Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
File:                     98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json)
Hash identifier:          VnNQC3sG5AvNyjS6XHxPs0om+04nSARclSbhhdATovE=
Subject key identifier:   D5:E4:28:D3:90:DB:6B:31:80:67:10:D2:48:D7:2F:35:48:C4:2A:8F
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Certificate issuer:       /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial:       19B1DF5908158651A27A0A01223100467483CFCD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
Manifest number:          D4
Signing time:             Thu 24 Apr 2025 04:40:47 +0000
Manifest this update:     Thu 24 Apr 2025 04:35:47 +0000
Manifest next update:     Sun 27 Apr 2025 11:42:47 +0000
Files and hashes:         1: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: Xgef5L4I16zDAnix/PvvzWQEDQFPLt9JWGehlxPzlQk=)
                          2: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: N74dfLFvl7eNsa07RKUrhClkbMWl/o482r/Gpd8s/i0=)
                          3: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: 0lAqF2YCCu8hBoO36P3pXTfszCRwlRHUwQyhfZKieRU=)
                          4: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: /KzEuAJHbJBmL5pgo4HQUQfG2vh0jJ3hOFNjN0Pvcz8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
                          rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b1:df:59:08:15:86:51:a2:7a:0a:01:22:31:00:46:74:83:cf:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
        Validity
            Not Before: Apr 24 04:35:47 2025 GMT
            Not After : Apr 27 11:42:47 2025 GMT
        Subject: CN=D5E428D390DB6B31806710D248D72F3548C42A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9e:c2:98:91:7e:43:0f:9d:c6:0d:bf:a3:d7:
                    68:89:24:e5:5d:f9:b5:43:60:e4:46:4d:8a:6f:c9:
                    15:04:43:b1:fd:88:eb:36:5e:06:07:52:69:73:95:
                    3b:1e:24:fd:58:b9:bc:6e:b8:50:18:e6:91:9b:11:
                    1e:fc:10:26:57:cd:fd:55:b9:52:de:02:19:79:e1:
                    ba:ec:c2:e1:11:04:67:d3:b1:ae:44:dc:4b:01:78:
                    71:64:43:5e:25:af:bf:05:6f:e4:d2:f0:dc:74:75:
                    00:5b:cc:bd:03:ae:29:c0:e9:4b:01:44:cd:30:42:
                    36:c6:91:36:3c:c4:43:1f:8b:8b:e0:eb:ce:80:9f:
                    89:ac:04:a5:fa:ef:5a:4d:87:a8:b5:49:fb:4e:52:
                    5a:de:80:75:6f:3f:6a:de:f3:42:e8:73:47:ac:a2:
                    f9:7f:ca:76:f1:24:f7:b9:b0:34:38:90:88:79:ac:
                    5a:8e:3d:cc:68:c2:87:68:cc:17:d4:07:f1:96:7d:
                    07:6a:95:33:04:24:c0:01:e6:fa:58:d6:9a:28:05:
                    9e:4a:cd:ac:1c:b3:c1:e5:3f:de:98:e2:bd:2d:00:
                    11:21:4f:84:db:83:28:04:83:24:31:f7:05:6b:c7:
                    cc:5b:97:d7:6c:0f:49:2d:f9:af:24:fa:c1:df:ff:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:28:D3:90:DB:6B:31:80:67:10:D2:48:D7:2F:35:48:C4:2A:8F
            X509v3 Authority Key Identifier:
                keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:94:05:ee:a5:6a:47:63:af:55:6a:78:2d:86:6d:17:69:
         13:7b:af:4c:28:09:a9:f7:23:4e:de:d6:83:6b:2e:55:29:11:
         1d:2e:cd:f5:27:e6:bc:aa:88:d4:de:2e:74:14:a9:ba:be:e4:
         6b:28:36:ff:02:20:9b:ea:29:13:c9:87:e8:c8:e3:46:02:a4:
         4a:3e:da:3b:f6:0b:a8:67:e0:87:7d:e0:b5:c9:77:17:0a:a3:
         34:91:92:d0:b8:38:e8:08:93:da:28:73:2b:f0:6c:3f:3f:85:
         41:2f:1a:91:4a:96:d9:c8:1d:68:3e:bc:63:72:11:e5:22:a7:
         85:af:3c:c7:dd:89:3e:6f:a5:9a:93:32:a1:27:7b:04:91:20:
         ef:9f:d2:75:8c:b2:f0:a3:18:29:89:de:65:54:b5:bc:e3:3d:
         94:a4:93:c5:b0:c9:96:3f:1f:d1:91:26:99:88:fb:45:14:c9:
         4d:5c:05:12:63:1f:a0:4e:36:e1:d0:f3:ec:af:2f:84:68:50:
         ef:85:14:a7:1c:1a:cd:7e:5e:26:e7:b5:14:52:ae:ba:02:2b:
         56:41:89:43:ce:05:9a:56:d8:b1:6c:1f:e8:17:cd:b5:cb:86:
         74:e1:36:62:77:b5:bd:3c:76:07:08:73:ae:8e:ab:86:54:e1:
         cd:c2:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:49:49 2025 by rpki-client on console.sobornost.net