Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
File:                     571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json)
Hash identifier:          zDo3hRpuug1Gym2t/OulnM3OJZHujGJ9ZBASoKh4vfA=
Subject key identifier:   9A:BB:85:1C:45:25:5B:31:D3:14:14:38:A2:0D:72:E1:BF:70:C4:75
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Certificate issuer:       /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial:       3A529AEB5A01F213A8756C37B27D906A918E76D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
Manifest number:          04DF
Signing time:             Sat 26 Apr 2025 18:42:08 +0000
Manifest this update:     Sat 26 Apr 2025 18:37:08 +0000
Manifest next update:     Wed 30 Apr 2025 01:18:08 +0000
Files and hashes:         1: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=)
                          2: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: VTRkO3vc0p9bhQUzZ3EhzkOM/bJ6S0YMHcmf1ueiQ/U=)
                          3: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=)
                          4: 3130332e3135352e36352e302f32342d3234203d3e20313431363231.roa (hash: IECBJhlM+g19o+MdDoNK+OZHnRGTyJlSW5v/c2J36Jg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
                          rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:9a:eb:5a:01:f2:13:a8:75:6c:37:b2:7d:90:6a:91:8e:76:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
        Validity
            Not Before: Apr 26 18:37:08 2025 GMT
            Not After : Apr 30 01:18:08 2025 GMT
        Subject: CN=9ABB851C45255B31D3141438A20D72E1BF70C475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:95:ee:f3:3e:c3:0c:7b:59:77:eb:2a:06:
                    37:d1:c9:dc:86:98:fb:40:2b:e7:e9:16:64:49:81:
                    5a:8a:69:4a:ec:21:3e:9b:e1:16:87:85:01:89:28:
                    83:2e:bc:ff:7a:fe:f5:79:59:75:4d:a6:c4:8d:c9:
                    17:26:73:12:0c:47:7a:36:e5:a1:54:71:ee:50:10:
                    2f:3c:d9:b8:64:ed:e1:13:18:25:5c:ea:92:65:ad:
                    30:a2:9f:08:d4:43:8a:f2:63:fa:b8:11:af:d9:96:
                    6a:e5:0b:9a:63:84:36:f6:c5:f6:ae:2e:88:35:5b:
                    c3:2a:85:c9:a3:1c:6e:50:c3:88:7d:a1:38:ae:f9:
                    6c:be:8f:f7:18:07:7c:52:4a:29:66:ff:c8:a1:e5:
                    e8:cb:61:2c:d9:7f:40:fa:d8:7b:97:2c:93:7b:0f:
                    1c:09:e5:25:fb:de:e0:4d:5d:17:b8:2c:b0:b3:7a:
                    ee:80:11:f4:b3:09:7d:e6:04:6e:f2:2d:a1:ac:22:
                    e2:5b:c2:f6:a1:3b:97:70:bd:c4:1a:e1:0e:9f:04:
                    9b:83:f4:27:77:16:2a:3c:1f:46:25:fd:6f:d4:14:
                    fb:22:84:4e:57:16:b7:ec:72:96:13:cb:68:8f:4e:
                    23:ea:d6:d8:5e:76:0a:8e:ad:dc:37:52:61:71:4e:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BB:85:1C:45:25:5B:31:D3:14:14:38:A2:0D:72:E1:BF:70:C4:75
            X509v3 Authority Key Identifier:
                keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:98:e3:d1:00:13:af:45:72:76:4e:5a:79:4a:29:e4:b8:1b:
         c5:43:87:e0:34:7b:34:1e:f7:93:61:24:74:7e:ec:e3:ce:58:
         46:a3:1d:04:e6:17:fe:bc:34:85:20:9d:5b:41:09:ba:49:20:
         3a:c0:f6:b6:b4:7a:6a:c0:ec:e5:e0:94:7c:7a:0f:00:5c:00:
         bc:a6:d2:86:28:cd:c9:d7:38:4b:b6:4d:4a:8d:29:87:42:e5:
         c2:26:e2:b5:2e:5e:2a:91:65:bc:d4:dd:f0:d0:82:a6:dd:66:
         4b:e7:f0:be:3b:0e:9a:2c:7c:36:5a:01:26:65:0f:1b:9f:28:
         28:c8:3c:a6:a6:9f:70:f4:89:0f:68:71:83:36:37:e3:4a:66:
         56:e3:c0:33:d9:3d:a7:cb:02:96:17:69:ef:1d:7d:7c:4d:fd:
         38:f8:13:60:f0:2c:c7:b1:77:aa:4c:65:f4:70:a7:97:75:0d:
         87:ef:00:7a:81:67:d1:e7:14:dc:20:46:7f:73:fb:20:4b:d4:
         b7:70:c9:7a:88:73:93:95:6f:c4:a2:39:ef:8f:ee:bd:fa:98:
         17:a5:c0:d7:2a:0f:df:be:8f:59:82:32:54:ff:36:87:33:fe:
         10:c3:45:3e:27:f8:0a:8d:7d:03:0f:aa:24:d8:9a:63:ae:a7:
         86:aa:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:54 2025 by rpki-client on console.sobornost.net