Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File:                     67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier:          u+xOncBdyyh48dA5aIrmjrV0Je8TmtGw0rbiVnPUiCI=
Subject key identifier:   50:B7:C0:B1:E1:B6:19:D5:64:05:4B:4E:3D:10:9D:39:FF:5F:6D:C9
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       3CC3B0A7A4081BAFB5CB0BD63F01C5E277B012DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number:          0130
Signing time:             Thu 24 Apr 2025 22:51:08 +0000
Manifest this update:     Thu 24 Apr 2025 22:46:08 +0000
Manifest next update:     Mon 28 Apr 2025 10:03:08 +0000
Files and hashes:         1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: CbR2n14f0BdezbCrZVegI1ytQ96WujvvlBCUEwkHZ8Y=)
                          2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: maOhda1MNY0QpFWA0UDVPj0pjSzgY2RsEHzTi6cxg1s=)
                          3: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: E9uczdBsB9z077MDWzey/zsVcjRgsAB2DBJNP6IXmGM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
                          rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c3:b0:a7:a4:08:1b:af:b5:cb:0b:d6:3f:01:c5:e2:77:b0:12:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: Apr 24 22:46:08 2025 GMT
            Not After : Apr 28 10:03:08 2025 GMT
        Subject: CN=50B7C0B1E1B619D564054B4E3D109D39FF5F6DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:94:9f:77:4a:61:35:bc:01:8a:0f:fd:0c:
                    1c:05:0e:20:0f:1d:a3:4e:cf:46:5e:be:cd:0a:e0:
                    0d:e2:fd:59:66:02:b1:a5:ad:8c:6f:a1:8b:be:2b:
                    06:40:7f:21:48:19:09:0d:fa:67:e3:9f:7a:91:37:
                    3b:53:92:4e:9b:10:51:aa:ac:ca:62:7c:0c:b7:23:
                    aa:cd:ae:e6:69:ed:12:bb:67:e5:73:bd:17:46:45:
                    46:d2:14:5e:fb:06:f2:e2:45:1a:09:e6:7c:fb:d3:
                    f4:08:0c:c6:0b:cb:99:9a:25:d8:9a:87:3a:cd:fc:
                    73:0d:5d:69:b7:cf:2d:21:34:44:83:d0:6e:fa:b2:
                    c0:cd:02:d3:01:f6:24:8e:13:40:2c:e8:ed:e9:56:
                    43:a2:1a:5d:e0:f3:b2:f8:a0:46:30:f2:f1:ed:4e:
                    f0:cd:d6:7d:fb:e6:1e:79:8c:ad:bf:09:11:fb:cb:
                    ad:3d:31:61:96:03:bf:60:07:68:93:e3:99:6d:dc:
                    4c:4e:c0:5b:57:0b:bf:f5:79:6b:d4:6c:a9:1e:df:
                    b7:ef:c8:8d:2c:94:40:cd:d1:21:79:3e:a0:86:88:
                    b9:24:f0:59:2c:9b:21:30:26:e8:df:06:80:7d:61:
                    4f:13:da:a4:0b:88:41:80:0a:d0:7e:a1:63:d1:c2:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:C0:B1:E1:B6:19:D5:64:05:4B:4E:3D:10:9D:39:FF:5F:6D:C9
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:ed:e8:b3:06:80:d3:29:7a:7f:48:b9:96:4d:96:75:4d:
         50:bd:50:4d:3f:0a:e4:ee:92:a4:1b:d5:9e:de:cd:e0:15:63:
         44:77:81:bc:af:04:45:f8:4b:3d:57:f7:a7:ce:ca:0d:35:ad:
         5b:3f:d5:94:5b:72:9c:01:23:be:53:2f:0e:a5:d5:21:0c:2a:
         7e:e6:5a:24:da:5c:3e:4f:bb:b8:3f:fd:b5:6c:e9:38:d7:7b:
         6b:e5:ec:fa:ca:a0:4a:58:70:d7:cc:cc:02:9f:c7:eb:44:5e:
         9d:58:47:46:1d:64:63:78:f0:c8:a6:50:49:59:b2:78:53:2e:
         47:88:22:c5:d0:22:9b:8b:34:c2:1e:41:34:d2:5b:b5:f4:d7:
         01:dd:55:81:56:60:ba:88:04:ed:c4:97:7c:13:60:9c:93:31:
         c7:cb:4c:1a:88:3b:5a:eb:3b:32:d9:ea:0f:db:30:f8:ab:12:
         52:49:64:60:ca:13:5a:3a:8e:19:37:08:9d:94:b7:55:66:b6:
         4e:5f:05:d5:1d:82:03:2f:3e:97:99:35:e6:46:5a:48:3d:57:
         0e:af:41:ab:ba:a3:93:9a:c0:94:6d:03:d5:9d:33:61:ed:6c:
         42:66:37:8b:e1:d2:09:74:23:bf:bd:3e:a8:12:80:1f:e2:21:
         04:70:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net