Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
File:                     7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json)
Hash identifier:          atmoyhWEFHXht552909iuZkf2SMKLoZkKCz9AQM0Cyc=
Subject key identifier:   85:2F:78:17:A1:53:CA:AE:21:32:6B:00:B3:04:75:9B:01:E2:7F:82
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Certificate issuer:       /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial:       4D9A630AF5698D20A9FCE557DE8440CDCE1EA9C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
Manifest number:          4C
Signing time:             Sun 27 Apr 2025 19:42:19 +0000
Manifest this update:     Sun 27 Apr 2025 19:37:19 +0000
Manifest next update:     Thu 01 May 2025 00:03:19 +0000
Files and hashes:         1: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=)
                          2: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o=)
                          3: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: MbaMXO3RV9V119XknKRSqIb0npxlP2YTCVggHiBIAN8=)
                          4: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: V4UBKbCeji0pbV7a6XBtcRsd6l6kzHNKhpG08xb4pYs=)
                          5: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: H2vMbusg9cc7KJr3RTfXCg88poNhf1lCs+Xogw0psfI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
                          rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 00:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:63:0a:f5:69:8d:20:a9:fc:e5:57:de:84:40:cd:ce:1e:a9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
        Validity
            Not Before: Apr 27 19:37:19 2025 GMT
            Not After : May  1 00:03:19 2025 GMT
        Subject: CN=852F7817A153CAAE21326B00B304759B01E27F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:9c:e1:f9:49:a1:9b:e4:90:12:83:dd:c8:
                    f3:dd:78:fc:fe:f3:16:3a:4c:16:4a:38:fe:c0:18:
                    4b:8a:49:26:d2:a5:4a:15:29:1d:88:de:16:39:b4:
                    3d:e6:75:c5:99:39:26:c2:94:a0:37:5a:8f:d0:42:
                    45:98:2c:31:64:7a:f8:34:21:80:3b:bf:6f:e0:45:
                    f6:c1:49:e2:3a:0f:70:fd:c0:0c:ff:96:0e:96:5c:
                    a4:b3:81:20:c7:9f:ad:9b:f6:3c:20:e2:07:0c:fc:
                    40:30:2a:ca:6a:70:59:5b:5f:47:99:4e:ef:7c:92:
                    22:39:75:34:df:41:ea:1d:03:e5:8c:be:af:d4:d8:
                    5e:4e:db:0b:d2:6e:51:23:26:8e:75:aa:39:1f:43:
                    73:a8:75:5d:2e:35:85:7c:d2:26:e7:43:fe:a2:7d:
                    25:63:48:b5:d6:91:05:97:e8:8d:9a:19:65:32:78:
                    1d:09:34:c0:1e:ad:5d:cc:50:20:49:07:64:5c:77:
                    31:65:11:fb:9e:72:4d:31:26:21:99:a8:dc:25:55:
                    47:07:59:b6:45:f4:dd:dc:0c:36:18:8d:c0:d9:2f:
                    a8:76:93:38:a4:6d:5d:0a:4b:f0:9b:3b:47:9f:d6:
                    10:23:90:f9:f4:51:ab:0c:80:63:94:2c:06:d1:93:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:78:17:A1:53:CA:AE:21:32:6B:00:B3:04:75:9B:01:E2:7F:82
            X509v3 Authority Key Identifier:
                keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fb:ad:6d:45:0f:31:f0:12:e2:1d:e1:55:e9:16:a4:e8:10:
         5b:0a:8c:a8:47:23:48:89:f5:16:86:fc:87:50:95:19:7a:6b:
         ba:75:10:b8:14:79:35:83:84:5b:93:5b:4a:6e:21:e7:41:9d:
         d7:5e:e3:6a:05:fb:42:02:2a:b9:f7:fa:75:dd:d3:cc:ef:85:
         58:ab:d5:01:90:5d:af:5e:8d:56:60:e7:94:21:93:1d:12:06:
         1c:96:71:21:39:c8:ed:89:7a:c9:ed:e0:7a:f6:31:e3:16:0c:
         4d:17:8a:34:ba:48:1e:f6:13:68:2f:bf:d5:7a:11:bd:a9:02:
         5b:fe:c0:98:3e:a8:94:8c:4f:01:74:d9:6f:bd:38:47:03:40:
         60:dd:33:7d:2b:c7:82:4f:e1:1d:35:95:36:94:b9:b2:c4:6d:
         9b:31:53:bd:91:76:01:fb:42:bf:28:11:c3:b7:b5:95:1c:d5:
         e4:ee:06:7a:61:d6:20:25:97:84:ad:b1:f7:db:98:9e:aa:7c:
         0f:d0:22:81:4a:a7:3b:89:9f:c2:c9:37:88:1a:5d:38:fc:4a:
         eb:7b:45:bf:58:70:31:c8:4c:d3:21:29:79:ae:b2:3d:51:3a:
         15:2d:81:88:8e:fe:87:9c:57:8b:d9:b1:5f:19:61:af:b8:e8:
         dc:8b:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:42:58 2025 by rpki-client on console.sobornost.net