Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft
File:                     E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json)
Hash identifier:          2x+bF05tqYpc0Dcs98iKLwtdUGNMhmC15UvcEvsgNqc=
Subject key identifier:   29:8A:0E:01:F6:52:22:F0:3D:CF:8E:F7:2F:51:F5:12:07:BE:BE:1D
Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE
Certificate issuer:       /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
Certificate serial:       099A13988402AF9B3C6C4676C7EB18399D52602D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft
Manifest number:          A5
Signing time:             Thu 24 Apr 2025 18:52:02 +0000
Manifest this update:     Thu 24 Apr 2025 18:47:02 +0000
Manifest next update:     Sun 27 Apr 2025 19:08:02 +0000
Files and hashes:         1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: sj/Mmz0IkuIImkgMrX5NfmBzqbmlEbbflvN0FkIxBO4=)
                          2: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: dfmmoiYBSYe/UNx1lqftJzQBXqIMTeSW7XiDxYJ4zIA=)
                          3: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=)
                          4: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl
                          rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9a:13:98:84:02:af:9b:3c:6c:46:76:c7:eb:18:39:9d:52:60:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
        Validity
            Not Before: Apr 24 18:47:02 2025 GMT
            Not After : Apr 27 19:08:02 2025 GMT
        Subject: CN=298A0E01F65222F03DCF8EF72F51F51207BEBE1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:ce:d2:25:81:43:1b:26:54:fe:f3:77:51:
                    ad:99:a4:23:c4:25:8f:95:44:7c:a8:bc:60:90:fc:
                    07:f1:b6:b9:01:f2:f6:60:ec:7f:68:c5:0f:25:28:
                    e0:a1:e8:ba:44:8b:4f:79:32:4f:9b:1d:cc:1d:5c:
                    6c:1b:bd:d9:42:42:8d:8e:da:ea:e3:ad:07:97:5c:
                    91:dd:89:d3:d5:01:8b:a3:ae:98:fd:db:bc:0f:3b:
                    77:d1:94:da:6c:cf:a2:ba:1f:9f:c0:e7:66:98:19:
                    ad:95:b5:8b:23:f0:4b:9e:04:35:b2:b6:29:fe:9a:
                    cb:39:5e:89:21:62:2b:f7:80:fa:12:13:b2:1c:c3:
                    ef:3b:1e:0d:e9:ff:73:d3:0c:e3:9d:0c:d4:1d:8f:
                    8d:18:ac:ed:ee:0c:a8:2e:54:56:18:dd:a4:2b:fb:
                    01:ab:b5:b9:99:fb:2e:e9:7e:ea:5b:fc:07:4a:76:
                    e8:49:a7:7c:6a:44:5e:3a:d3:3d:9f:68:43:10:9b:
                    6f:1a:94:a2:39:eb:91:53:96:ac:6b:6a:33:cf:02:
                    c4:6c:1d:c2:a5:a1:61:e1:5b:cf:46:42:7f:33:bd:
                    7d:3e:c9:61:b6:b7:ce:ff:a0:c9:b7:d3:8f:82:67:
                    0d:17:2c:30:c5:e5:dc:e4:3a:85:91:f8:a5:d6:f4:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8A:0E:01:F6:52:22:F0:3D:CF:8E:F7:2F:51:F5:12:07:BE:BE:1D
            X509v3 Authority Key Identifier:
                keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:0d:67:48:b2:ac:70:0e:64:67:8a:b1:0d:8c:a2:3d:7a:
         7a:52:60:59:5b:ef:ab:2e:90:10:b7:eb:78:3e:af:6d:16:a3:
         f3:04:10:7d:69:80:15:8a:46:fe:8c:e4:4e:25:93:21:64:79:
         a5:16:56:db:e1:8c:93:d2:da:74:f6:23:3e:a3:c7:c2:b3:ed:
         cd:bf:fa:fe:8c:82:ec:4a:6d:1a:be:61:25:3b:f5:ed:16:54:
         ec:cf:d5:31:e8:ef:a2:56:7d:33:8c:cb:5c:c0:58:59:74:8a:
         1b:f3:88:f3:15:54:fe:d1:b4:17:68:6c:5f:2d:0d:17:b2:a9:
         18:52:3f:08:1a:d2:ac:a8:20:18:db:9d:2f:4c:69:0c:57:4b:
         29:0e:9d:2b:89:72:7e:10:e2:9f:fa:fe:07:cd:81:03:51:69:
         f0:aa:bb:96:04:ce:d6:33:53:80:ec:10:c0:cd:c7:86:60:e3:
         bf:6c:34:47:b7:fb:fb:a5:aa:b6:b8:17:0a:04:cb:99:ed:a7:
         cb:2d:56:51:a4:ae:b4:d4:9c:0d:c6:85:87:08:9c:29:a3:b6:
         25:b6:47:c1:f7:c4:44:c7:47:b5:92:c9:ba:63:c1:c2:ab:c5:
         3f:0d:10:4b:1f:67:de:bf:8f:46:6b:ac:16:8b:51:41:a5:80:
         18:74:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net