Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
File:                     44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json)
Hash identifier:          129cPgqbo0QNbCuhFOAiDctMPKheJspUD7+XLm0B3N4=
Subject key identifier:   C6:B8:80:19:80:7A:BC:1E:39:34:D1:AB:C1:3F:A7:D2:8F:18:25:C5
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Certificate issuer:       /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial:       01B12F81A4CCE0E3FD7E63162C8211B04156CEDA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
Manifest number:          0125
Signing time:             Thu 24 Apr 2025 10:32:13 +0000
Manifest this update:     Thu 24 Apr 2025 10:27:13 +0000
Manifest next update:     Sun 27 Apr 2025 15:28:13 +0000
Files and hashes:         1: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: 7n9fLO69HtVTeGebJ4IwbAt3Dih0rBk5I+DqyVH3Pvc=)
                          2: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: LmRXSsY20azOSyzQ1TSvDlHvMUx0FxEn3NAEOZYKiSY=)
                          3: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: ZAYr5wm6M1zzmW0l6EsgawSZJfTDiZWgdh/sXE3rAP8=)
                          4: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: ez2LC1r6bTj24Wy82rHkZPj1l/qpP3UX6fekdhBojt4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
                          rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 15:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b1:2f:81:a4:cc:e0:e3:fd:7e:63:16:2c:82:11:b0:41:56:ce:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
        Validity
            Not Before: Apr 24 10:27:13 2025 GMT
            Not After : Apr 27 15:28:13 2025 GMT
        Subject: CN=C6B88019807ABC1E3934D1ABC13FA7D28F1825C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:57:c7:4b:15:b3:9b:d6:f7:85:d3:37:28:
                    23:55:f9:7d:d8:6c:27:cf:23:a7:31:71:a8:98:9e:
                    0d:5e:e8:8e:a4:ff:04:98:ef:c3:5d:e0:08:43:ae:
                    2e:c5:00:95:1d:ad:3a:bf:93:b8:7b:8d:23:6b:75:
                    81:ef:4c:d6:eb:32:d6:8b:12:f3:19:57:54:8a:00:
                    53:b3:8c:a8:40:c0:a5:31:90:1b:dd:1a:d5:9d:6b:
                    90:ae:3b:32:46:fc:cb:0e:39:59:4f:7f:79:2a:bc:
                    db:27:45:6a:d3:5f:27:52:71:0d:9c:55:df:6c:7f:
                    1e:66:65:61:b0:02:54:e8:ce:aa:7f:ac:ba:ec:d7:
                    77:54:6b:ad:dd:05:af:7b:14:bf:af:92:14:ef:3d:
                    51:43:25:ea:83:1b:db:f9:94:44:a8:e5:f6:aa:72:
                    61:36:37:43:b0:f2:ff:71:f3:6d:5e:0e:74:f5:e4:
                    36:8e:40:d4:9b:65:05:56:47:ce:6b:aa:b2:db:29:
                    4f:05:d9:8e:24:8b:21:9b:4c:74:2d:4b:3e:5d:1d:
                    21:e0:ca:46:a8:3b:8c:7e:7c:b9:6e:2c:e4:57:55:
                    ce:98:cb:fa:46:67:c5:b2:b8:fb:66:9c:5d:fc:99:
                    55:12:17:52:87:af:dd:ab:16:ac:29:2f:e2:2f:46:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B8:80:19:80:7A:BC:1E:39:34:D1:AB:C1:3F:A7:D2:8F:18:25:C5
            X509v3 Authority Key Identifier:
                keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:43:ce:c0:5b:4e:c0:1c:d2:b6:c0:a3:8c:9b:a4:e3:c3:2e:
         01:84:0b:de:28:53:dd:45:e3:e2:35:8e:3a:96:08:5b:1b:60:
         0a:d6:db:a0:da:bf:01:99:d2:e8:d8:86:22:2b:b7:78:e8:01:
         46:c1:f9:ef:9b:8e:04:b7:bb:8f:01:60:a3:16:41:db:c5:8c:
         09:29:87:ba:9a:36:3a:2f:e8:d2:a6:f2:f7:73:f1:16:b7:d2:
         29:4a:c0:9b:a1:2a:2c:bc:b1:cc:e8:37:d7:0b:f6:2a:1b:7a:
         e1:1b:ab:f9:37:19:e7:4e:15:da:72:97:70:1e:61:75:ea:61:
         ef:0a:52:2f:b0:a0:0f:41:d1:06:8e:7e:53:40:32:3b:70:f7:
         a7:00:fc:0f:2c:69:ff:37:4f:f2:88:58:a1:35:b3:d0:18:92:
         54:13:5e:65:a5:9a:38:4b:90:fb:4e:25:18:ab:a5:73:3a:89:
         01:e0:f7:aa:52:8d:2f:a0:93:21:1a:b5:7b:dd:39:08:f6:02:
         ba:77:2d:3c:52:d2:fc:3c:41:21:a6:72:af:c2:04:09:2e:2b:
         19:87:a2:f1:09:47:7a:eb:28:a0:b0:7c:13:10:2f:5a:e0:68:
         70:bd:ff:05:8a:be:eb:cb:61:75:90:d4:a0:2d:32:47:d0:28:
         35:1e:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net