Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
File:                     3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json)
Hash identifier:          lqq+LfZrwcXD0k8Wj1gFHFZw/YVqO9d5pNvjHMkohLY=
Subject key identifier:   27:68:ED:ED:79:71:BC:67:01:0E:22:97:82:1F:FC:97:36:77:F4:48
Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
Certificate issuer:       /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Certificate serial:       57DD0D739CF604B835C005603C1D35756D0B009E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
Manifest number:          01A7
Signing time:             Thu 24 Apr 2025 22:40:53 +0000
Manifest this update:     Thu 24 Apr 2025 22:35:53 +0000
Manifest next update:     Mon 28 Apr 2025 00:40:53 +0000
Files and hashes:         1: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: CZ4K7GFD9Go5aD48WSkhSXI8wxpmYnTQCrXJMjgAzo4=)
                          2: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: rNS/N/K9vGK2hUxJ8KCbLDJUKWwvX57nR2QwzAJeNDg=)
                          3: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: wNXvnBOlqkuZ+mDM8d8H+wRf148WwJ/aSIjk47cajS4=)
                          4: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: Y9UwdeMAqthoV4BdpHdzHHfHrHSy2NpCx4uk4sbXYrk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl
                          rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dd:0d:73:9c:f6:04:b8:35:c0:05:60:3c:1d:35:75:6d:0b:00:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
        Validity
            Not Before: Apr 24 22:35:53 2025 GMT
            Not After : Apr 28 00:40:53 2025 GMT
        Subject: CN=2768EDED7971BC67010E2297821FFC973677F448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:8d:b1:96:e7:69:cb:a7:c3:46:5d:0d:44:
                    4e:20:bc:f9:94:14:02:87:87:a7:9f:38:4b:a4:c3:
                    39:06:f8:46:ae:9c:c9:26:23:36:ec:f0:0f:82:74:
                    36:2e:40:c2:c9:94:dc:ae:d9:21:79:12:fd:c3:a0:
                    24:2e:40:d7:0d:35:12:60:b6:8b:5a:e5:f8:73:44:
                    34:fb:a9:f0:cd:d0:13:de:c2:19:ff:4a:b0:01:ad:
                    9c:0a:8d:ca:d4:42:55:22:bd:7f:85:65:44:46:39:
                    3f:d3:e0:89:90:03:2e:18:b6:60:09:c5:65:7b:dd:
                    1f:06:bc:04:08:60:19:36:b9:93:d9:d6:51:37:4f:
                    e5:03:5b:4e:a5:b2:79:56:0a:cd:72:b2:d7:5e:e2:
                    d7:52:2c:e3:54:60:66:62:1f:48:43:46:30:01:7e:
                    71:ad:dc:05:44:44:db:50:54:a5:31:2a:fa:90:8a:
                    60:30:10:ed:c8:53:08:78:96:08:f0:b9:d9:c6:65:
                    0f:c3:8e:39:36:a4:2e:4a:f3:0e:d0:5f:15:90:d9:
                    02:78:a3:f7:63:b6:e1:b3:5f:2a:9d:b5:ed:43:c2:
                    91:f5:01:4a:b8:84:da:fd:ce:30:f5:21:dc:d3:6f:
                    64:b7:4a:8c:a3:95:30:96:d3:c8:4e:19:3e:f2:20:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:ED:ED:79:71:BC:67:01:0E:22:97:82:1F:FC:97:36:77:F4:48
            X509v3 Authority Key Identifier:
                keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:e6:06:b2:a3:79:7b:e0:51:bd:fe:64:e0:7d:9b:93:3a:
         67:22:16:d0:03:54:8a:b3:38:3a:d4:38:07:a2:ff:22:5e:5f:
         25:1e:a9:8f:90:ea:24:88:2c:8f:93:49:db:33:99:b8:2d:05:
         e5:a8:de:a4:1c:9f:3a:85:27:90:4c:62:eb:23:1e:04:4d:f4:
         b1:11:e4:d2:b4:fe:ce:e8:b8:4c:a3:66:03:3a:95:74:f5:5e:
         11:39:6b:dc:2a:63:67:53:94:ef:74:26:50:64:14:79:a4:f2:
         e5:19:03:35:9d:b4:33:91:fb:0e:4f:15:24:6d:6d:7b:30:be:
         06:dc:19:df:46:21:9a:47:9c:01:d5:cb:28:9b:ae:b6:4f:58:
         d6:c3:ed:74:c5:a1:21:b2:c9:28:00:ce:33:87:ee:ba:a7:22:
         44:9b:a7:df:12:64:11:ae:53:f9:1e:ce:1a:90:40:6b:93:20:
         ba:f9:57:79:54:3d:30:3d:c5:eb:93:21:75:06:64:a5:24:7b:
         b7:a3:20:e2:13:23:59:e1:ef:0e:32:07:8a:b8:46:ad:b9:7b:
         b5:73:82:e7:4e:07:c6:1f:d9:ac:57:a6:a9:83:d1:7d:e8:a6:
         8a:6b:32:c3:f4:fc:5f:92:66:72:c6:9b:3e:b0:3e:a1:7e:d4:
         4a:91:79:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV90Nc5z2BLg1wAVgPB01dW0LAJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4
NUMzNUU0RjAeFw0yNTA0MjQyMjM1NTNaFw0yNTA0MjgwMDQwNTNaMDMxMTAvBgNV
BAMTKDI3NjhFREVENzk3MUJDNjcwMTBFMjI5NzgyMUZGQzk3MzY3N0Y0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70I2xludpy6fDRl0NRE4gvPmU
FAKHh6efOEukwzkG+EaunMkmIzbs8A+CdDYuQMLJlNyu2SF5Ev3DoCQuQNcNNRJg
tota5fhzRDT7qfDN0BPewhn/SrABrZwKjcrUQlUivX+FZURGOT/T4ImQAy4YtmAJ
xWV73R8GvAQIYBk2uZPZ1lE3T+UDW06lsnlWCs1ystde4tdSLONUYGZiH0hDRjAB
fnGt3AVERNtQVKUxKvqQimAwEO3IUwh4lgjwudnGZQ/Djjk2pC5K8w7QXxWQ2QJ4
o/djtuGzXyqdte1DwpH1AUq4hNr9zjD1IdzTb2S3SoyjlTCW08hOGT7yIGi3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJ2jt7XlxvGcBDiKXgh/8lzZ39EgwHwYDVR0j
BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG
N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz
NUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk
YmEtNjMwOWE0OTc5MTdkLzAvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVF
RDc4NUMzNUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFC/5gayo3l74FG9/mTgfZuTOmciFtADVIqz
ODrUOAei/yJeXyUeqY+Q6iSILI+TSdszmbgtBeWo3qQcnzqFJ5BMYusjHgRN9LER
5NK0/s7ouEyjZgM6lXT1XhE5a9wqY2dTlO90JlBkFHmk8uUZAzWdtDOR+w5PFSRt
bXswvgbcGd9GIZpHnAHVyyibrrZPWNbD7XTFoSGyySgAzjOH7rqnIkSbp98SZBGu
U/kezhqQQGuTILr5V3lUPTA9xeuTIXUGZKUke7ejIOITI1nh7w4yB4q4Rq25e7Vz
gudOB8Yf2axXpqmD0X3opoprMsP0/F+SZnLGmz6wPqF+1EqReYY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net