Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          fA1I65e2FOxu6+3J3Ij6YGyP+5Ity+EkTX7nhN0om8A=
Subject key identifier:   2F:8F:04:81:29:04:A4:FC:93:A3:E0:CC:07:23:FA:F6:7D:21:A5:89
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       21A84398E4AD8783A39939CC7CED677BA1FF869A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          04C8
Signing time:             Fri 25 Apr 2025 21:30:01 +0000
Manifest this update:     Fri 25 Apr 2025 21:25:01 +0000
Manifest next update:     Tue 29 Apr 2025 03:07:01 +0000
Files and hashes:         1: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: 9/RRwI5l/NtYziLvL1Tovl6lPdp6toGo7gvjHA/JNLU=)
                          2: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: loxHv0+F3ZLNQEYmkghwWbkz+YGFFT2QGW5V6emi7YY=)
                          3: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: jiBUWbPw0O2a3brcntkLSXcufEsvlRQsB7AoiBmO/Ec=)
                          4: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: U6ziSuUpUkVdqXRSHe0CewbD/X71rI71q8SILZolHDo=)
                          5: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: poWV1SmxZOV82NJAx11/DVCuVnOVWtTUoFxKct51ClQ=)
                          6: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: nL0LSsh/K4F6n/0vBenQ8E/fDc1hwgkktfBtKNqqfSs=)
                          7: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: UiyK7EGS5/ed2qcDmNtp0df5P3xK0QuhcBEpKLOeKq0=)
                          8: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: x6HUjSxF1Hesr3n3pxIOWyMuhd/gV3tPQ4S5VvjGCt4=)
                          9: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: Rlel+43pEirvrfeffHgQ7cuDwzepsYOgj+qpnAyZmJg=)
                          10: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: m+q7ZgpD2GbDgHvxK3Mi9rcFamM0AOK41baaZkFJd+o=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 03:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a8:43:98:e4:ad:87:83:a3:99:39:cc:7c:ed:67:7b:a1:ff:86:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Apr 25 21:25:01 2025 GMT
            Not After : Apr 29 03:07:01 2025 GMT
        Subject: CN=2F8F04812904A4FC93A3E0CC0723FAF67D21A589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:76:7d:fb:02:3f:cb:2f:6a:6f:6b:84:4f:
                    49:27:02:5e:16:c8:af:ef:28:31:14:26:54:ca:04:
                    4c:96:ea:b6:0a:29:55:2d:5d:d8:ac:b6:a6:47:86:
                    52:a5:94:18:83:95:85:61:e8:e8:6a:e0:e3:61:1e:
                    b0:10:1f:61:ba:05:d0:63:91:ab:fa:f8:14:ff:c5:
                    3c:6b:20:0f:ae:ef:82:4e:c0:4c:47:cd:c3:5f:84:
                    62:c6:be:6d:7e:fc:e0:bf:ff:8c:9f:ec:02:01:5a:
                    95:9f:af:8f:2b:c5:63:3d:28:47:47:46:05:48:de:
                    ee:cf:5c:08:5c:4c:cb:c9:a3:c1:c6:3a:0f:58:45:
                    38:47:e5:ed:ee:2e:72:77:f9:02:02:25:c2:42:5d:
                    0a:fa:f3:ab:e7:3d:9a:a2:51:3c:23:1e:93:76:45:
                    c8:00:36:86:45:ab:10:e4:81:c4:a9:41:e0:b0:6b:
                    13:2a:cc:da:9e:d7:f5:99:a8:13:5b:b0:d2:c7:fa:
                    10:1a:c0:a6:f2:a0:d8:7e:3c:a0:7f:cf:da:de:34:
                    8c:a9:bc:43:87:1f:48:8a:ab:48:1a:dd:ed:39:c3:
                    fe:12:df:b7:43:ba:36:b3:e8:5b:d1:9c:7e:e8:37:
                    2b:89:c4:94:cb:3f:83:5c:67:b3:ea:83:1e:89:83:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:04:81:29:04:A4:FC:93:A3:E0:CC:07:23:FA:F6:7D:21:A5:89
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:43:5a:36:ac:07:d6:62:29:17:1a:24:cd:ec:5f:3f:73:44:
         b9:b4:c8:98:88:15:ef:eb:44:71:65:7b:34:17:3f:a9:4f:d6:
         df:7a:a4:3c:a9:95:63:ea:b6:7c:a2:c8:6f:01:ea:23:78:9b:
         1d:56:02:ae:7b:d2:f0:13:17:6f:49:76:e0:54:8d:30:aa:e3:
         31:4e:f2:23:18:bd:71:19:18:f4:37:cb:a0:3b:f3:44:d5:6b:
         1a:66:1a:b4:7c:b1:de:a5:fe:15:73:45:b2:4b:5c:3d:5e:12:
         19:03:11:18:6a:0c:58:ba:cc:35:7c:8a:df:da:3d:18:35:91:
         06:fd:bf:4d:ed:8f:f2:f0:7c:d4:8a:06:ec:f0:f2:10:ee:2c:
         33:7a:b7:a8:9e:19:25:53:06:ec:2d:05:a8:01:63:68:38:a9:
         9e:cd:9e:b6:0d:a8:bd:f8:20:63:22:71:36:2a:45:d0:0a:34:
         3f:7b:31:e0:bf:e1:e0:d8:1d:1d:31:88:c3:c1:e7:11:8e:05:
         eb:fa:1e:32:1a:35:7e:bd:9e:aa:01:4d:52:4c:9b:ab:70:47:
         b8:b3:de:f3:cb:dd:74:3d:ac:04:a2:7f:5e:d1:3d:ac:5a:e8:
         cf:58:95:3f:bb:e2:3b:cb:1c:8c:42:83:e0:4c:f1:8c:6c:64:
         8e:b2:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:30 2025 by rpki-client on console.sobornost.net