Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File:                     FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier:          SDAAIX9+T/rKyy2iIPGoz0orIC/HnJEq6rl4tcaRtdI=
Subject key identifier:   CD:26:69:EE:7A:83:32:36:04:3D:DC:8E:36:3F:2D:44:62:2B:E8:D2
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       247D04FFE9DEBE368F90696893CB7DCF6D4C5A96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number:          028A
Signing time:             Thu 24 Apr 2025 06:20:58 +0000
Manifest this update:     Thu 24 Apr 2025 06:15:58 +0000
Manifest next update:     Sun 27 Apr 2025 14:33:58 +0000
Files and hashes:         1: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: VZwDewAsxwwfePzp0qRdTXSl6r6rgS1qxxsBlVs1abM=)
                          2: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
                          3: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: 8x5cylsb85iKjqZwTegkYaHo7iFoiR+a4FpgbSON6KI=)
                          4: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
                          5: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: bjLKcE6uyYPhJZ29YifTXHBYInxuCRJ71wvo0zdxJPg=)
                          6: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
                          7: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: bs0ZMOoWFJzZsSzRHXIPfE50E27zzOl01UAYg6gx044=)
                          8: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: ZZpQllrHWfXo8o8D2sCJ3pB5jUWAf/wTgvoQBwbAr+E=)
                          9: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: AwyhgoC9SnkiONSyyarxojN2GzihXUBvalkihTTc9zE=)
                          10: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: LZiLGSJdIHDnXMLX3SUdSUGcn99p7H2DzXggJdnkwkE=)
                          11: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: 50O5uNlbOkY1l/rUhqCb/dq0Q5p/vt2WkECQ0oSMMmU=)
                          12: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: vUtKxLKXTfruRLMlOvpg8rz9eUIDHFfVkTATVb94ii4=)
                          13: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: LNeaS083UOlp4LUdDeQ2gGXYYeK9bcYJQvzUhUQt9Vs=)
                          14: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: f/PfUh13qwQbqBOuR7Y1xgR/xJQ98pR+42yK2Mrg59s=)
                          15: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: /nt77PAEWl7VykddnVbcJDci8AanpKq8RsOk21Gx/Ns=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:04:ff:e9:de:be:36:8f:90:69:68:93:cb:7d:cf:6d:4c:5a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Apr 24 06:15:58 2025 GMT
            Not After : Apr 27 14:33:58 2025 GMT
        Subject: CN=CD2669EE7A833236043DDC8E363F2D44622BE8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:83:f4:36:14:cb:5a:5e:08:b1:b3:99:75:
                    59:5f:58:da:bc:f8:ed:ac:37:25:60:cd:c7:67:b1:
                    0a:55:c5:cd:10:2b:1a:43:84:db:13:bc:c6:95:0a:
                    34:70:9d:21:f2:f2:af:26:e6:77:ae:bb:9b:20:5b:
                    fc:79:7a:9c:63:5c:07:30:ee:a7:88:da:a4:c2:2f:
                    05:ce:1b:4a:93:bc:5a:3c:90:ec:82:86:77:82:9b:
                    0e:ed:a4:76:05:f1:a5:48:8d:7c:db:c3:1a:78:94:
                    84:b6:ba:7d:97:49:75:1e:ce:e2:0e:3f:8c:90:cb:
                    04:80:2b:f9:ba:b1:57:c3:03:e1:14:25:95:b4:d0:
                    a4:73:54:39:98:88:b4:3e:44:a6:9e:b7:7b:d9:18:
                    30:1e:10:f6:a4:99:13:25:e0:a6:ab:e4:15:95:b1:
                    0f:ef:f6:49:d2:31:e3:75:d8:e9:8f:46:4c:3c:b9:
                    78:75:61:9a:03:b3:1b:14:e9:5c:9b:f6:96:a5:32:
                    ff:50:09:6d:99:9f:0b:a0:af:f4:29:a4:63:38:b7:
                    50:c7:19:eb:a4:0d:e0:c9:b6:02:3b:78:7c:52:85:
                    ba:6c:40:1c:ac:fe:95:57:c0:90:76:ea:34:25:a0:
                    c1:74:a6:db:55:fb:2f:51:a5:4f:97:aa:a9:7c:6a:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:26:69:EE:7A:83:32:36:04:3D:DC:8E:36:3F:2D:44:62:2B:E8:D2
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:d3:74:39:4a:1e:a5:4d:30:6d:af:10:10:6b:6c:95:c2:
         d7:bd:9f:7b:78:86:89:2d:f5:34:f9:49:27:bf:b1:72:63:6f:
         56:25:ca:60:c3:f2:f7:fd:8f:df:b8:a9:ea:04:58:33:57:ce:
         ba:f2:c1:cf:cb:d9:c2:2f:64:5e:ef:be:ad:e2:8f:34:4e:2b:
         ee:cd:73:b4:00:e5:33:62:bf:fb:79:df:53:45:14:29:d2:91:
         94:fd:1a:5b:c6:d1:34:5c:cd:b5:1f:55:02:1f:2c:86:1b:fe:
         be:aa:bd:f6:e2:f2:7c:7b:06:dd:05:e6:50:4f:a4:31:22:e8:
         43:7a:4a:dc:09:a3:a4:19:16:fc:19:ea:29:f1:30:84:b1:58:
         26:04:62:a2:33:42:6e:d4:bc:87:b5:d9:13:9f:71:c5:9c:d5:
         3c:69:67:3e:96:b7:5a:c8:69:84:37:59:1b:eb:3e:00:76:b1:
         86:c1:dc:bd:5e:1a:c9:68:b6:e1:f3:6a:d8:af:2f:a0:d9:6c:
         bb:56:5f:90:ac:04:dc:60:e3:85:cf:75:e8:f3:e9:37:45:68:
         c9:4d:27:af:fa:af:b7:9c:b6:99:41:69:3a:a4:05:d5:3b:7f:
         c1:2a:ab:61:98:f8:63:df:4d:ec:f2:6d:55:40:5a:ed:79:03:
         2f:f9:2f:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJH0E/+nevjaPkGlok8t9z21MWpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF
QjNCRkYzOTAeFw0yNTA0MjQwNjE1NThaFw0yNTA0MjcxNDMzNThaMDMxMTAvBgNV
BAMTKENEMjY2OUVFN0E4MzMyMzYwNDNEREM4RTM2M0YyRDQ0NjIyQkU4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSoP0NhTLWl4IsbOZdVlfWNq8
+O2sNyVgzcdnsQpVxc0QKxpDhNsTvMaVCjRwnSHy8q8m5neuu5sgW/x5epxjXAcw
7qeI2qTCLwXOG0qTvFo8kOyChneCmw7tpHYF8aVIjXzbwxp4lIS2un2XSXUezuIO
P4yQywSAK/m6sVfDA+EUJZW00KRzVDmYiLQ+RKaet3vZGDAeEPakmRMl4Kar5BWV
sQ/v9knSMeN12OmPRkw8uXh1YZoDsxsU6Vyb9palMv9QCW2Znwugr/QppGM4t1DH
GeukDeDJtgI7eHxShbpsQBys/pVXwJB26jQloMF0pttV+y9RpU+Xqql8ahijAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzSZp7nqDMjYEPdyONj8tRGIr6NIwHwYDVR0j
BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF
RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC
RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2
MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2
REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGLA03Q5Sh6lTTBtrxAQa2yVwte9n3t4hokt
9TT5SSe/sXJjb1YlymDD8vf9j9+4qeoEWDNXzrrywc/L2cIvZF7vvq3ijzROK+7N
c7QA5TNiv/t531NFFCnSkZT9GlvG0TRczbUfVQIfLIYb/r6qvfbi8nx7Bt0F5lBP
pDEi6EN6StwJo6QZFvwZ6inxMISxWCYEYqIzQm7UvIe12ROfccWc1TxpZz6Wt1rI
aYQ3WRvrPgB2sYbB3L1eGslotuHzativL6DZbLtWX5CsBNxg44XPdejz6TdFaMlN
J6/6r7ectplBaTqkBdU7f8Eqq2GY+GPfTezybVVAWu15Ay/5Lzk=
-----END CERTIFICATE-----
Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net