Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft
File:                     064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json)
Hash identifier:          Wjm4t9uPvQBIO7CDt++QxZrT1a0ssCW1bgpa1FFYEbg=
Subject key identifier:   44:20:A1:54:B3:09:5C:3F:8A:16:0F:A8:B9:4C:DE:03:51:53:16:9D
Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37
Certificate issuer:       /CN=064A8F9FBD487AB04370A31B7D603B27E6674937
Certificate serial:       04D0D8592DD367CDC2085D12CE0056BD42DA84E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft
Manifest number:          013E
Signing time:             Wed 23 Apr 2025 17:12:22 +0000
Manifest this update:     Wed 23 Apr 2025 17:07:21 +0000
Manifest next update:     Sat 26 Apr 2025 20:55:21 +0000
Files and hashes:         1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=)
                          2: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: tyWE6FO+r8iof+EfcA3r6iE/3KBUSE8EpoREXFA8h5k=)
                          3: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=)
                          4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl
                          rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 20:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d0:d8:59:2d:d3:67:cd:c2:08:5d:12:ce:00:56:bd:42:da:84:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937
        Validity
            Not Before: Apr 23 17:07:21 2025 GMT
            Not After : Apr 26 20:55:21 2025 GMT
        Subject: CN=4420A154B3095C3F8A160FA8B94CDE035153169D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:3a:88:8a:e8:c2:9b:1a:6d:af:63:46:a5:
                    8a:9a:27:a6:bb:7e:08:72:c8:00:d6:bc:8c:93:2c:
                    d6:c4:32:d0:01:a5:ed:d5:0f:ff:20:0e:61:a7:bb:
                    9e:50:77:db:fa:3e:90:d0:45:0c:bf:71:89:b6:06:
                    98:59:dd:56:86:ff:44:3c:17:93:09:64:a2:7e:b8:
                    55:f6:5d:bf:1f:75:c6:71:9a:f5:01:fe:ef:03:2d:
                    69:1f:5e:96:f8:da:cc:a0:90:ca:75:49:a2:95:6b:
                    30:30:ca:54:5b:d8:16:ac:e0:29:ce:8a:00:76:d9:
                    99:88:fe:92:25:db:44:12:9a:6e:4c:8a:9d:14:c1:
                    fd:cb:fe:0f:60:cc:cf:d2:7b:c9:25:c9:1b:fd:f0:
                    61:ca:07:0f:ff:0d:64:4c:f1:5a:80:34:a0:6e:00:
                    48:c7:1a:bd:a7:bb:88:2b:02:a8:c5:30:0f:6a:d7:
                    9d:52:af:4e:70:7f:d5:5d:5f:d8:e6:2d:e9:20:e5:
                    7d:92:f8:7f:4b:26:72:fd:d0:c3:22:52:55:a5:6f:
                    9c:37:36:61:83:14:e7:89:8f:81:48:f8:4b:51:68:
                    c7:70:26:ad:55:9e:dd:50:ef:37:e2:7a:c5:9a:9b:
                    ba:f7:a9:b4:31:ca:44:04:25:55:97:53:b8:46:a7:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:20:A1:54:B3:09:5C:3F:8A:16:0F:A8:B9:4C:DE:03:51:53:16:9D
            X509v3 Authority Key Identifier:
                keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:e8:eb:db:60:a0:8d:3d:a8:6c:45:41:20:d8:99:e4:0c:
         de:d6:f5:87:bd:f6:dc:54:4b:b1:f6:ea:52:79:0b:15:b1:4e:
         02:8c:79:57:15:51:e1:48:46:28:df:81:cb:3a:42:e5:a0:40:
         e7:0c:d0:77:32:a3:e9:28:cf:eb:91:9d:94:5a:28:ae:45:e9:
         3e:f0:83:41:f3:ff:54:90:dc:b6:ff:a0:8a:fe:53:e7:69:2a:
         76:4b:4a:07:3f:97:30:2d:09:91:97:95:f2:de:e0:92:29:18:
         c5:05:47:5d:a2:b4:df:ac:12:3e:6e:38:77:e8:90:2d:3f:ed:
         c7:b3:54:1f:64:09:52:24:64:7b:61:e6:ed:21:af:dd:cf:68:
         c4:32:19:9d:cc:ea:0b:28:27:67:24:c1:45:2f:e7:b9:da:1a:
         9d:f6:8f:28:1d:96:f1:1b:80:55:7d:80:12:9f:f3:37:ac:7a:
         d6:b2:9f:4f:84:24:cf:43:a0:3d:5e:b8:af:0b:62:74:cb:2d:
         76:45:d9:a0:ff:27:86:16:86:62:8e:16:fc:a7:4a:6d:5f:76:
         2e:9c:bb:1b:ea:e3:16:2f:cd:99:b2:05:2e:0b:f0:52:75:66:
         4e:ff:c5:e2:60:ae:23:03:d0:4b:af:7c:1e:96:4d:90:0e:2f:
         d2:6c:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net