Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
File:                     3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json)
Hash identifier:          NpUaI5JwCaC57yHqLVht4U+WQtbklLW5vHswjqnnSdM=
Subject key identifier:   94:19:4F:A4:42:9D:64:BA:DF:EB:2A:CA:64:18:96:3D:85:60:22:B1
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Certificate issuer:       /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial:       7519508F32D53CDF3264EF5A33DAD38F9E806136
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
Manifest number:          BE
Signing time:             Fri 25 Apr 2025 18:31:55 +0000
Manifest this update:     Fri 25 Apr 2025 18:26:55 +0000
Manifest next update:     Mon 28 Apr 2025 20:12:55 +0000
Files and hashes:         1: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=)
                          2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: BKEcpM9Kg8YYx8TIl17vcpfRH/iW4wyrIws7bh1p6GE=)
                          3: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: KVqWrCgqN9/E3AfklAEguendaX4jM0SFjEmlq72RSrc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
                          rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 20:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:19:50:8f:32:d5:3c:df:32:64:ef:5a:33:da:d3:8f:9e:80:61:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
        Validity
            Not Before: Apr 25 18:26:55 2025 GMT
            Not After : Apr 28 20:12:55 2025 GMT
        Subject: CN=94194FA4429D64BADFEB2ACA6418963D856022B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:22:01:2c:84:9a:c9:25:f7:c3:59:c9:70:
                    2f:df:50:df:f4:8b:4a:cb:5a:fb:0a:2b:64:16:87:
                    38:fe:04:e0:38:e2:e2:49:81:7b:78:e4:c2:85:49:
                    c2:86:89:03:fd:1d:62:2b:36:11:8f:34:ba:3b:25:
                    4d:38:c5:14:75:17:68:fc:a5:2a:8d:1e:c0:dd:a3:
                    f0:31:23:03:69:2d:e2:6f:29:68:22:6b:39:80:2b:
                    1b:3a:bb:fe:2d:0c:6f:4d:3b:3b:1f:33:ed:c3:25:
                    1d:b5:6b:86:76:8f:ce:b9:78:a8:25:30:a6:77:37:
                    b5:88:24:c6:51:95:86:6c:49:e9:0b:87:e6:0b:10:
                    27:62:d8:13:46:e0:9e:61:7f:6f:01:97:95:e4:96:
                    4b:20:d7:65:ac:8a:0e:a3:f3:6d:64:2d:1b:5f:36:
                    03:43:3b:7b:70:87:ee:cc:27:af:b0:8a:bc:ea:1d:
                    61:b2:b3:20:ca:32:22:12:1d:6d:d1:f7:c3:50:ad:
                    50:d1:68:40:d2:95:dc:96:e4:c1:c3:c5:e1:70:ab:
                    7c:eb:35:bc:4a:ad:0c:a5:f8:75:35:8e:41:70:43:
                    cf:9c:6f:8d:b9:a2:13:db:1d:53:4e:8a:1d:02:42:
                    48:c5:27:d9:1f:5a:eb:05:c4:be:37:62:98:bd:ce:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:19:4F:A4:42:9D:64:BA:DF:EB:2A:CA:64:18:96:3D:85:60:22:B1
            X509v3 Authority Key Identifier:
                keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:53:44:24:cc:8d:33:f4:24:e9:45:28:43:48:57:aa:09:
         1e:e7:86:33:c8:86:66:20:cb:7e:59:49:45:eb:29:ca:ab:9e:
         33:aa:e3:cc:82:21:7f:0b:2f:4e:ee:e3:90:e8:f1:ae:3f:a6:
         ff:39:99:85:98:e6:69:3d:56:6b:34:ca:5e:eb:f3:68:7a:b8:
         62:50:03:b8:22:d4:a2:6b:72:eb:f6:b4:4e:13:cf:b5:90:bb:
         e1:9a:7e:fe:5d:6b:f6:60:98:0c:7d:9b:16:8b:28:54:d2:65:
         07:ad:16:e3:88:6c:5a:e1:65:5e:0b:61:58:93:51:00:4e:4f:
         22:4a:d0:92:52:d6:1b:26:0e:8b:d9:41:73:ac:4b:66:e9:99:
         21:f4:42:28:86:48:82:ec:6c:86:3b:1b:b6:6f:8c:4a:18:5b:
         4c:98:af:21:2f:2a:06:2c:ab:7b:aa:4b:26:d7:5f:79:df:b3:
         9a:b3:bf:70:5a:77:32:aa:38:5a:9c:be:9a:da:0f:ad:f0:ae:
         c4:0e:35:f1:7e:2a:a0:3d:c8:92:f9:bb:72:44:ba:08:b8:72:
         71:3d:a4:57:73:eb:ac:72:82:43:a7:5f:a4:ab:40:d4:a6:da:
         d1:91:25:66:b9:3d:36:8d:d5:5c:bb:0d:6a:4f:b7:3e:41:d9:
         2c:8a:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:25 2025 by rpki-client on console.sobornost.net