Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft
File:                     D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json)
Hash identifier:          O11UvOeK8fpVlvUKB0RrWXpNnxlyp+gtL8UMtOkPmr4=
Subject key identifier:   DD:AD:49:3B:B9:F5:24:95:8A:27:05:61:90:7B:5D:49:E9:D1:2A:A5
Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF
Certificate issuer:       /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF
Certificate serial:       33BAF95976DB0256820FBBEAAA883F0F4A0E0B64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft
Manifest number:          0225
Signing time:             Sat 26 Apr 2025 07:01:37 +0000
Manifest this update:     Sat 26 Apr 2025 06:56:37 +0000
Manifest next update:     Tue 29 Apr 2025 09:30:37 +0000
Files and hashes:         1: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: D72Dl/IRfBePIvZrgkcjVgT26TncD5Tpp40B7HoejBA=)
                          2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=)
                          3: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=)
                          4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=)
                          5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl
                          rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ba:f9:59:76:db:02:56:82:0f:bb:ea:aa:88:3f:0f:4a:0e:0b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF
        Validity
            Not Before: Apr 26 06:56:37 2025 GMT
            Not After : Apr 29 09:30:37 2025 GMT
        Subject: CN=DDAD493BB9F524958A270561907B5D49E9D12AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:fa:21:d8:72:77:69:e7:a8:cf:bc:45:a0:
                    9e:d5:56:ab:b9:17:79:27:47:11:76:fc:e2:d1:88:
                    cf:15:54:a2:a9:e5:40:5b:f2:30:62:e3:6b:de:36:
                    b6:de:d8:57:2d:52:04:cb:61:dd:21:a9:d3:32:91:
                    1f:19:4f:12:4a:9c:9e:e1:89:93:12:19:5e:44:51:
                    f7:23:d2:13:6d:70:e1:32:15:4c:75:ed:bf:f6:d4:
                    85:82:8f:bf:7b:61:2c:2e:2f:97:67:f0:32:c1:18:
                    ea:e2:66:85:99:10:c6:3c:9f:3b:95:5d:b1:8b:61:
                    31:ec:64:3f:11:90:61:07:45:50:52:0d:bd:b3:a6:
                    01:0c:ef:f3:f8:01:da:5a:3f:d6:eb:eb:89:a9:21:
                    9b:f0:b9:68:89:63:df:89:50:7b:e9:a2:32:c5:ff:
                    8b:95:1c:b6:1c:ac:23:92:85:cc:8f:64:0a:a8:da:
                    50:0d:af:64:37:dc:3d:14:d8:a9:43:62:07:3d:69:
                    64:78:73:52:74:ae:90:39:c4:fc:f7:02:9c:47:1d:
                    c3:5f:fc:31:fc:29:e9:39:84:88:2c:e0:5b:a8:a5:
                    78:7b:38:19:10:07:8f:1c:29:1d:34:c3:ce:6d:ff:
                    d2:f8:6a:7c:cc:31:f2:9c:8c:a4:38:62:d6:f6:7b:
                    e1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:49:3B:B9:F5:24:95:8A:27:05:61:90:7B:5D:49:E9:D1:2A:A5
            X509v3 Authority Key Identifier:
                keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:22:39:5a:1d:13:36:52:78:f8:4b:13:49:8a:10:a5:59:0a:
         7b:ad:9e:c8:87:34:3e:d4:44:10:f7:f4:2c:e0:0c:c2:84:b5:
         f5:2e:c2:c8:12:52:fe:54:bc:64:5b:70:1f:65:52:1d:ea:43:
         7a:ee:e0:bb:ee:88:18:90:db:c0:1f:c2:7d:24:db:3d:92:6e:
         79:5a:53:73:0a:c4:6e:6f:7f:3f:9f:7d:fd:b2:b5:41:5d:6c:
         bc:b1:fe:75:6c:19:7a:a4:33:81:a1:36:7c:9c:68:22:ee:9b:
         73:0b:49:56:51:68:75:69:c0:44:bb:f4:59:8b:ef:70:8d:eb:
         ee:00:f2:34:3f:a8:fa:ba:fe:85:e8:61:e1:b6:22:57:8f:31:
         2d:6f:34:79:ce:22:d3:5a:11:76:b0:fc:b7:39:d1:df:52:e1:
         13:6c:b7:5b:8f:be:f0:34:83:ef:8a:11:75:da:3f:37:28:87:
         93:5b:0c:e3:ca:88:2c:8e:17:4a:3c:1c:d6:cc:a0:d7:73:90:
         86:5a:8c:e0:11:03:35:5b:70:ad:78:97:a4:6e:d3:f6:1b:94:
         76:24:90:36:5b:51:4a:5f:c6:a4:dd:5e:23:b4:3a:2e:e5:fb:
         20:17:f8:70:78:5d:74:92:4d:d4:8a:e3:78:b5:03:59:e2:ee:
         ef:57:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net