Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
File:                     50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json)
Hash identifier:          cZEVpGKA1fEi7wI3kP+E4P+BLQUFHmtMd5PL5spe6O4=
Subject key identifier:   21:C1:E2:67:83:49:8D:1B:C3:31:42:A2:27:E3:00:5B:90:62:38:F3
Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A
Certificate issuer:       /CN=50D9825940B483F044841C179E5B7712607CAB2A
Certificate serial:       7DEA79F84BBD636866511B79B86781EC4AE7C236
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
Manifest number:          01DA
Signing time:             Fri 25 Apr 2025 02:21:45 +0000
Manifest this update:     Fri 25 Apr 2025 02:16:45 +0000
Manifest next update:     Mon 28 Apr 2025 07:32:45 +0000
Files and hashes:         1: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: BwDr+aUJotRpIUGXxo0dt9l6CCSA6PXELterw6GdmtE=)
                          2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: xyN4gf78a7jI8Z4ciAYVpZOIcZkGTzx+yhZ1lijRom8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl
                          rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ea:79:f8:4b:bd:63:68:66:51:1b:79:b8:67:81:ec:4a:e7:c2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A
        Validity
            Not Before: Apr 25 02:16:45 2025 GMT
            Not After : Apr 28 07:32:45 2025 GMT
        Subject: CN=21C1E26783498D1BC33142A227E3005B906238F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:7c:81:a1:11:da:a0:79:b5:9c:f8:fa:36:
                    14:49:93:22:11:96:6e:c4:00:20:b2:f4:1c:48:34:
                    40:e9:bd:f8:d0:c5:9a:91:1d:74:35:ee:fc:34:05:
                    6d:15:46:85:92:04:41:3d:62:cd:e5:7e:0c:5f:7c:
                    7a:9d:ea:08:68:76:91:38:32:2f:03:85:9f:69:35:
                    0b:9c:4b:7e:70:2c:8e:9f:62:c3:43:13:67:58:09:
                    71:66:a9:37:db:df:4a:d3:db:a6:f4:89:a9:da:94:
                    2d:b9:f3:09:99:d4:0e:3b:af:d5:94:03:51:0a:5e:
                    d9:ce:b1:d5:4c:24:53:6f:15:cc:19:e8:68:61:40:
                    35:8d:68:da:06:78:25:f2:0c:b2:9a:f9:fc:63:2d:
                    cd:a7:e7:91:ac:44:eb:e7:ac:3e:67:66:83:b7:13:
                    ec:80:00:77:8f:c1:69:24:92:cf:7e:67:61:28:0c:
                    39:ca:a2:fc:2f:49:13:d4:16:f3:28:4c:1c:e8:5b:
                    1c:64:4f:d4:e3:b0:db:cf:b8:6d:cf:b2:b6:15:09:
                    8f:3e:6f:3f:73:bc:ff:f2:f4:74:27:c2:2c:14:e9:
                    d4:4e:f2:41:56:5e:c0:80:e0:4f:d5:46:3e:dc:92:
                    20:92:9e:18:59:a1:c1:87:68:02:9f:0e:b0:29:31:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C1:E2:67:83:49:8D:1B:C3:31:42:A2:27:E3:00:5B:90:62:38:F3
            X509v3 Authority Key Identifier:
                keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:79:76:8f:6b:24:63:f2:e6:9d:b3:24:4e:60:33:db:c0:00:
         4d:74:55:04:31:dc:73:23:f5:e2:83:ff:92:48:df:b4:16:59:
         4e:54:9c:c0:5d:39:49:c5:7f:09:77:9f:47:ed:63:e5:1d:b4:
         70:7d:65:1e:88:ec:22:60:76:83:a9:86:01:ea:9f:3b:c7:37:
         3f:2c:8a:68:86:6e:a6:87:4a:cf:3b:28:a3:b4:7d:d6:94:3e:
         98:b9:0e:71:0e:34:84:78:ce:4e:39:22:a1:1f:9d:fc:2c:5f:
         3a:e7:82:15:a5:41:a1:1d:a8:18:1d:f5:80:4f:cf:e8:5f:33:
         41:41:07:c9:4d:56:90:43:a4:56:0a:9d:c9:b2:c0:6d:40:4e:
         69:81:b9:e4:53:0b:b9:6b:c4:58:5a:40:07:a4:13:7e:2f:4f:
         7a:72:3e:50:fa:95:69:f0:a3:5c:6d:e0:25:e9:44:f8:d0:d6:
         4d:27:ba:cc:51:c3:f4:46:36:bb:d9:4a:9a:e7:bc:a6:05:0e:
         4c:72:51:33:a0:de:61:5c:88:69:70:a7:ff:19:7c:c1:0e:05:
         66:f8:b2:ff:3a:c5:7c:ba:2b:44:e1:20:a7:ef:b2:a6:6d:9e:
         0d:4b:e2:e8:de:1e:40:93:72:33:16:ee:48:ea:9e:5e:4a:a4:
         68:6a:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net