Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
File:                     731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft (raw, json)
Hash identifier:          iQG2V+fkIjsoGA7L90pyT7jCtDmgcJxiKvUCU0XH50E=
Subject key identifier:   6B:76:EE:7C:6C:5C:5E:2C:3D:BC:FD:FA:9D:30:12:5E:4B:B9:EE:52
Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
Certificate issuer:       /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Certificate serial:       77D6727F879514C056A5D2E6E88B381C63452CC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
Manifest number:          81
Signing time:             Sun 27 Apr 2025 15:51:23 +0000
Manifest this update:     Sun 27 Apr 2025 15:46:23 +0000
Manifest next update:     Wed 30 Apr 2025 23:04:23 +0000
Files and hashes:         1: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: DNJc9xkVk10+u7abf6ZM/Nl2Ukmj/FIJDXFuFGCkFwc=)
                          2: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: iXzUmlYgIeqgRD6OLpTZAHA87G2XsNDyecWPhh9XaJs=)
                          3: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: fYFecXdBAeKoyIAgB0JeLy6cqYChyPHEhUfoQQOYxUQ=)
                          4: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: WMzT2ENPMmi2mcaD4CnPa7CoBrNxdNCIISZtPItZ4MM=)
                          5: 731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl (hash: bJMSHYrsD8KCjW4Kqteofg/opG4d/VPufX30dmNSM2M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
                          rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 23:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:72:7f:87:95:14:c0:56:a5:d2:e6:e8:8b:38:1c:63:45:2c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
        Validity
            Not Before: Apr 27 15:46:23 2025 GMT
            Not After : Apr 30 23:04:23 2025 GMT
        Subject: CN=6B76EE7C6C5C5E2C3DBCFDFA9D30125E4BB9EE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:ad:7e:a8:c6:af:11:79:b1:64:52:bc:2b:
                    4b:e9:67:e0:53:6e:61:d1:89:ed:6a:3d:bc:59:9a:
                    74:cc:cb:23:05:e0:f9:c1:a0:2a:6a:d4:f0:3d:d4:
                    4d:b0:76:26:1d:fe:7a:1a:ba:b9:c8:38:81:16:76:
                    d6:d2:71:b7:43:74:d9:81:f9:c4:52:15:c6:1d:a4:
                    63:61:2f:3c:83:75:57:f3:ab:33:37:da:ad:85:d2:
                    b4:40:9b:fd:2d:2b:64:d0:3e:3b:1a:a2:7a:21:c1:
                    ca:2d:d8:b0:a8:74:f4:57:a4:7d:3c:81:6e:49:5c:
                    fe:de:d2:44:95:6a:41:68:0a:52:8a:dc:20:b1:e4:
                    d9:9d:0e:16:59:3f:a8:53:d5:80:bf:89:63:d9:b4:
                    88:e0:8d:49:a5:2c:24:7b:76:b5:67:5b:79:17:69:
                    24:07:d9:e4:c8:c3:9f:a2:a9:74:d1:3e:f7:17:a3:
                    c5:fa:4c:04:5a:75:c0:90:50:f0:ae:03:23:c5:a2:
                    83:6f:ac:f9:d8:9c:04:a8:d1:52:31:ca:23:b5:e2:
                    79:46:b1:96:0f:f6:99:5a:7b:fa:82:1f:ab:25:45:
                    33:1c:15:2e:d2:ff:ac:21:1a:ed:40:f1:29:4d:c8:
                    55:c2:1a:73:da:b5:9e:98:f7:2d:6c:df:21:24:af:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:EE:7C:6C:5C:5E:2C:3D:BC:FD:FA:9D:30:12:5E:4B:B9:EE:52
            X509v3 Authority Key Identifier:
                keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:fe:df:2c:fc:50:2d:fc:e7:4e:00:40:e6:db:fb:9c:99:
         6d:63:02:a3:64:e0:20:c3:f3:5e:9a:96:96:c1:dc:0f:2c:70:
         6f:f2:d7:9b:cb:fb:68:5b:56:00:c5:b5:f4:ec:38:f9:91:47:
         26:94:5d:ec:36:ab:3c:91:fb:c6:f1:43:5c:1c:fa:a9:8c:10:
         d1:a3:b3:ee:a6:91:8a:69:9a:c6:f7:1c:60:4d:4f:b6:0a:3a:
         64:c4:b6:1f:b3:3d:62:ad:af:ff:0f:c0:0f:03:64:12:6d:45:
         d5:42:8d:42:82:20:b1:cd:66:77:99:ed:4a:ee:fd:f7:84:fe:
         af:0a:6b:96:98:03:08:1a:10:38:22:d2:0a:9e:53:95:8f:d7:
         de:3c:42:55:08:59:91:6c:c3:5c:ff:00:72:c7:42:9f:d2:00:
         6c:2e:d4:e0:17:88:8c:dd:a0:4f:5a:4c:6c:eb:36:10:c0:d5:
         a7:c7:c9:fb:cc:1b:72:90:1f:02:c1:36:d8:99:45:95:35:de:
         1c:d7:c3:49:8e:9e:d5:4c:e0:74:aa:da:ea:17:f2:a3:e1:8e:
         5e:3a:fd:46:7a:08:39:19:dc:58:7d:e7:50:fe:28:0c:22:0f:
         1d:9a:a7:09:ee:26:fd:1f:48:27:5f:86:f2:c7:ee:7e:7d:f4:
         8b:a7:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:11:47 2025 by rpki-client on console.sobornost.net