CFAA887AA1C8A9DD50D84CF769E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft
Manifest number:          01DE
Signing time:             Fri 25 Apr 2025 17:30:00 +0000
Manifest this update:     Fri 25 Apr 2025 17:25:00 +0000
Manifest next update:     Tue 29 Apr 2025 04:37:00 +0000
Files and hashes:         1: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: n2629TM2Mi+u3aQKLNFBU1bgTuQovVtVqjfx0Z7/fDQ=)
                          2: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: Z2jd9G10fHaMevVP9NlS8jfuWDcvrQjmeLhKG7eB9Co=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl
                          rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:74:86:14:62:06:9c:fa:a8:87:aa:1c:8a:9d:d5:0d:84:cf:76:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
        Validity
            Not Before: Apr 25 17:25:00 2025 GMT
            Not After : Apr 29 04:37:00 2025 GMT
        Subject: CN=72D677AE4A63B2A96DF6CD75AB393CED2DC6CE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:8a:92:aa:75:7b:fd:13:04:d7:be:4a:93:
                    4e:63:6a:30:b5:fa:b4:a6:23:d0:9e:23:2a:a5:d2:
                    83:89:69:1d:8e:cd:b4:35:fb:92:30:4a:cb:5f:c7:
                    6c:ff:d3:fa:fa:1a:95:6b:17:a8:bd:b6:f4:7e:b7:
                    4c:2c:f0:e7:84:0c:50:7f:2e:d2:77:fe:48:f8:6b:
                    e9:b5:6d:33:10:84:58:3a:e1:d6:87:5e:6c:70:b8:
                    fb:f1:0f:62:a1:ad:08:48:2a:d3:a5:df:29:dc:50:
                    6b:fb:60:ce:f9:ec:b2:42:3b:7c:9c:71:f1:18:12:
                    c8:3b:58:fa:2e:08:99:6a:92:75:4e:e9:be:cd:97:
                    76:2d:83:65:39:9c:ca:ee:f5:35:ee:0b:07:c5:45:
                    3e:d2:9a:ad:c9:5c:97:4b:55:19:d5:d7:55:21:74:
                    dd:cc:39:3c:09:27:bf:7c:6c:32:39:05:52:d4:87:
                    44:44:66:7d:57:3f:f3:a8:11:08:10:bf:02:d1:10:
                    76:be:bc:05:18:94:4e:a3:1d:eb:67:24:02:3b:7e:
                    8a:81:fc:f0:00:fd:cd:fb:43:54:20:bb:52:98:f6:
                    06:68:c8:df:b4:38:12:c4:19:09:db:52:5f:15:ac:
                    88:07:cc:91:4c:b5:ce:42:58:ce:1b:85:6d:af:28:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:77:AE:4A:63:B2:A9:6D:F6:CD:75:AB:39:3C:ED:2D:C6:CE:7E
            X509v3 Authority Key Identifier:
                keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:aa:17:d9:2f:56:f8:55:9d:23:d9:41:32:fa:f1:fd:76:f9:
         97:3c:cd:96:37:e7:4a:4f:b4:26:2f:29:11:6e:d8:18:10:b2:
         6f:22:5e:ce:b9:6a:a0:42:ae:ef:3e:79:20:2f:4a:af:a0:27:
         1a:9b:e8:09:82:0e:60:75:99:be:79:41:d8:aa:98:51:69:19:
         c7:f1:ee:24:c5:3b:7a:11:f0:35:a5:a1:f8:26:51:a2:65:17:
         41:17:d0:6d:b0:c7:6d:a0:67:43:1b:66:11:ba:89:ac:8c:e0:
         69:24:ab:03:19:30:78:8b:aa:f6:ba:e1:b7:e4:49:ef:cc:33:
         e9:44:fe:65:bd:59:82:76:2a:91:5d:d7:da:9f:b9:e2:77:88:
         10:4b:f0:83:b1:ac:51:54:e2:20:b8:24:61:f4:a1:3b:3c:3f:
         10:24:ea:a9:1c:34:8c:f6:05:cf:6a:45:68:97:fd:51:71:9c:
         33:ac:7f:58:6a:16:f5:9b:6f:29:aa:e2:ca:61:b6:9f:49:bc:
         b5:41:d0:2a:47:c4:8b:d7:60:14:63:65:94:ea:42:f5:dc:12:
         03:1b:e6:c0:c3:2a:ea:5c:1c:16:e5:ac:f2:67:00:09:0f:00:
         f2:b8:e5:62:2f:1f:8f:92:31:ba:f9:04:ae:39:d0:ba:c0:4a:
         d6:3c:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net