Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
File:                     CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json)
Hash identifier:          I7fg7NRYY507bQdv7IfbWbGrE6S/GDd8oHUFljA7Co8=
Subject key identifier:   B8:41:97:61:45:A1:D4:8E:64:A2:9F:2B:F4:6A:AE:71:2E:85:3B:72
Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
Certificate issuer:       /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Certificate serial:       6BF42DCB2B42CCC65E2F6B97456AC1D1AD515B0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
Manifest number:          016C
Signing time:             Thu 24 Apr 2025 02:31:42 +0000
Manifest this update:     Thu 24 Apr 2025 02:26:42 +0000
Manifest next update:     Sun 27 Apr 2025 06:11:42 +0000
Files and hashes:         1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: Nefc8Ovd7P8I9RNQGbFhVSlvXGe8Un61Yg91z0VDIUM=)
                          2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: LgZRgu9mKUUb7c3WqAiB456DLH7mZkxQLbemkNLHoeo=)
                          3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: AgE5l3f9GOldGAaYUjHWBzFfx5q0mU8wvl6ldg+fHQY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl
                          rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 06:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:2d:cb:2b:42:cc:c6:5e:2f:6b:97:45:6a:c1:d1:ad:51:5b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
        Validity
            Not Before: Apr 24 02:26:42 2025 GMT
            Not After : Apr 27 06:11:42 2025 GMT
        Subject: CN=B841976145A1D48E64A29F2BF46AAE712E853B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:f7:97:64:39:b8:12:76:85:eb:f0:06:ca:
                    0a:20:5a:52:8d:6d:05:56:39:0b:73:84:52:17:eb:
                    cf:3a:83:30:2c:7b:f8:a1:2d:78:2b:85:5c:58:f8:
                    db:77:f8:cc:9c:5a:3d:34:d9:71:86:70:ea:6b:23:
                    8d:42:31:4e:2d:60:49:08:eb:69:65:dc:bd:e7:26:
                    4e:7a:2a:4d:b4:54:87:da:96:40:95:2c:54:81:a4:
                    6c:a3:9d:fe:24:42:41:89:62:e5:19:11:72:58:e5:
                    c4:e4:32:7e:f1:b1:3a:e3:1e:83:e9:60:c1:51:03:
                    0a:d2:b7:aa:7e:84:e7:db:9d:48:5a:b4:20:83:50:
                    2e:83:28:f4:ff:32:c8:8f:85:f8:04:f1:4a:ce:0f:
                    c4:71:a9:97:d6:80:f3:ca:4c:a2:3e:6e:b9:76:d1:
                    14:d6:92:a0:ed:b1:da:89:d5:a6:12:ee:ab:8a:b4:
                    f7:57:15:79:1f:37:0b:a0:81:6c:23:b4:62:6c:08:
                    ef:27:0e:4b:fc:3c:98:12:eb:1a:71:32:f6:60:da:
                    16:88:fe:3c:8b:5d:45:55:24:51:7b:7d:4e:5e:de:
                    8c:04:52:29:8d:ed:c1:ee:0d:b8:25:0f:fa:62:fb:
                    71:e3:cc:a6:61:77:26:d2:4f:21:48:e8:cb:40:c7:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:97:61:45:A1:D4:8E:64:A2:9F:2B:F4:6A:AE:71:2E:85:3B:72
            X509v3 Authority Key Identifier:
                keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:2c:3c:64:10:f5:85:d0:6a:9f:ba:60:9c:7f:d6:b2:29:
         b8:a2:8f:eb:d2:3c:68:fb:ec:0a:89:1e:ec:f4:3f:18:8f:53:
         dd:0f:af:da:6a:e7:18:86:d8:46:c9:61:b4:84:65:e4:c2:46:
         e2:d4:8d:c5:6c:38:a6:11:e4:8a:97:4d:6b:ec:16:5d:34:64:
         19:81:c6:a2:9b:22:a2:78:8f:bd:e9:eb:bb:8d:3f:f8:55:9e:
         2d:bc:d7:3b:b8:ec:38:47:a3:33:f9:2b:86:1b:7b:f2:96:a0:
         7e:90:42:1e:cb:a6:db:ac:cd:3f:09:5b:0c:d1:2d:d1:2a:82:
         d2:a8:e7:c7:00:f0:19:dc:e0:b6:c1:f8:cf:02:b8:c1:7b:ea:
         ef:e6:8f:d3:62:7f:7a:39:37:ef:2c:5d:b8:48:b6:4a:26:74:
         a9:8f:1e:30:e2:97:4a:13:40:9f:ed:89:ac:d0:8c:76:0a:d8:
         d7:57:c8:e7:8f:f9:2b:48:2a:31:10:37:e0:ef:c9:ba:70:b3:
         4e:ad:e4:e5:c0:96:31:fc:39:08:d0:e9:0d:b5:29:00:7b:a6:
         12:25:11:f5:5a:bc:47:ea:ea:a6:56:c7:ae:19:e8:c4:67:53:
         23:cc:cf:5f:dc:88:40:6c:37:ea:f3:07:de:2f:2f:bc:cd:68:
         f1:73:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net