Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
File:                     35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json)
Hash identifier:          RWCWPre6wMZM65658djPJkBjX/yGK80tKLYR6UjeU68=
Subject key identifier:   70:9C:F5:93:1C:B3:2B:1D:35:C6:99:7E:7F:E2:5F:63:63:DC:5B:06
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Certificate issuer:       /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial:       0541CC561F444DA9846405C8BB2573BF5FC0F50F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
Manifest number:          0142
Signing time:             Sat 26 Apr 2025 14:41:04 +0000
Manifest this update:     Sat 26 Apr 2025 14:36:04 +0000
Manifest next update:     Tue 29 Apr 2025 17:18:04 +0000
Files and hashes:         1: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: a/bG1QnhBYioBqWmMC6FyE4S+rY67LXksbHGBu7h5uo=)
                          2: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: vX6oIYot0ycD+h0R9asR+LMCFZ+FsK/gdUHsH6J7G3g=)
                          3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: UzX8Svg8RWfpm+6J8R9XONBilrHJl2/jgcv7jngYYIc=)
                          4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: Zyj+cmEJLF5ueQ1WHGcb/jz6upmbCBDhF01uw2n8mqU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
                          rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 17:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:cc:56:1f:44:4d:a9:84:64:05:c8:bb:25:73:bf:5f:c0:f5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
        Validity
            Not Before: Apr 26 14:36:04 2025 GMT
            Not After : Apr 29 17:18:04 2025 GMT
        Subject: CN=709CF5931CB32B1D35C6997E7FE25F6363DC5B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:d4:8b:19:72:8a:41:76:0b:94:b1:39:f0:
                    db:08:9c:fd:f3:ad:69:a9:df:2f:ee:0e:ba:aa:9c:
                    8d:08:c9:21:ec:16:b0:74:c0:12:42:45:6f:c9:59:
                    4b:5f:19:4c:79:8d:4f:26:ff:0f:e0:65:55:48:f8:
                    24:9e:e2:2d:9d:46:c5:f8:fb:e6:62:b7:43:69:84:
                    15:fa:c8:f1:d3:ef:46:ce:4f:72:e2:ea:0b:23:d2:
                    a8:80:eb:de:78:21:02:c8:7c:4e:d1:aa:0f:5a:9f:
                    fc:df:00:17:a9:a5:d6:ac:ca:c9:83:c2:7f:d3:55:
                    b4:b0:47:a1:0e:be:37:d8:3d:77:2a:94:39:86:5f:
                    e9:87:21:1a:fb:c3:14:d0:a8:c9:e7:8a:7a:69:28:
                    85:2d:3b:e8:6c:81:6e:b9:83:a7:69:5d:c8:77:ba:
                    4d:be:af:2f:d3:92:c5:b2:63:78:df:7e:10:82:7b:
                    ed:a2:75:bf:95:be:3b:a2:53:9a:ce:dd:e0:18:9f:
                    7a:57:59:d4:23:c5:20:29:b2:c7:c2:17:15:38:9d:
                    62:ea:44:b2:45:39:41:d3:17:df:76:bb:60:a4:04:
                    78:e0:c1:d3:64:26:e0:86:65:98:23:80:b6:1a:d9:
                    33:41:6c:bd:15:57:f7:81:07:ea:6d:63:d7:be:a8:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9C:F5:93:1C:B3:2B:1D:35:C6:99:7E:7F:E2:5F:63:63:DC:5B:06
            X509v3 Authority Key Identifier:
                keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a3:b4:68:20:be:aa:11:a7:a3:15:38:41:b1:93:45:c8:cd:
         a2:87:3a:32:90:76:cc:1e:ef:6a:7d:6a:88:46:c7:e9:7d:80:
         84:f9:ec:3e:6f:29:c0:94:a2:52:bb:71:0a:be:d4:93:45:bd:
         ac:98:06:50:87:8d:d4:90:0a:42:42:6e:00:54:71:b3:52:7c:
         d0:bd:07:de:6d:0c:fa:25:55:32:33:28:d9:58:e9:e8:68:90:
         1f:a5:06:30:48:ea:a1:5f:68:74:06:1d:f4:46:d5:cb:a3:14:
         50:6c:2b:dd:0d:03:47:f4:6a:46:86:4b:54:84:4e:93:15:f4:
         97:fe:57:e1:16:f9:9d:fa:ef:5a:40:05:df:48:5e:6a:7c:4a:
         4a:f9:53:5b:9f:d7:38:b8:64:fe:10:88:46:84:fc:30:8c:02:
         db:57:c9:ec:c3:70:93:44:bd:6b:2a:84:3e:34:92:fa:db:13:
         58:e1:55:f4:4d:b2:3c:ec:89:e8:4b:0c:e4:83:1e:a3:eb:1a:
         95:1f:fd:ba:9f:08:6d:c6:6e:53:59:1f:4f:7a:ce:55:e2:71:
         37:63:bf:17:35:28:6d:0b:b0:8c:b0:40:c1:73:18:c6:c1:30:
         a6:e1:36:a2:2e:ab:bc:22:1b:f3:87:f0:5d:ce:51:f7:6a:c2:
         13:7a:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:17:59 2025 by rpki-client on console.sobornost.net