Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
File:                     926C43E6DACC18978406A2C9C57272491FFF9536.mft (raw, json)
Hash identifier:          3tisY3NSgTDzsEnFpIppUrdbI6FCpIJLDogarTLctLw=
Subject key identifier:   40:17:46:F2:6E:41:FF:E8:E9:F4:97:94:F9:0F:33:EB:57:DD:0F:E6
Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36
Certificate issuer:       /CN=926C43E6DACC18978406A2C9C57272491FFF9536
Certificate serial:       372BBE942C436C7F7F6F5636AAE0239D3F454184
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
Manifest number:          01BA
Signing time:             Thu 24 Apr 2025 11:10:37 +0000
Manifest this update:     Thu 24 Apr 2025 11:05:37 +0000
Manifest next update:     Sun 27 Apr 2025 15:41:37 +0000
Files and hashes:         1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: 440yzb75Q1ifuPJKBrQv7u7fvgNxfcKqc/noGFO7Q4s=)
                          2: 926C43E6DACC18978406A2C9C57272491FFF9536.crl (hash: PFHz/VDm0N1adb4e/O5OsDM1TG7ss5LuffuH5JkddRs=)
                          3: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: t013231ljoN5MqgS667UMhHVb+Ygc6wOUXYnCwrv2sQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl
                          rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 15:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:be:94:2c:43:6c:7f:7f:6f:56:36:aa:e0:23:9d:3f:45:41:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536
        Validity
            Not Before: Apr 24 11:05:37 2025 GMT
            Not After : Apr 27 15:41:37 2025 GMT
        Subject: CN=401746F26E41FFE8E9F49794F90F33EB57DD0FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:57:15:f4:9f:14:20:ea:be:88:64:23:29:
                    ed:67:06:46:6f:0b:fa:74:a3:77:99:ad:a1:cf:35:
                    c8:b2:c5:74:08:d9:06:eb:c6:64:d8:ce:33:da:02:
                    cf:b4:a2:f8:81:ce:2f:ab:e4:13:2e:20:76:f3:bb:
                    3f:b2:cd:d1:92:b0:03:a3:12:95:77:99:18:bb:ad:
                    39:19:56:50:6d:04:08:87:73:47:91:21:01:d7:93:
                    2a:f1:9b:43:17:b2:e9:21:24:66:b2:d4:8f:2d:c8:
                    3d:b7:6f:d9:07:0a:e8:4c:13:50:72:f1:76:a4:3d:
                    1a:43:f3:41:3c:3c:bc:ed:48:b7:1b:f0:ef:65:a3:
                    a6:79:12:a0:fe:95:e9:a7:eb:52:1c:01:91:ca:e4:
                    f3:3a:da:08:51:40:2b:d9:7b:ab:51:aa:50:fd:d2:
                    1e:5b:39:5d:17:a2:ac:0f:a2:0d:7b:1a:56:64:0b:
                    c5:83:72:55:bd:11:9f:55:5f:15:b6:28:c0:02:0d:
                    9d:32:48:5e:a1:46:78:76:63:2f:d1:33:99:14:60:
                    c4:69:ed:22:a3:4f:49:d8:48:4b:ab:ce:c7:37:64:
                    03:83:81:1a:c8:29:8c:e4:7b:72:90:0d:c3:00:08:
                    3c:7f:19:30:b2:44:1a:bd:d0:b3:ca:bb:3b:b0:ba:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:46:F2:6E:41:FF:E8:E9:F4:97:94:F9:0F:33:EB:57:DD:0F:E6
            X509v3 Authority Key Identifier:
                keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:3e:53:e9:b9:a5:98:ef:70:7f:d9:95:96:fe:95:79:e1:
         6e:5b:e1:0f:62:34:b5:48:ca:80:69:0d:27:45:56:90:e5:d5:
         66:f5:c9:36:7d:a8:86:4a:d5:ad:59:c6:52:f8:80:d8:c3:ed:
         81:6f:df:2a:c4:b1:5c:8d:c4:03:87:0b:9e:54:a4:f4:9d:f6:
         62:01:29:3f:87:71:47:df:82:dd:cb:f8:09:fd:0d:5e:f2:36:
         93:76:a1:df:f2:04:d0:9c:48:1c:0e:75:b3:33:cc:f3:0e:8f:
         78:61:fb:19:c6:dc:3a:ab:3a:20:0b:c9:53:c8:d1:f6:d2:0b:
         04:27:2d:47:0f:b6:ea:1a:d7:69:00:86:88:46:3c:51:cf:25:
         94:b9:d5:0e:86:9f:e1:18:b5:5e:62:88:07:da:1f:ba:74:2b:
         25:f1:cf:54:3a:25:c8:c1:94:e6:87:96:72:1a:b7:fe:07:e4:
         7e:4e:89:24:30:b0:96:5b:ed:7b:26:92:03:91:20:6b:18:13:
         ca:58:b5:c3:2a:d2:4a:01:c5:49:76:74:7f:16:0d:fa:51:1d:
         2e:95:b3:1b:ec:a1:06:0d:f3:18:f6:bd:da:62:76:50:e4:56:
         63:34:dc:3c:56:5b:72:bd:9e:26:cf:f0:9c:96:00:f5:51:3d:
         74:89:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net