Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
File:                     BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json)
Hash identifier:          JChl5nRfEEW5ht03vtwKyQalVQMXcL4Kj3lQZuG6GtQ=
Subject key identifier:   B5:74:82:73:C2:9C:3F:C7:89:AB:02:82:C7:CD:A4:75:39:4D:5A:6E
Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F
Certificate issuer:       /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
Certificate serial:       372E86E2F2CA8D473D3B62838C7E2F415C1B36C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
Manifest number:          0444
Signing time:             Sat 26 Apr 2025 02:11:58 +0000
Manifest this update:     Sat 26 Apr 2025 02:06:58 +0000
Manifest next update:     Tue 29 Apr 2025 07:54:58 +0000
Files and hashes:         1: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: 2JYXyoNq1pkuogdA8+oQCms48/z2V739yLlFPPhdVCs=)
                          2: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: JsBVucVJ29Eb7MjKv2Mcnp+TWpUFsfW5WSFpAHboawI=)
                          3: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo=)
                          4: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl
                          rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 07:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2e:86:e2:f2:ca:8d:47:3d:3b:62:83:8c:7e:2f:41:5c:1b:36:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
        Validity
            Not Before: Apr 26 02:06:58 2025 GMT
            Not After : Apr 29 07:54:58 2025 GMT
        Subject: CN=B5748273C29C3FC789AB0282C7CDA475394D5A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:72:fd:8a:f4:46:91:de:53:2b:24:f6:e6:
                    45:25:43:de:e7:f8:cb:b5:ec:ad:71:a6:56:c2:ba:
                    cc:ed:74:db:f9:a9:79:04:74:54:56:a2:24:3d:f2:
                    f3:59:fd:4d:c0:2b:03:a3:b7:fc:50:bd:03:bf:8d:
                    8a:b2:05:a4:54:7a:80:67:7b:13:a3:68:3e:4c:50:
                    6f:52:70:b2:d1:d1:66:b4:ad:4d:d8:ce:16:44:21:
                    00:b9:4a:16:d6:56:54:cf:f4:2c:24:92:0c:85:69:
                    ca:59:61:57:81:20:93:86:53:34:17:a4:d9:aa:ea:
                    50:9c:88:f6:0b:09:a6:05:c4:29:7c:ff:3e:82:eb:
                    27:cf:84:e2:8c:10:1e:74:80:ac:6a:d5:4c:f2:3f:
                    09:43:13:92:33:25:36:67:1b:a5:0c:9f:55:6e:03:
                    e2:7e:55:a5:9b:bc:82:2c:27:a3:05:4a:9b:2e:0d:
                    de:1a:d2:a1:20:f2:e1:5c:30:36:a6:fd:fd:a1:e1:
                    d2:78:2e:33:e6:f4:a0:5d:88:e7:b8:b8:e9:5a:17:
                    8f:5d:9a:68:ef:cc:b3:14:82:b3:07:12:a1:9d:17:
                    f3:03:b0:a1:c5:71:3e:d1:09:78:a3:ab:1f:e5:61:
                    21:7e:3f:bc:90:9d:14:af:7a:99:b6:63:eb:bf:4d:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:82:73:C2:9C:3F:C7:89:AB:02:82:C7:CD:A4:75:39:4D:5A:6E
            X509v3 Authority Key Identifier:
                keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:87:2e:5f:f0:15:56:b3:cf:58:82:50:7d:06:92:88:b7:
         43:44:08:81:6b:24:33:af:8c:f9:95:de:5d:6c:e7:51:aa:46:
         12:75:e1:c0:35:63:23:47:07:2c:7b:ab:d7:da:91:54:c5:08:
         cf:f1:ab:da:67:09:0e:45:f6:fa:f2:16:c0:08:39:89:e8:48:
         b0:cb:1a:82:ab:90:8f:7f:ea:ee:ce:38:7d:97:27:0d:e6:bd:
         26:ed:4d:d2:59:ea:d7:c6:36:49:df:c5:e4:4c:6b:b0:8f:68:
         25:d9:83:33:20:27:2e:b4:82:71:98:65:bb:c9:8b:be:e6:57:
         75:94:09:95:cf:f1:b3:d0:91:3c:1a:bc:43:f0:d8:dc:02:fc:
         3f:f3:d6:d0:28:70:7d:4d:31:6a:14:7f:b1:00:fa:ec:7d:79:
         e3:d7:7a:22:83:d9:c4:fd:ce:63:65:08:d2:c2:21:64:5c:9b:
         dc:54:bc:72:98:aa:65:74:fb:48:87:db:83:32:9f:17:c0:e3:
         a5:5c:6e:7a:14:38:93:f1:94:2d:8a:c6:b7:a9:57:22:f4:49:
         70:34:95:0b:89:37:99:fc:bf:a2:18:e2:41:88:79:b6:85:83:
         89:f9:56:0a:ac:ab:ec:b5:ad:a3:8d:e4:d1:7b:3e:01:6d:86:
         9f:85:25:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:31 2025 by rpki-client on console.sobornost.net