Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          1pYhSZ8YIkT4In5DcmAB7myR+fsUYloMl2QJ7XWBAyw=
Subject key identifier:   09:B6:1E:07:40:70:AE:53:23:5A:4B:EE:D6:A9:A3:7F:4E:DB:37:37
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       2AA742B0B23BBB3B4394DACF914B270AAC58BFD5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          01C5
Signing time:             Wed 23 Apr 2025 21:10:36 +0000
Manifest this update:     Wed 23 Apr 2025 21:05:36 +0000
Manifest next update:     Sun 27 Apr 2025 05:14:36 +0000
Files and hashes:         1: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: FvF3PrzvNFcoEov1ACTCBsw7Xln9ySl0oU7DeB+/cjI=)
                          2: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: Q+wUhnh29FhBJym4567snCa7z4nTeAWEhmKU24ANvCE=)
                          3: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: hfQlGpJvc95Pfy85yc6nCGSM67UcOu1jOPFHsJGwW4Q=)
                          4: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: qubI6gWPCNz5X+/Gfs0NEPDYI/K0k/cB9IVAWx8bTyg=)
                          5: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: sSIdllnvg4M1DGs8YGmNKZNiURvN96H1MMo+ucCRqd8=)
                          6: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: nVkklJpTCB1woXNIy8eL8fiFevvnvUpv5De02NYeOMM=)
                          7: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: dNSAWmxgTUWP9p8pdmyRlrOPm0IRFd6F+03Yl+DHvWA=)
                          8: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: w1MVU4ekD5soTAWIJylNS3K6gk7CgDes5++mV/VpMvk=)
                          9: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 4AY/lUPsJxku79ozRfC7DzUtbuOJ6CAC0mreKuR/soE=)
                          10: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: QFd2JrU7tTRbL93RdFQ5mIITMejwRFU/WkPQT5C6r9k=)
                          11: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: voEBc3zsXPpEfF9maHI5JVXcZ7lLKA42b/UBehz78wE=)
                          12: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: DRoCmPuWf7Goy6b8ay+89nX5k4OXZiMQBXfvplbhc24=)
                          13: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: vZOtLaOfjMhQfEcCJdIUC/qN22seOwp7tbsXKZXwRVo=)
                          14: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: OV+nB/EqLAsy/NezByF487GqVhpLPJ91ZyE8OUkFt2w=)
                          15: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: CMYmOK+8R1Hs3kHGhRx8R2555ufRrCqQtRcxPZZMVnA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a7:42:b0:b2:3b:bb:3b:43:94:da:cf:91:4b:27:0a:ac:58:bf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Apr 23 21:05:36 2025 GMT
            Not After : Apr 27 05:14:36 2025 GMT
        Subject: CN=09B61E074070AE53235A4BEED6A9A37F4EDB3737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:53:70:64:43:19:21:78:89:9c:bb:a1:d3:
                    85:e4:77:45:9e:b7:fb:8e:61:df:61:45:a9:35:c2:
                    0c:1d:26:2c:cd:c0:37:41:9f:14:df:5e:86:12:30:
                    83:ae:ad:79:2c:25:ea:69:46:34:bd:45:88:97:b6:
                    c3:23:7b:01:84:d9:01:2c:70:9a:28:84:cd:33:d8:
                    b8:2b:9a:24:b4:d6:c9:2f:d8:de:f7:23:d2:36:f4:
                    e6:0b:f8:68:31:a3:8f:6c:b0:9a:60:23:d1:37:09:
                    f1:45:9e:f4:c9:4b:57:f1:01:61:e8:37:9a:9c:88:
                    49:8d:fa:bb:d8:fb:4b:f7:3d:c5:cd:13:b1:7c:bc:
                    26:1a:b9:98:f9:00:10:41:b4:f7:51:32:27:ea:aa:
                    7a:39:05:77:ef:53:40:e5:bf:58:dd:96:2a:b7:f1:
                    32:a7:f3:b7:a9:eb:2c:2e:17:fd:80:68:b2:b8:b1:
                    78:f0:30:95:01:01:b9:2e:3a:02:7c:8d:90:6b:ff:
                    8f:86:9f:f1:30:83:2d:88:ed:09:b1:cc:2e:a3:c3:
                    c1:a7:83:25:37:6f:3b:2a:50:c4:b8:3e:a3:23:75:
                    ad:1b:4b:69:d7:8b:0c:ba:50:da:e1:cf:87:df:9e:
                    5e:2f:a7:22:6a:b3:d3:14:bc:a8:09:57:d9:2d:e4:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:1E:07:40:70:AE:53:23:5A:4B:EE:D6:A9:A3:7F:4E:DB:37:37
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ea:58:9e:da:cc:47:8c:cf:ae:c9:5f:d6:3f:35:fe:1d:0a:
         1c:ce:f8:89:1e:61:7a:15:70:22:7a:cc:39:10:03:29:3d:95:
         49:a8:3f:15:ad:a0:e5:49:4c:28:b5:03:52:e8:15:11:8c:64:
         d7:c1:f9:8d:6c:61:72:a1:08:75:53:c7:33:4f:c8:79:32:05:
         bd:6e:35:db:74:58:7d:0c:5f:7e:79:47:80:26:9a:f5:82:07:
         b3:bb:98:b3:dd:a8:60:88:ea:59:13:46:bf:35:0c:8f:d7:9e:
         94:9e:a7:97:ac:e2:f8:8f:b8:be:85:8f:a2:07:1d:14:12:3d:
         4f:3c:e6:09:f6:d4:00:6f:28:f2:5a:77:41:9d:ad:41:90:6a:
         08:75:48:e3:80:1a:47:59:47:af:5d:af:b5:cc:de:89:46:54:
         4f:75:4e:ea:5f:50:f5:c9:ca:b8:74:4f:9a:11:48:85:9a:40:
         dd:07:1e:b8:e3:1f:94:d7:0b:3b:1e:3e:6b:5b:e8:e6:f7:db:
         05:35:4c:67:90:4c:2e:e5:40:77:39:2d:1b:69:73:df:be:45:
         8f:bf:61:fa:83:91:ea:b3:f1:bd:b7:c6:cc:af:59:f3:f5:1f:
         b0:4b:6c:f8:79:aa:9d:8b:c9:79:65:8c:43:d4:36:35:b5:c5:
         24:3e:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:06 2025 by rpki-client on console.sobornost.net