Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
File:                     10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json)
Hash identifier:          tYJ++htbz591lRNX99f62i854wiELjeuGJXeNUu3pRw=
Subject key identifier:   DB:11:3C:90:CB:EA:D0:E4:57:5D:C5:D7:46:44:17:15:02:AD:B9:20
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       3EE772EBFA68A249D971D45B6F41073FC01328A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
Manifest number:          04C4
Signing time:             Wed 23 Apr 2025 17:50:56 +0000
Manifest this update:     Wed 23 Apr 2025 17:45:56 +0000
Manifest next update:     Sat 26 Apr 2025 21:26:56 +0000
Files and hashes:         1: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: ljwF6ITVZZqVtcMOWEgbQb3tCP2RBo+I4AZDViUqEJs=)
                          2: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: H7qdxG0CJs/yYiQYilPVBOjCY0BNB2JobVkWTO7DC7g=)
                          3: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: hPcgJjVDE9m3tBKtqfCMvkuvUEnp8UYizUZsK3IRz8k=)
                          4: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: pBwebMpuYYJXTb5pShB2CNNWZl6DNw4TGc/uma6DMgE=)
                          5: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: eL7Y1izm4AtK8cu6bXuRjAi2YgKXj79o6hvPdbF1OWQ=)
                          6: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: Gk747J2jBNpEXtir02tl58RV5f1YzhrWN3iKgxbQ7KE=)
                          7: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: T5ngtdyF1i/w6ghe18UJGC9hrXcDKT1dj0zrFRJXcKs=)
                          8: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: FXD9Xl9HQjE5rhTpZsmUh0+M9Gq4Zq3tqVQkODiT8rI=)
                          9: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: 9WCeU5uurKdIma/RjBrGY6SbYw575daktwtbDsB0hn4=)
                          10: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: U+Nn2r5Sn/4yz+Dw8s2J+Cn+SRVePHMvbt6ShZoiqDk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 21:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e7:72:eb:fa:68:a2:49:d9:71:d4:5b:6f:41:07:3f:c0:13:28:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Apr 23 17:45:56 2025 GMT
            Not After : Apr 26 21:26:56 2025 GMT
        Subject: CN=DB113C90CBEAD0E4575DC5D74644171502ADB920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:63:b4:18:02:e3:bb:3d:80:58:8f:38:ad:
                    59:26:4c:17:60:37:74:23:30:2f:42:5d:11:3d:e6:
                    04:bd:f6:67:c2:b2:a7:38:c5:12:56:4e:4a:5a:c5:
                    a4:18:69:a0:23:1b:97:c6:ca:18:78:21:eb:28:d8:
                    ac:aa:c3:4c:e9:4b:98:18:e2:15:6d:a4:e9:79:9a:
                    f6:64:06:ea:c8:12:9c:de:cd:15:74:c1:de:ca:e8:
                    19:fb:7b:42:1d:56:a4:92:26:3f:3b:d4:06:9b:7a:
                    b4:54:14:a3:59:d2:58:d4:c4:4c:83:5a:77:20:1c:
                    af:61:9c:ed:86:e6:4a:20:bf:1e:68:45:f6:b2:ab:
                    75:df:45:7b:70:4b:7b:29:0d:36:57:70:10:84:3b:
                    83:ef:e1:eb:ef:46:b8:a8:40:51:e6:74:a1:db:05:
                    a0:cf:a6:89:bc:c1:23:6a:43:e0:b2:f6:2c:3d:28:
                    e1:68:e8:50:3a:5c:a3:4f:80:49:fb:b3:4d:36:7d:
                    cf:63:bb:a7:fa:ab:53:0d:bb:72:ab:2e:e4:71:46:
                    5f:aa:53:e0:d2:96:ee:17:ba:27:7c:e9:7f:93:90:
                    97:82:74:32:9e:17:48:8f:af:24:06:83:f0:74:6a:
                    0a:78:9c:4b:a9:b8:f3:ec:ca:f2:e4:69:07:76:1a:
                    54:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:11:3C:90:CB:EA:D0:E4:57:5D:C5:D7:46:44:17:15:02:AD:B9:20
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:26:45:2b:bb:6f:b6:a7:47:8e:15:f2:24:30:dc:70:00:39:
         db:8e:20:f3:70:8f:8a:fa:e2:2b:97:73:b9:a0:79:bc:d5:a6:
         6a:68:d4:8b:82:46:cd:bd:79:98:00:04:5a:dd:5d:ad:33:02:
         fb:bf:fa:42:4f:84:ec:51:72:2c:83:8d:0e:62:f6:d8:5b:ad:
         c3:e5:57:88:ee:d2:5f:b0:49:c3:dd:ef:b3:2d:b1:97:9e:6a:
         91:47:38:c3:ff:2a:13:e7:78:ed:a4:51:d2:17:ae:04:3c:4b:
         49:dd:16:05:5c:dc:fd:79:87:48:0d:99:ea:ea:9c:fd:54:2e:
         5a:45:0f:01:13:a4:15:0a:fe:df:37:ff:10:5d:09:92:40:08:
         c1:e5:99:7f:52:e8:e8:c2:95:1b:ce:16:82:e5:e4:c3:9d:11:
         ef:fb:c0:fb:2e:c4:81:e4:c2:d9:f9:a4:5a:1b:47:49:d8:b4:
         5b:9f:85:f1:a0:73:9d:49:f5:b3:be:2a:86:37:70:ea:bb:5a:
         59:82:74:31:39:00:5e:20:b0:41:0a:1c:cd:26:ef:75:03:29:
         58:91:d9:b4:16:b5:07:4a:68:02:33:5b:89:24:72:f3:4f:50:
         0b:aa:f9:42:0f:d5:6c:8f:99:c2:68:9d:38:c7:67:e5:1d:a4:
         d9:17:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net