Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
File:                     AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json)
Hash identifier:          uRIDpjeZ77g4Svv5zdFOW4fPILlE/23pX8oCO7qs+fY=
Subject key identifier:   B4:78:3E:EB:D4:82:89:EB:B3:48:21:CD:6B:F8:7F:E4:66:0F:9D:6F
Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE
Certificate issuer:       /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
Certificate serial:       6F47E04CCC7D79D1CFD7EE5178EB8D82721D6251
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
Manifest number:          0223
Signing time:             Thu 24 Apr 2025 19:31:33 +0000
Manifest this update:     Thu 24 Apr 2025 19:26:33 +0000
Manifest next update:     Mon 28 Apr 2025 06:17:33 +0000
Files and hashes:         1: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: KQr7FT5BTt34iZBSKfWuQXM57WNoh3bm/oXmMRuQ3Ho=)
                          2: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: g4PKHZmnKpavtsuSJMsF2PYbJyBS2V/nDYQxkb5Lx0g=)
                          3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: oEGvz5ekNRTmyT1q5mWcENYutpVCXsuKwR/aZOFrdsI=)
                          4: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: s3XjeyYUepC6EUEKV94ZhGcK5dHbctvxuCr8uhFitxE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl
                          rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:47:e0:4c:cc:7d:79:d1:cf:d7:ee:51:78:eb:8d:82:72:1d:62:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
        Validity
            Not Before: Apr 24 19:26:33 2025 GMT
            Not After : Apr 28 06:17:33 2025 GMT
        Subject: CN=B4783EEBD48289EBB34821CD6BF87FE4660F9D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:d6:16:5e:57:81:49:ad:44:7c:bc:59:67:
                    f2:aa:6a:10:f3:79:dd:04:47:b6:4f:f7:5c:64:72:
                    41:ec:fe:92:f9:1c:6b:8b:01:7d:bc:3c:8e:77:13:
                    b4:0d:d0:03:b6:58:5d:2e:b8:ed:8c:fd:ef:6e:82:
                    15:ff:06:da:ef:8a:45:9d:47:b7:4c:a8:ac:32:ca:
                    09:38:87:3e:a1:5a:ae:0e:6c:5a:85:dd:6a:03:0d:
                    38:4f:cc:88:77:46:68:1c:30:e5:de:8b:f5:f6:74:
                    5a:33:02:95:c3:8a:67:de:2a:1b:0e:a3:30:74:a7:
                    0f:27:6d:1e:75:ce:9c:4e:c4:84:c7:d3:28:57:71:
                    49:c6:51:79:3a:cd:d6:54:75:93:eb:93:bf:d6:ec:
                    c8:78:68:28:76:6a:e1:eb:a2:d9:4b:86:9d:46:8a:
                    f0:bf:ea:cb:ed:09:8c:1f:8b:e6:4a:49:b7:d8:19:
                    94:3b:13:aa:8e:cc:4a:b3:c0:3b:da:9b:80:23:e0:
                    1e:db:4f:94:42:6f:44:35:1e:09:13:39:ad:66:27:
                    30:91:5f:7c:42:5f:85:16:a3:31:94:a4:94:cc:1d:
                    92:a0:36:e9:5e:83:c4:2e:34:dc:57:b7:f7:59:c2:
                    cf:7d:39:80:06:e4:97:7b:f8:29:1d:cb:20:40:dc:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:78:3E:EB:D4:82:89:EB:B3:48:21:CD:6B:F8:7F:E4:66:0F:9D:6F
            X509v3 Authority Key Identifier:
                keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:f5:25:72:0e:b3:d9:d2:55:fa:55:83:31:de:11:0c:2c:
         f9:05:f3:60:5f:f1:97:16:fd:fa:bb:88:d4:56:d1:ac:f7:06:
         fc:25:99:99:93:a6:86:9b:bf:2c:75:f3:46:6f:fa:2d:78:c3:
         0b:77:1c:7a:c9:c7:ce:05:8f:ae:e8:76:86:e5:ac:a5:90:bb:
         0b:46:00:10:61:ac:3b:65:6e:4b:28:cf:3e:a9:8e:b1:df:bd:
         18:72:14:a4:c5:8d:c8:9c:cb:89:a6:71:72:e9:b6:97:64:ce:
         b1:69:aa:4e:95:0d:10:db:14:af:4a:e4:12:a6:19:d7:79:8e:
         06:80:a0:11:dc:77:dc:97:f4:44:cb:27:18:48:70:28:4a:98:
         ee:42:7d:fb:c6:14:1c:4a:21:46:84:e1:64:23:ff:58:d2:00:
         be:50:7e:67:0e:15:9e:20:ff:4e:fc:a2:98:78:3c:a7:96:25:
         59:9d:5d:0a:64:af:7b:cf:06:67:e6:80:43:2e:b0:f8:c5:d6:
         55:ac:e6:8a:38:43:fc:9e:95:86:06:aa:9b:8d:63:b8:5e:5c:
         00:62:09:85:52:b9:d6:fa:fa:24:da:e0:20:c8:7b:c2:81:f2:
         af:9e:17:b5:bc:c5:f5:26:30:5c:18:45:5d:d4:3b:88:f0:7c:
         da:89:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net