Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
File:                     F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json)
Hash identifier:          2m8pq7voYovMgHWjoIdy0EUJEj1MO77VxVrGU6ewwN8=
Subject key identifier:   72:98:26:64:93:71:7D:74:25:2B:1B:C2:B9:4B:5B:05:92:E8:16:91
Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6
Certificate issuer:       /CN=F9645D835A5B60A8E839A13E87861562B73F34B6
Certificate serial:       4CF5A731D56F322A5F262221CD160190BAAF5988
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
Manifest number:          027C
Signing time:             Fri 25 Apr 2025 17:11:58 +0000
Manifest this update:     Fri 25 Apr 2025 17:06:58 +0000
Manifest next update:     Mon 28 Apr 2025 20:41:58 +0000
Files and hashes:         1: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: JHavp9hfSS+dnWilsQCSHzFLmIlaHJZcHIxZBSN9kS4=)
                          2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: REeDbuM/ofQpX2vXLOMZo7/lXWIUQFgBawhBRyjjTfw=)
                          3: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q=)
                          4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl
                          rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 20:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f5:a7:31:d5:6f:32:2a:5f:26:22:21:cd:16:01:90:ba:af:59:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6
        Validity
            Not Before: Apr 25 17:06:58 2025 GMT
            Not After : Apr 28 20:41:58 2025 GMT
        Subject: CN=7298266493717D74252B1BC2B94B5B0592E81691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:1f:39:10:11:e0:94:24:17:b7:5a:2c:b6:
                    40:27:33:15:a9:2e:11:fc:a9:17:89:46:a4:3c:33:
                    29:c9:bb:19:c3:8e:19:84:97:30:8b:2f:25:1b:fe:
                    36:d9:bf:27:b2:8f:27:1c:f6:9d:44:6f:ca:35:01:
                    43:2f:ae:7c:d5:89:c6:0c:dc:5c:79:8e:4a:c7:ce:
                    46:b0:cf:9b:56:ca:e0:a1:a4:9d:df:66:87:48:f2:
                    6f:52:be:d1:20:3f:a0:97:24:75:dd:85:1e:3e:58:
                    e4:b8:9e:71:1a:6d:93:b0:d5:f2:b7:c3:4d:32:06:
                    ca:4c:09:33:ef:aa:a7:c7:a6:9f:92:39:2a:25:9e:
                    07:be:f1:95:b2:12:94:a5:07:b9:8b:e8:25:a5:1f:
                    84:8a:6a:a2:6d:9e:92:24:35:f0:98:b5:dc:bb:79:
                    2a:a6:7b:7c:a9:8e:a3:6b:90:d4:16:ff:eb:a9:d3:
                    1c:3e:9a:5e:f1:c4:5f:d2:a3:8e:6d:57:a0:97:0f:
                    f6:0c:f8:f5:73:64:e8:16:4d:59:8d:31:76:c6:25:
                    98:64:86:ac:b9:40:3e:e0:c1:bc:2f:72:a8:fc:64:
                    1a:61:d8:8d:e3:f4:f4:a5:f4:2e:58:93:aa:a8:69:
                    63:4a:54:a5:4f:d9:d9:69:eb:4f:f4:65:e9:f0:cc:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:98:26:64:93:71:7D:74:25:2B:1B:C2:B9:4B:5B:05:92:E8:16:91
            X509v3 Authority Key Identifier:
                keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:bc:78:c1:0d:ac:14:5e:13:97:57:03:21:e5:dc:40:e6:
         44:70:e7:e0:a1:b5:34:4d:bc:7c:ad:48:07:fa:14:57:68:cd:
         c6:2a:66:52:f2:9b:99:1f:30:8a:30:2b:2d:5c:89:45:1a:1f:
         58:d4:f5:a5:12:f0:98:75:f1:8f:4a:6c:1f:ee:4a:35:a1:ca:
         79:81:0a:f9:6a:01:14:f1:be:26:24:cb:fc:d2:f4:12:87:33:
         3f:c8:f8:5b:0d:a7:c2:f1:b0:bb:94:4a:11:8d:c8:99:b5:98:
         45:5a:bf:ca:24:e5:d5:3d:97:a1:c9:6d:08:13:a4:d6:69:08:
         f7:31:a3:80:4b:c4:63:b7:60:ea:e1:0b:00:97:92:1d:5c:2e:
         19:a9:a9:cf:85:39:ad:87:dc:17:a4:4b:ee:15:a5:2c:17:3c:
         20:62:af:7d:70:57:f6:a7:ef:95:77:51:8c:ac:45:a4:43:1b:
         ec:7c:bd:bf:fc:22:29:0d:08:8d:9f:84:bd:e8:59:80:e4:87:
         e2:8d:e2:f1:17:44:00:01:0c:79:0d:f0:bc:5e:aa:45:2c:70:
         5d:f4:80:96:36:ff:1b:d8:f8:30:78:c1:f2:62:e7:a7:bf:38:
         77:1b:16:a9:14:f9:6b:f4:a5:54:3f:4b:46:9d:89:66:6e:07:
         81:79:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net