Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File:                     1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier:          G/3qAC+MVAVplcvXZOlSRl/7F1NYqSvm5VJUth98sbY=
Subject key identifier:   35:4E:8D:FD:AD:10:37:6D:13:1D:5C:DC:B2:EF:83:82:37:6B:FE:39
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       4695752B9A827A59D9E1A1B1A7650C8ACA920CC2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number:          013E
Signing time:             Thu 24 Apr 2025 06:21:06 +0000
Manifest this update:     Thu 24 Apr 2025 06:16:06 +0000
Manifest next update:     Sun 27 Apr 2025 09:48:06 +0000
Files and hashes:         1: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: znSniW+lPXCPGxomzmN2hrx17CR9++zAKICSSEuO9Vw=)
                          2: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: BgrpAYav/pUESxArt2NS1teCYs0lWmtbdh6n4DVdjLM=)
                          3: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: Jd4Zoe+q3Zane+xRGkA/94yRteAHAIte5kIQ9yRQzqI=)
                          4: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=)
                          5: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=)
                          6: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=)
                          7: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: Z7MZGS10toSXvLmV5iBfghuNSI8n4mTpT95+VkC6QfE=)
                          8: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: BbLwPxFe+tWzZ8sOAXoZbHTuvfXUw6/yE4h7IQcYxzA=)
                          9: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: wop0enhk31jLHWhccpcZJr0EKUzHvqhNyLW2a5pNj2w=)
                          10: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: sSdx6bfz/Cb6HZkpzLLwduFVNFn1g0FyFXb3VTTUPws=)
                          11: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: bOBZGkzqysQJJCz7648wZEJREONFUo+QtRyxjh2BRFw=)
                          12: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=)
                          13: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=)
                          14: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: fcQPwUouCVaeNmPsgU50oUU5piCrvcz7X4WUkw36Gi0=)
                          15: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:95:75:2b:9a:82:7a:59:d9:e1:a1:b1:a7:65:0c:8a:ca:92:0c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Apr 24 06:16:06 2025 GMT
            Not After : Apr 27 09:48:06 2025 GMT
        Subject: CN=354E8DFDAD10376D131D5CDCB2EF8382376BFE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:63:d0:7f:17:7d:40:11:7f:35:57:1a:ef:
                    4e:48:6a:28:f3:e5:0e:2a:f7:5a:f5:8a:37:16:0d:
                    42:34:f0:41:6f:02:86:38:d0:ca:b1:d2:db:c8:27:
                    b1:ab:df:a3:ec:2b:25:9e:9b:e2:9a:88:61:a8:96:
                    eb:b5:37:10:37:ec:f5:15:ae:52:6d:87:54:75:31:
                    d7:93:bd:77:17:7e:fb:02:74:ba:fa:27:be:8d:31:
                    b8:dd:c5:99:eb:3a:58:64:1e:d5:5b:29:4a:5c:bd:
                    6a:95:6e:8f:3a:9d:4d:b6:45:82:3a:d5:47:0e:5e:
                    25:8b:5d:a7:ee:5d:b1:f1:8c:1e:57:2e:fe:4b:14:
                    77:9f:55:8a:0f:56:e6:27:99:10:ff:2b:bf:c1:7e:
                    26:df:b2:0d:e9:42:4b:40:31:46:42:c3:f4:fa:b8:
                    ce:1d:21:3d:06:ce:9f:3b:ba:90:ea:ad:dc:94:95:
                    40:18:a8:8f:f7:09:ff:c6:8f:21:1f:b7:4b:a8:68:
                    cf:0e:8e:05:11:27:cd:30:80:a4:f8:93:ba:af:d2:
                    77:70:30:5e:35:01:f5:a1:2c:aa:91:ac:e3:14:65:
                    4c:1f:af:c9:d3:fb:70:da:81:4e:0a:bf:20:a9:86:
                    2f:cd:cf:04:79:fa:f9:bb:7e:1b:18:22:c0:d6:01:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4E:8D:FD:AD:10:37:6D:13:1D:5C:DC:B2:EF:83:82:37:6B:FE:39
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:49:ba:6f:6d:e1:12:6f:e3:75:83:ac:6a:35:f6:4a:4c:
         d9:80:24:f3:26:ee:2a:33:88:88:13:72:1b:c4:83:0d:dc:69:
         2f:66:cc:07:da:39:5e:a5:06:ad:62:58:2a:f1:03:a1:93:77:
         1f:cb:da:91:60:bc:e4:2c:01:e9:37:48:55:6e:7f:80:f9:2e:
         30:71:5b:ce:e2:e6:89:e1:8c:7d:5e:6e:64:81:9a:63:af:b1:
         6f:d8:ee:ae:a2:00:50:9e:6e:8a:72:ae:00:a7:be:10:df:55:
         b9:01:42:02:65:73:c8:73:72:12:07:23:7a:dc:0c:cb:68:76:
         68:02:69:90:fb:21:d3:78:42:b7:4c:57:92:dd:aa:52:3b:11:
         c6:3c:2d:cf:e4:16:6f:76:71:cd:e3:be:f9:3e:76:78:91:17:
         10:79:87:6b:fa:a8:11:cc:94:f6:d5:7c:6a:d9:22:17:8b:c0:
         de:65:fb:da:1e:69:00:af:26:03:89:f3:80:24:73:bc:f1:c8:
         25:ff:c1:ee:e9:88:ef:7f:bf:35:50:5e:19:67:91:0e:51:71:
         5f:18:03:b9:ff:c2:79:0d:8a:2f:4f:9a:24:d5:0b:22:c4:1b:
         a1:f1:c7:a8:eb:c2:fc:8f:a4:19:3f:70:fe:4d:3c:16:07:42:
         ad:20:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net