Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          lXxOIZEQ9vXk6HPEjaHOqZOH97YgKZZ6ExVBHw2hZ/U=
Subject key identifier:   77:64:E2:EE:BC:B1:D0:9F:C0:21:96:FF:32:57:6A:9F:85:76:A3:ED
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       72138C30A5D80FB73C03627AD94419F3172EFF3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          01F9
Signing time:             Sun 27 Apr 2025 02:31:02 +0000
Manifest this update:     Sun 27 Apr 2025 02:26:02 +0000
Manifest next update:     Wed 30 Apr 2025 14:02:02 +0000
Files and hashes:         1: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: TRkbIk0+FrV+K3gHGX1NOEP/Zf828r6e2rZtJ22y8NM=)
                          2: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: zvgnMY8wPSXc3mzVu3a1CGAGczTfjSmy5MA1FfiX5lU=)
                          3: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: eE3XQXL5yxYICxpW4xLR89CNbidQvABOBnQ5o39erVY=)
                          4: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: jq0e805LfMnkdfWLKacSRG7Ij32XtfUPAgDbV/aAs+8=)
                          5: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ckyPU+dOc2DPyymdMy/gds0ZvQT1LlPymVaytADGQCs=)
                          6: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: MzKgSqALIjMd9pw7UwySp3twGwQgGA4Pp2Zp+VNAmFs=)
                          7: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: cotwBZV4fpeK93CI+xCpGvEhPESCOQnDsG0stYfaSUg=)
                          8: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: NB4FLy9wxdO46KaFzlLKK3MxTTNNQDmTurDY8ReKCRU=)
                          9: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: 9AgM/Fc/trfBx80xVB31YmDWKQHoLWDjrj5feQPz0y4=)
                          10: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: OwGVX4uDsFx+BfSDv1qnIHIR7bY2X0pI7Wmkb/eOX/M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 05:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:13:8c:30:a5:d8:0f:b7:3c:03:62:7a:d9:44:19:f3:17:2e:ff:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Apr 27 02:26:02 2025 GMT
            Not After : Apr 30 14:02:02 2025 GMT
        Subject: CN=7764E2EEBCB1D09FC02196FF32576A9F8576A3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:67:29:b6:2c:f0:c1:54:f2:53:29:e8:5e:
                    d0:56:72:33:4f:c4:06:42:6e:ff:8d:95:e6:88:07:
                    6c:00:b1:fa:f2:fd:51:b6:6f:4c:eb:79:09:b6:1c:
                    7c:b7:91:7b:a3:d2:f4:15:aa:9b:6c:f3:c2:7a:79:
                    08:ef:b7:63:76:5a:51:ea:f2:ec:b2:7b:d1:26:2a:
                    21:2c:5f:ba:81:c3:df:74:b0:17:d9:c7:c6:1b:58:
                    1a:ea:4b:28:70:19:ce:16:07:c4:bc:14:4c:f9:f7:
                    88:15:c5:a0:d0:2e:65:ee:94:e7:5b:85:f7:93:3a:
                    e9:f4:c1:be:4d:82:c5:71:3b:cd:06:94:1c:1a:79:
                    84:6e:02:68:ac:2e:9d:a2:23:0b:08:ec:da:1c:45:
                    75:30:d6:e1:5e:49:98:8a:b6:59:71:f6:e8:28:70:
                    38:6b:12:8d:44:47:16:1b:cb:75:5b:2d:f9:08:9d:
                    c0:ee:fc:fb:8a:18:a7:cd:95:6c:d5:f8:28:dd:a7:
                    1a:91:84:61:e6:cf:91:5a:c4:d8:c5:57:e4:9f:6e:
                    8b:43:7e:70:84:bf:06:a8:ef:12:47:0a:5b:6a:0f:
                    2a:7e:ad:c5:b4:f4:e4:f5:83:65:0c:e5:e4:0d:11:
                    fb:d8:26:34:1e:20:d7:9c:23:41:e3:a1:e1:0a:6b:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:64:E2:EE:BC:B1:D0:9F:C0:21:96:FF:32:57:6A:9F:85:76:A3:ED
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:13:7f:cd:5e:4b:56:b1:cf:63:60:3e:2e:12:bd:6a:90:c1:
         4b:33:cc:a8:93:b3:8c:e7:6e:30:24:4d:68:0c:ba:f0:69:dc:
         f8:e0:68:97:a5:89:bc:18:1a:c4:29:fa:b4:93:52:a9:eb:18:
         d7:f8:dd:38:9b:4f:bd:80:f0:be:77:23:46:44:3e:bd:b7:28:
         a8:20:ce:c0:26:8f:23:ef:2c:f8:3a:4f:82:d4:b7:16:48:bb:
         f6:e2:33:cd:fa:0c:1d:f9:42:50:f5:91:8e:80:75:cc:3d:90:
         9f:df:e7:32:9e:d4:90:dc:0e:03:c7:8d:23:32:0c:51:16:5c:
         25:d9:e8:e1:ed:8c:49:0b:d6:f6:6b:12:d9:72:4c:9a:57:61:
         ef:0b:e1:3c:93:6e:e4:34:cd:11:c7:06:b0:88:33:a5:31:d7:
         41:28:75:88:dc:da:a1:e4:6f:64:6c:e8:c2:42:fd:6b:ff:4a:
         d4:83:6d:e4:30:d4:47:47:c0:94:21:d2:40:c1:78:8c:c9:36:
         ea:ce:1b:81:c0:d5:56:83:7a:c8:42:78:28:e8:a4:bc:75:af:
         eb:55:7b:9d:6a:f3:8d:20:cf:48:f2:14:49:68:ca:45:b1:29:
         78:1c:1f:01:20:79:7f:db:8d:97:ea:9b:5c:7f:e8:37:7b:01:
         2e:2a:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:32:54 2025 by rpki-client on console.sobornost.net