Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
File:                     98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json)
Hash identifier:          8ufEW2NOBiveVZTRybVKpXWwHsh/Yu1xMeWc2FzU9vE=
Subject key identifier:   F6:0C:03:08:B4:4B:44:47:90:74:26:B2:E8:71:CC:50:98:44:65:A5
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Certificate issuer:       /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial:       3C04C10514739A8407A2CC2382F60C2235987BA5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
Manifest number:          04CA
Signing time:             Thu 24 Apr 2025 16:00:02 +0000
Manifest this update:     Thu 24 Apr 2025 15:55:02 +0000
Manifest next update:     Sun 27 Apr 2025 16:15:02 +0000
Files and hashes:         1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: +ncF+8DsxAehnxNLvv1l20gTEn/1YKWEnl6rFJLIApA=)
                          2: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: N4hZE4r4tRvfySKbBr9RakktgA4qA0S+ICX3zNYi48w=)
                          3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: qLsMIEaKhWpq1bQAf83UJbdJ8NLzwZWxL7cCtTMq2j8=)
                          4: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: svtAgr7JYBUtzNyfSdE+KV0Sgk1PqrBBCZ7/LnJ3fFw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
                          rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 16:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:04:c1:05:14:73:9a:84:07:a2:cc:23:82:f6:0c:22:35:98:7b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
        Validity
            Not Before: Apr 24 15:55:02 2025 GMT
            Not After : Apr 27 16:15:02 2025 GMT
        Subject: CN=F60C0308B44B4447907426B2E871CC50984465A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:6c:06:86:24:eb:12:9a:ad:98:25:46:44:
                    98:35:d4:1a:23:0b:51:f1:3e:0f:5f:74:ac:9a:e7:
                    72:f4:57:6c:92:db:a6:58:59:ea:27:d8:8a:06:29:
                    e6:72:01:20:23:13:eb:1f:c9:0d:b2:48:51:04:d5:
                    7b:a2:37:67:96:9e:45:11:3e:90:c1:6e:dc:82:50:
                    30:25:8a:51:14:b7:bd:d4:0e:7c:e4:cf:88:df:5b:
                    e8:c2:d7:73:d8:37:a3:b9:fc:5b:b0:2b:26:74:14:
                    8c:3e:03:10:94:00:ad:d1:0b:ea:16:2d:61:65:70:
                    bc:fb:94:c2:2a:cc:37:8c:ff:56:31:4d:63:62:eb:
                    18:41:f6:20:81:a9:e2:9f:fa:f7:64:79:e8:35:cf:
                    f9:ee:0e:f7:c5:a2:4f:d6:e8:6e:ab:1b:9f:d0:ac:
                    f2:4a:d2:ff:2d:33:d7:7b:07:18:69:e1:d4:c5:7d:
                    80:8a:02:a4:56:97:5a:18:15:4f:ce:70:e4:6b:85:
                    8a:12:03:cf:c2:e7:84:83:70:49:57:d7:4e:73:72:
                    5c:28:59:42:f4:80:e6:e7:cc:73:49:68:c1:27:72:
                    a7:46:11:64:10:f4:90:f4:d7:87:6f:c6:6b:c8:f1:
                    4a:11:c7:5d:da:99:60:88:50:d0:b8:17:a0:70:95:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:03:08:B4:4B:44:47:90:74:26:B2:E8:71:CC:50:98:44:65:A5
            X509v3 Authority Key Identifier:
                keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2f:0f:8b:76:7b:86:60:a0:7a:c3:55:16:9e:23:87:2f:66:
         f5:93:af:8b:e5:3d:bb:53:0d:0f:04:c6:12:66:53:28:9e:07:
         90:2a:d6:02:cd:4e:af:ca:d6:6d:43:c7:c5:31:b8:9b:50:14:
         65:ca:40:59:71:95:8c:8a:c3:0a:f6:f7:e7:dc:9d:4c:88:44:
         36:ee:88:05:15:08:f1:24:d3:50:84:7c:48:6c:5f:90:50:d7:
         b2:90:85:b9:08:6b:2b:3d:87:4f:25:cb:5f:c6:e3:27:ee:43:
         53:84:03:7f:6e:86:a3:a7:e2:71:b2:ce:21:4c:75:95:8c:5d:
         f5:54:ab:8c:3a:d7:dc:f2:fe:43:91:9b:0a:53:ad:b5:b3:f2:
         c3:13:39:ca:88:9f:2d:6c:f4:eb:d0:ff:4c:c9:be:20:58:30:
         71:9c:0b:10:d1:da:e5:3c:7b:1f:d7:2a:32:2d:1c:80:e1:e8:
         78:3a:d5:9e:11:bf:64:0f:02:04:ba:b8:4d:bd:8b:c1:7e:ef:
         b4:72:5b:76:29:89:82:64:74:82:a6:91:04:40:c8:36:11:bc:
         78:d5:d5:c9:c6:5f:e3:e7:8a:c1:b4:7e:61:fe:7f:d2:56:c7:
         42:c2:8e:fe:55:f5:7d:72:24:77:97:17:88:4d:81:98:37:ca:
         b7:99:fc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net