Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
File:                     43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json)
Hash identifier:          4N5WAgQboieYt4KfeOVn+AcLnY4sHWPClY74Ly5piMc=
Subject key identifier:   A9:99:1D:7C:7A:37:FB:CD:BC:12:2D:AB:D7:EB:E7:F9:66:6E:A8:07
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Certificate issuer:       /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial:       232894525717B20ACA756AB15B1C857D29AFD96E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
Manifest number:          E9
Signing time:             Sun 27 Apr 2025 01:30:42 +0000
Manifest this update:     Sun 27 Apr 2025 01:25:42 +0000
Manifest next update:     Wed 30 Apr 2025 04:34:42 +0000
Files and hashes:         1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=)
                          2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: vFR4stkO/1Zd7STZ0wonbCNVsRMH1bHtWgQ6pojUGFE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl
                          rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 04:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:28:94:52:57:17:b2:0a:ca:75:6a:b1:5b:1c:85:7d:29:af:d9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
        Validity
            Not Before: Apr 27 01:25:42 2025 GMT
            Not After : Apr 30 04:34:42 2025 GMT
        Subject: CN=A9991D7C7A37FBCDBC122DABD7EBE7F9666EA807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:78:8d:ed:29:e5:c3:3e:c3:d9:3d:b3:3f:
                    3a:e8:08:7d:2d:0a:3e:d8:f5:f0:c9:07:82:5d:dd:
                    a6:ab:8e:fa:39:70:9d:39:94:4c:f6:3d:16:cc:f7:
                    61:60:89:c9:a2:c7:49:80:44:3c:12:54:7f:7d:c0:
                    0d:dd:9c:c0:9b:08:44:e5:7b:e4:e7:8b:8b:6c:69:
                    76:2a:07:f6:eb:af:b9:06:9d:41:be:d9:c1:80:07:
                    e6:17:54:bd:5d:1a:a5:36:7d:b0:fb:1f:a9:c1:ca:
                    fd:67:26:b0:d4:af:21:92:6f:cd:41:b9:54:b4:b5:
                    86:65:1b:6c:3b:0c:51:17:69:ea:73:62:d1:77:4e:
                    55:6a:6c:48:a8:ff:06:46:88:b6:c4:95:40:b5:98:
                    a2:ef:de:7e:f6:8a:93:9d:e6:b8:4d:a8:cd:04:c1:
                    03:cb:ec:99:b1:29:2e:69:4d:14:64:c6:d8:26:2c:
                    7f:90:d6:b9:05:8e:72:16:47:eb:14:00:5e:85:6c:
                    c1:1f:fe:e7:dd:16:51:8a:a2:4e:dd:c4:d0:f0:02:
                    c0:11:1b:b4:52:2b:e3:92:a4:e6:cd:3f:64:64:0c:
                    32:a1:0b:4c:bc:3d:53:95:b4:da:f9:33:dc:de:8c:
                    70:28:62:48:80:49:32:cb:16:5b:eb:b0:73:c7:86:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:99:1D:7C:7A:37:FB:CD:BC:12:2D:AB:D7:EB:E7:F9:66:6E:A8:07
            X509v3 Authority Key Identifier:
                keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2d:c1:b4:ad:74:9d:fc:93:7b:cb:17:c8:65:b5:f5:d9:da:
         ae:c3:35:fe:4e:75:10:8a:d1:9f:b1:40:9f:e8:3b:2c:a7:a9:
         a6:84:19:58:a1:fb:f0:ba:94:c2:d1:f1:34:46:30:5b:0e:5a:
         7e:84:54:f7:28:c7:ea:51:cd:19:78:d1:15:d3:b6:9d:21:2c:
         39:89:ba:10:9b:3f:67:76:b9:d7:06:31:54:82:c4:e9:40:b4:
         e9:95:80:5d:1f:4b:39:e9:c9:e3:1c:d0:83:95:db:1a:d8:dc:
         ce:d8:7e:f3:45:9d:4f:09:a7:be:41:f0:d6:d6:1b:79:1b:82:
         83:76:ce:4b:4c:41:1d:80:7c:9d:6e:b6:0e:6c:cc:12:24:e9:
         ce:f7:13:b3:56:d6:a9:59:b6:e3:a8:eb:9f:d8:74:59:2e:02:
         96:da:2f:e5:bc:6a:14:d3:7f:44:ae:82:1f:b5:08:53:a9:21:
         2a:17:c1:83:7e:36:e9:9d:8d:54:28:7e:68:08:15:a3:a0:ce:
         85:d2:03:2d:3c:80:e3:9e:0c:a3:8b:fe:f7:0a:af:f7:0a:44:
         52:81:c2:6d:94:6a:57:6f:e6:02:2e:ad:ea:67:4d:e3:bd:e7:
         77:fc:07:3a:d3:ab:1d:92:5d:0b:ed:29:e3:bd:79:a9:94:c3:
         d8:70:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:32:54 2025 by rpki-client on console.sobornost.net