Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
File:                     21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json)
Hash identifier:          tx/4bVZJx4QJffb4mfqZelH4ajpFjt9os/9I4art9DQ=
Subject key identifier:   36:C7:7B:29:58:2A:75:6B:3B:5D:48:E3:D4:8B:57:02:BD:73:BE:61
Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42
Certificate issuer:       /CN=21AB9EB0A860D2619CF210410608EB831A463442
Certificate serial:       650CA7354CD8D795774DE5BD50933673245DAF9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
Manifest number:          74
Signing time:             Wed 23 Apr 2025 14:11:51 +0000
Manifest this update:     Wed 23 Apr 2025 14:06:51 +0000
Manifest next update:     Sat 26 Apr 2025 21:38:51 +0000
Files and hashes:         1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=)
                          2: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: qxmA50ECi0R7rs8S1e8qizenp2qv/p0wLW1DGygyuEM=)
                          3: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=)
                          4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl
                          rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:a7:35:4c:d8:d7:95:77:4d:e5:bd:50:93:36:73:24:5d:af:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442
        Validity
            Not Before: Apr 23 14:06:51 2025 GMT
            Not After : Apr 26 21:38:51 2025 GMT
        Subject: CN=36C77B29582A756B3B5D48E3D48B5702BD73BE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:51:da:ca:d1:91:ba:b6:0c:92:a8:59:e1:
                    93:14:5a:16:60:db:b8:3c:d9:16:7c:6f:b5:6e:b7:
                    21:28:48:cb:c6:4a:42:74:38:4b:21:f6:e7:dc:0e:
                    96:c3:d9:48:72:58:b2:dd:fd:02:cd:3b:ee:8d:50:
                    c2:58:9c:83:2c:fe:df:6a:84:92:81:90:f2:7b:60:
                    a5:85:68:b8:e7:66:37:02:c9:88:af:31:a0:8a:41:
                    45:3a:41:ef:2d:10:10:f7:97:d5:59:87:73:70:9c:
                    ae:b9:aa:ff:22:b5:e0:dd:2b:3f:f2:55:bc:5a:19:
                    42:8a:e5:2d:ea:08:01:cc:ee:86:8d:f9:7f:ae:b5:
                    3b:28:b0:ab:7a:62:2e:ef:31:6b:e3:2d:51:5d:b1:
                    af:6d:fc:14:94:13:07:4a:b0:12:00:28:f1:a1:0b:
                    fb:8e:62:73:ed:a8:68:50:e0:27:42:a2:90:79:43:
                    dd:3d:a9:43:c8:23:c8:37:98:06:a4:60:f1:06:0c:
                    42:5e:47:b0:8d:f2:62:76:92:74:e5:ee:14:a6:be:
                    70:39:23:c9:02:0c:8d:7b:ab:63:28:cf:fc:8e:3e:
                    6e:42:7e:65:a0:41:11:1b:a0:99:d7:16:69:81:79:
                    7f:a1:be:5f:f2:ca:fd:37:16:21:2b:65:0f:40:73:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C7:7B:29:58:2A:75:6B:3B:5D:48:E3:D4:8B:57:02:BD:73:BE:61
            X509v3 Authority Key Identifier:
                keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:cb:f8:76:be:5a:d5:f7:80:b7:49:46:bd:5b:d6:49:23:
         e4:89:c9:a1:43:a0:6a:c7:b3:68:d6:8b:bb:ec:7a:c9:53:af:
         a5:f6:51:64:80:a8:5e:e7:81:58:d1:af:e8:4c:09:4d:4f:b4:
         db:5c:f4:74:d1:b6:9e:d8:91:fe:a6:45:18:df:7a:2e:92:23:
         36:bf:de:39:cc:24:b2:4d:d6:a0:d0:8a:51:2e:47:9d:66:8d:
         23:23:10:12:96:f1:3a:49:6f:61:bf:30:c5:71:64:17:92:3d:
         b6:5f:95:f9:ac:79:d2:1d:a6:ce:d4:a2:65:62:75:44:25:cf:
         d4:5a:1c:64:8b:07:f6:ad:b6:25:78:29:64:b9:4b:53:98:47:
         0a:69:30:ad:46:50:7a:bc:d1:02:75:49:5b:d0:81:67:3c:9e:
         29:a5:a6:7f:0f:a0:e1:bd:1f:be:0a:68:a9:17:79:a1:10:ca:
         5c:02:66:a5:52:1c:30:ca:78:e5:08:9e:7c:f9:7a:27:6f:c0:
         c7:8f:b7:a9:4c:26:ed:e3:5f:de:09:c3:46:d3:6b:87:07:11:
         ae:d4:ec:dd:84:e0:e5:56:87:79:ac:cf:54:14:32:7c:0f:d8:
         61:af:cd:e9:44:2d:16:ae:6c:8e:18:38:02:1b:26:00:af:ea:
         c4:20:84:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZQynNUzY15V3TeW9UJM2cyRdr5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx
QTQ2MzQ0MjAeFw0yNTA0MjMxNDA2NTFaFw0yNTA0MjYyMTM4NTFaMDMxMTAvBgNV
BAMTKDM2Qzc3QjI5NTgyQTc1NkIzQjVENDhFM0Q0OEI1NzAyQkQ3M0JFNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgVHaytGRurYMkqhZ4ZMUWhZg
27g82RZ8b7VutyEoSMvGSkJ0OEsh9ufcDpbD2UhyWLLd/QLNO+6NUMJYnIMs/t9q
hJKBkPJ7YKWFaLjnZjcCyYivMaCKQUU6Qe8tEBD3l9VZh3NwnK65qv8iteDdKz/y
VbxaGUKK5S3qCAHM7oaN+X+utTsosKt6Yi7vMWvjLVFdsa9t/BSUEwdKsBIAKPGh
C/uOYnPtqGhQ4CdCopB5Q909qUPII8g3mAakYPEGDEJeR7CN8mJ2knTl7hSmvnA5
I8kCDI17q2Moz/yOPm5CfmWgQREboJnXFmmBeX+hvl/yyv03FiErZQ9Ac2FlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNsd7KVgqdWs7XUjj1ItXAr1zvmEwHwYDVR0j
BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4
NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2
MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh
ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC
ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFuUy/h2vlrV94C3SUa9W9ZJI+SJyaFDoGrH
s2jWi7vseslTr6X2UWSAqF7ngVjRr+hMCU1PtNtc9HTRtp7Ykf6mRRjfei6SIza/
3jnMJLJN1qDQilEuR51mjSMjEBKW8TpJb2G/MMVxZBeSPbZflfmsedIdps7UomVi
dUQlz9RaHGSLB/attiV4KWS5S1OYRwppMK1GUHq80QJ1SVvQgWc8nimlpn8PoOG9
H74KaKkXeaEQylwCZqVSHDDKeOUInnz5eidvwMePt6lMJu3jX94Jw0bTa4cHEa7U
7N2E4OVWh3msz1QUMnwP2GGvzelELRaubI4YOAIbJgCv6sQghB0=
-----END CERTIFICATE-----
Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net