Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          7sTczwMbfRi3ZigrgCg+tufcugXnXqmNWnu9nTmrLaM=
Subject key identifier:   45:DA:EA:95:97:F0:7D:C2:87:BA:8C:D8:F6:9E:3D:AD:A9:EB:2F:53
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       6EA960282692121FE96AAF964A9DCE002861C95E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          04E3
Signing time:             Thu 24 Apr 2025 15:01:31 +0000
Manifest this update:     Thu 24 Apr 2025 14:56:31 +0000
Manifest next update:     Sun 27 Apr 2025 19:17:31 +0000
Files and hashes:         1: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: IKCMqxnMEwMx7NWBV2VLtK1SYWCkf90ZSGLzksi5uy8=)
                          2: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=)
                          3: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=)
                          4: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: ejl6RfD2bPpB+qMs8B5DMcsfZnxKCdOMYxEhVUIfjBY=)
                          5: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=)
                          6: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: iGczu7KEorVkI68vI7K5KWJOPmTCIHosmdUzussM+So=)
                          7: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: XP3ySyrao4HUHe9UBVfjiEOfq3wXLWj1fW0u9drI3Y4=)
                          8: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: NCNOeK1jYrHltR7G6BT7J1s3ZTFTmFlKn4/XG+RT23s=)
                          9: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: rCD9Xq75hjQz3OqY77lp8zKACYDzK44l3UznAgqtWzY=)
                          10: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: m6lchRjt4SeQ5M+BlWja/H6yeHtAkCnNajmmDRQEP0M=)
                          11: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: Xv6bZOBQ1X8EmqzvKb4GjVSgX7p5nVSu5ahyXyAKSlY=)
                          12: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=)
                          13: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: cv1KBGnemLgcaZAxGgllsmZ1S3QTjWbciD6aB9fI3zI=)
                          14: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: XrFMOSg/d33kmKXB/MC5Fm/eTuvUhnKDFAu5ejF1jA0=)
                          15: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: FvMqPTk723fFiT9kQC4nzpez+O4mqMSvc+wik4E1yOU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a9:60:28:26:92:12:1f:e9:6a:af:96:4a:9d:ce:00:28:61:c9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Apr 24 14:56:31 2025 GMT
            Not After : Apr 27 19:17:31 2025 GMT
        Subject: CN=45DAEA9597F07DC287BA8CD8F69E3DADA9EB2F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:a7:6a:4b:d0:d3:8b:a2:21:fa:9a:52:dd:
                    98:5b:8d:68:bd:9d:71:cf:13:0a:ed:70:e0:62:25:
                    eb:3a:0e:35:fe:1f:4b:a5:c9:7d:59:16:e7:4a:9e:
                    79:e6:97:f2:c8:c6:db:56:53:9e:27:4b:f3:31:c9:
                    f1:dc:28:07:33:cb:f4:26:40:9b:f5:a8:6a:24:d4:
                    38:26:bd:cd:e2:31:4b:e2:9d:5f:85:0f:8c:e4:e7:
                    01:ab:5a:85:f9:99:d4:d9:c1:7c:6c:1d:87:3c:1f:
                    e9:4c:37:ec:45:b0:81:43:94:a6:df:a4:dd:f1:dc:
                    9e:90:76:d5:ad:b6:9b:c0:cd:29:92:21:a4:54:c0:
                    dd:51:43:03:a5:5a:1c:bb:96:41:1e:cc:f7:a8:e2:
                    db:de:c8:49:1a:c6:fc:19:19:02:6e:1d:84:fb:c0:
                    74:58:3d:b4:8c:ca:a3:f6:7a:85:82:6c:a6:bd:9c:
                    69:5b:c7:37:f5:87:6b:28:57:13:68:f5:f6:72:13:
                    f6:4e:45:a7:e6:4c:48:1d:c6:1c:78:46:4a:23:e5:
                    fd:1f:44:20:d5:dc:71:f0:6e:20:39:d9:37:c1:bd:
                    48:b8:c5:50:6d:55:09:2a:6d:3a:a0:c0:0e:a4:4f:
                    4f:e8:bd:c1:4c:ed:be:9a:7b:f1:b3:90:25:ab:f2:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:EA:95:97:F0:7D:C2:87:BA:8C:D8:F6:9E:3D:AD:A9:EB:2F:53
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:5f:13:e2:f5:3f:fc:dd:31:9b:4e:95:51:68:6a:0d:43:
         73:1c:4c:8c:27:a3:09:d7:da:ae:ee:75:f0:fa:7b:23:c9:d5:
         bf:63:88:08:37:fd:88:29:7e:6d:af:f0:8e:d7:f1:8e:98:ca:
         d6:ca:e5:70:9e:66:6e:01:0c:44:e4:0f:6f:40:86:5f:01:12:
         4f:87:b4:1d:5c:46:37:18:85:ab:2b:e7:1c:1d:ac:b8:0d:99:
         8a:02:5b:2c:27:c5:1d:6e:7f:46:88:20:8a:60:ae:90:09:7f:
         63:5b:bd:7b:fb:94:a0:a4:25:6b:16:c4:05:c3:0d:e6:77:1d:
         53:b0:1f:df:3a:59:70:d7:ed:6b:b7:99:a6:9c:13:61:76:8f:
         d8:36:55:bd:12:dc:b1:c2:31:1e:57:39:62:b9:67:10:f4:cc:
         27:31:4d:bb:52:d2:3f:ed:44:64:18:2c:ed:6f:c3:95:23:5e:
         96:48:af:f2:3a:87:25:2a:9e:93:49:ae:81:92:bd:ba:d7:f1:
         c8:f2:f8:5b:f5:cc:22:1f:7d:6f:61:fe:f8:22:a7:cf:f9:1d:
         10:3c:e3:a4:12:d1:87:71:ee:f7:63:d3:67:5d:f0:a6:7f:7c:
         1f:cd:b7:47:c6:9a:2d:01:af:a1:3a:84:67:06:71:bb:02:3d:
         38:bb:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net