Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
File:                     44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json)
Hash identifier:          CefeK1Ki0/EwuSXB5dgHg6SEZGR3P/uGFAM5x89Vu80=
Subject key identifier:   21:3A:BC:FC:4C:B4:91:D1:F4:04:69:DA:6E:5A:26:58:8A:87:48:95
Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
Certificate issuer:       /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Certificate serial:       0ED927A83C0ACDF9A874352437B9DD5F971422B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
Manifest number:          038D
Signing time:             Thu 24 Apr 2025 10:21:01 +0000
Manifest this update:     Thu 24 Apr 2025 10:16:01 +0000
Manifest next update:     Sun 27 Apr 2025 14:28:01 +0000
Files and hashes:         1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=)
                          2: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=)
                          3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: /idvbj+v4dCnq7fjh2KYkcCfrrd9FjSREfPj9b5GK1w=)
                          4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl
                          rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d9:27:a8:3c:0a:cd:f9:a8:74:35:24:37:b9:dd:5f:97:14:22:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
        Validity
            Not Before: Apr 24 10:16:01 2025 GMT
            Not After : Apr 27 14:28:01 2025 GMT
        Subject: CN=213ABCFC4CB491D1F40469DA6E5A26588A874895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:74:f3:0b:5b:78:07:b2:fd:2b:cb:44:13:
                    d2:68:71:8b:60:22:cd:a7:fd:1d:09:24:3e:ac:a7:
                    9f:1e:73:24:15:24:13:1e:fb:ee:c1:5d:ee:95:40:
                    92:1a:cd:30:db:09:20:32:79:49:00:5f:11:dc:d1:
                    ff:5b:a7:3d:36:af:3e:03:3d:66:3f:57:24:29:c8:
                    59:0b:9e:a2:d8:24:cd:2e:c2:ca:15:22:f0:0c:b0:
                    8b:37:83:0b:27:e6:9d:0b:39:2c:f6:a4:3c:ed:ed:
                    fe:4c:c2:f8:1e:ec:3e:7c:a1:14:03:70:1a:43:4d:
                    26:e8:72:f6:b0:d1:77:59:ad:83:0c:e4:72:be:23:
                    b4:0a:f2:6b:a8:fc:4b:f7:e6:0d:19:e5:ef:d2:72:
                    a3:42:70:17:ed:2b:32:12:f1:f6:92:6a:27:16:6b:
                    89:b0:c6:87:09:38:e9:3f:7f:68:ba:45:5b:5a:fc:
                    12:6e:ce:cf:4f:31:9f:90:73:5a:75:cb:ef:af:c7:
                    5a:8d:f9:48:83:ae:47:1d:ba:39:54:97:f9:98:b5:
                    2e:80:b6:c5:8f:fa:70:58:a9:47:8e:25:ab:b0:77:
                    b4:18:a2:fd:3a:c3:d0:ef:50:2b:c1:22:51:39:fd:
                    16:a4:20:5b:f7:2c:ab:d0:db:56:c5:64:95:85:e7:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3A:BC:FC:4C:B4:91:D1:F4:04:69:DA:6E:5A:26:58:8A:87:48:95
            X509v3 Authority Key Identifier:
                keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:09:d6:9b:21:04:0b:e6:da:6c:28:32:04:fd:9a:86:b8:a0:
         5a:d3:d7:6a:ce:d4:9a:ad:fb:a4:bd:4c:fa:9f:19:9c:ee:8e:
         29:26:a4:1a:5b:b7:b0:0b:31:1e:eb:c1:16:63:1f:27:6f:5b:
         a1:f9:20:81:c5:cf:2c:a0:c4:9a:96:56:63:15:b2:81:aa:33:
         3a:77:28:9b:f1:df:f8:44:55:ad:fd:0e:e0:e4:71:b4:49:af:
         10:af:58:7e:9b:bd:19:46:92:d7:88:cf:ec:ca:1b:cb:d7:60:
         de:66:c3:30:3f:15:dd:a3:33:8d:19:a4:d4:a5:b2:63:76:4e:
         22:55:0a:d3:1a:14:0e:a0:7b:21:d1:a6:b0:9d:45:50:37:30:
         7c:84:75:d2:d2:d1:f4:ab:26:22:4b:a2:b0:1a:10:2b:07:10:
         49:76:ef:83:28:aa:0d:94:b8:9a:69:16:51:8c:e7:12:4a:57:
         61:eb:9b:3b:88:2e:4f:4a:d4:39:c2:a3:39:a5:bd:08:f7:51:
         64:cb:36:5d:aa:a4:50:06:cf:7b:ab:5c:47:5c:4d:ee:92:9d:
         42:d4:28:8a:fc:5d:85:df:49:3e:da:0d:89:c3:3a:91:0b:b5:
         41:37:8f:bf:76:de:82:09:46:46:44:2b:ea:d3:7e:1c:f7:9a:
         c2:13:b3:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDtknqDwKzfmodDUkN7ndX5cUIrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1
QTlDOTcxMDAeFw0yNTA0MjQxMDE2MDFaFw0yNTA0MjcxNDI4MDFaMDMxMTAvBgNV
BAMTKDIxM0FCQ0ZDNENCNDkxRDFGNDA0NjlEQTZFNUEyNjU4OEE4NzQ4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaInTzC1t4B7L9K8tEE9JocYtg
Is2n/R0JJD6sp58ecyQVJBMe++7BXe6VQJIazTDbCSAyeUkAXxHc0f9bpz02rz4D
PWY/VyQpyFkLnqLYJM0uwsoVIvAMsIs3gwsn5p0LOSz2pDzt7f5Mwvge7D58oRQD
cBpDTSbocvaw0XdZrYMM5HK+I7QK8muo/Ev35g0Z5e/ScqNCcBftKzIS8faSaicW
a4mwxocJOOk/f2i6RVta/BJuzs9PMZ+Qc1p1y++vx1qN+UiDrkcdujlUl/mYtS6A
tsWP+nBYqUeOJauwd7QYov06w9DvUCvBIlE5/RakIFv3LKvQ21bFZJWF5w53AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUITq8/Ey0kdH0BGnablomWIqHSJUwHwYDVR0j
BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1
QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD
OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2
Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw
MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEgJ1pshBAvm2mwoMgT9moa4oFrT12rO1Jqt
+6S9TPqfGZzujikmpBpbt7ALMR7rwRZjHydvW6H5IIHFzyygxJqWVmMVsoGqMzp3
KJvx3/hEVa39DuDkcbRJrxCvWH6bvRlGkteIz+zKG8vXYN5mwzA/Fd2jM40ZpNSl
smN2TiJVCtMaFA6geyHRprCdRVA3MHyEddLS0fSrJiJLorAaECsHEEl274Moqg2U
uJppFlGM5xJKV2HrmzuILk9K1DnCozmlvQj3UWTLNl2qpFAGz3urXEdcTe6SnULU
KIr8XYXfST7aDYnDOpELtUE3j7923oIJRkZEK+rTfhz3msITs58=
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net