Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
File:                     D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json)
Hash identifier:          VzQXxgtseYB0R/HuLwxauvwWYgOf7/t/C/gulwOSWKg=
Subject key identifier:   CA:8F:B2:F6:9E:61:E5:50:0F:7D:2E:24:C6:6D:0B:72:2E:54:D5:84
Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29
Certificate issuer:       /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
Certificate serial:       5B4244C1FC31CBFB1107D4F149404506CE975A7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
Manifest number:          033C
Signing time:             Fri 25 Apr 2025 16:52:08 +0000
Manifest this update:     Fri 25 Apr 2025 16:47:08 +0000
Manifest next update:     Mon 28 Apr 2025 20:05:08 +0000
Files and hashes:         1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: 6WzaeOlzMnvqMvjirzRCZywlE4LD7iGHqiDDuH7K7Ho=)
                          2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl
                          rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 20:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:42:44:c1:fc:31:cb:fb:11:07:d4:f1:49:40:45:06:ce:97:5a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29
        Validity
            Not Before: Apr 25 16:47:08 2025 GMT
            Not After : Apr 28 20:05:08 2025 GMT
        Subject: CN=CA8FB2F69E61E5500F7D2E24C66D0B722E54D584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:bd:cd:f7:c9:ef:85:a9:57:43:ef:27:d3:
                    a4:93:98:22:1a:4d:75:23:3b:fa:72:7a:38:31:6e:
                    51:e1:28:da:47:60:4b:ef:90:b0:cd:68:d6:68:6c:
                    8c:65:52:df:7c:9a:fd:85:52:dd:82:84:22:95:bf:
                    5b:40:39:a9:7e:b4:da:10:1b:e5:4c:36:de:4d:a3:
                    86:46:ec:37:56:8a:f2:01:cb:84:e2:0d:9b:41:d0:
                    25:da:0a:59:f3:90:73:cb:3a:a5:e8:38:1d:ef:5d:
                    c2:0f:38:95:77:6a:19:f5:81:46:52:40:cf:cf:9d:
                    53:75:bc:f5:78:78:c2:01:3b:9b:77:3a:7e:e6:0c:
                    ac:62:b8:9b:03:d6:8c:42:e6:58:14:55:cd:ca:ef:
                    7e:37:85:0a:ac:b2:9f:ad:c5:67:be:60:d9:07:9f:
                    d1:6f:f3:05:68:ae:6a:ee:dd:61:37:23:a9:f7:30:
                    7a:45:93:6c:01:d0:dd:66:09:1c:1a:45:1b:a7:71:
                    c1:6a:1f:7f:bf:3d:9a:55:0f:2f:c5:e5:18:1b:32:
                    26:c5:8e:19:f5:04:cd:50:bc:e2:cc:ce:c6:b8:79:
                    76:0a:4a:26:86:61:89:43:c3:4b:7c:24:c6:61:54:
                    53:f5:0b:67:f7:82:a6:03:09:5f:33:e6:47:f9:ac:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:B2:F6:9E:61:E5:50:0F:7D:2E:24:C6:6D:0B:72:2E:54:D5:84
            X509v3 Authority Key Identifier:
                keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d3:31:27:93:de:6b:92:da:c0:04:f7:6a:4f:81:14:67:0b:
         b4:a2:1c:a4:e4:90:75:54:19:71:6f:96:67:5b:f6:f8:97:bd:
         43:db:c5:36:2a:39:b2:c2:6d:40:7a:21:2c:7f:5a:21:e2:af:
         3a:c8:73:83:9d:d3:42:86:35:b7:52:14:90:5a:71:cd:9d:07:
         57:d3:5e:1e:6a:0a:c4:23:ff:54:3f:b7:bd:55:f4:1c:2f:f0:
         68:4a:9f:a4:8a:67:e8:36:e2:63:96:aa:8e:fe:9b:67:fd:fa:
         1c:c3:d1:e0:ef:9d:b4:04:1c:b7:f0:41:4d:93:b8:56:34:fb:
         98:b1:f9:91:4a:6d:ff:33:16:f1:f7:6c:32:6c:2c:f8:29:87:
         f7:60:96:82:ba:cb:18:19:10:4b:09:82:56:7e:41:87:ab:fa:
         e9:99:eb:d9:67:0f:a5:aa:97:89:75:35:c6:3c:70:0d:5b:e3:
         e0:eb:9f:2e:0b:0b:ec:ff:3b:1d:6d:c9:50:8f:5e:72:c2:c8:
         27:c7:e2:28:75:3b:66:f4:0c:38:ed:d8:c7:59:aa:6e:a1:3f:
         87:14:49:7f:09:96:2c:d3:0c:16:2b:cf:f2:22:2e:91:14:bc:
         5c:ea:38:c8:c0:ec:55:f6:b3:be:94:4e:ed:a5:db:70:38:95:
         8c:1f:2d:88
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW0JEwfwxy/sRB9TxSUBFBs6XWnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD
ODkwMkIyOTAeFw0yNTA0MjUxNjQ3MDhaFw0yNTA0MjgyMDA1MDhaMDMxMTAvBgNV
BAMTKENBOEZCMkY2OUU2MUU1NTAwRjdEMkUyNEM2NkQwQjcyMkU1NEQ1ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9r3N98nvhalXQ+8n06STmCIa
TXUjO/pyejgxblHhKNpHYEvvkLDNaNZobIxlUt98mv2FUt2ChCKVv1tAOal+tNoQ
G+VMNt5No4ZG7DdWivIBy4TiDZtB0CXaClnzkHPLOqXoOB3vXcIPOJV3ahn1gUZS
QM/PnVN1vPV4eMIBO5t3On7mDKxiuJsD1oxC5lgUVc3K7343hQqssp+txWe+YNkH
n9Fv8wVormru3WE3I6n3MHpFk2wB0N1mCRwaRRunccFqH3+/PZpVDy/F5RgbMibF
jhn1BM1QvOLMzsa4eXYKSiaGYYlDw0t8JMZhVFP1C2f3gqYDCV8z5kf5rIu5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyo+y9p5h5VAPfS4kxm0Lci5U1YQwHwYDVR0j
BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC
OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw
MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk
ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky
RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALbTMSeT3muS2sAE92pPgRRnC7SiHKTkkHVU
GXFvlmdb9viXvUPbxTYqObLCbUB6ISx/WiHirzrIc4Od00KGNbdSFJBacc2dB1fT
Xh5qCsQj/1Q/t71V9Bwv8GhKn6SKZ+g24mOWqo7+m2f9+hzD0eDvnbQEHLfwQU2T
uFY0+5ix+ZFKbf8zFvH3bDJsLPgph/dgloK6yxgZEEsJglZ+QYer+umZ69lnD6Wq
l4l1NcY8cA1b4+Drny4LC+z/Ox1tyVCPXnLCyCfH4ih1O2b0DDjt2MdZqm6hP4cU
SX8JlizTDBYrz/IiLpEUvFzqOMjA7FX2s76UTu2l23A4lYwfLYg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net