Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft
File:                     F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json)
Hash identifier:          iJbLDjVPvBG6MdFF3nU/8gQyY32U6RYkn/N4+WWHf1k=
Subject key identifier:   C9:22:B9:71:24:8A:ED:7B:33:42:10:BE:30:48:B6:90:A9:40:6A:EF
Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
Certificate issuer:       /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Certificate serial:       513302F7D6D34C44A24A0099BC4D93D7D5036D9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft
Manifest number:          04C9
Signing time:             Wed 23 Apr 2025 19:20:38 +0000
Manifest this update:     Wed 23 Apr 2025 19:15:38 +0000
Manifest next update:     Sun 27 Apr 2025 06:14:38 +0000
Files and hashes:         1: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: LupJP9bkIO99TDMpyxFGhF9Fw+yRmozBnvISiyr+rkE=)
                          2: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: NXUaUWbulpk1/dMWWI9EC2u6czB6zzqPJ0kPazRtf+k=)
                          3: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: I1MqTlW3Nbk576r2Yxvip0ZNvGZvD6MB25x1BaXP3Z4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl
                          rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:33:02:f7:d6:d3:4c:44:a2:4a:00:99:bc:4d:93:d7:d5:03:6d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
        Validity
            Not Before: Apr 23 19:15:38 2025 GMT
            Not After : Apr 27 06:14:38 2025 GMT
        Subject: CN=C922B971248AED7B334210BE3048B690A9406AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:e1:c9:b4:79:2a:3b:fe:6a:9f:20:54:51:
                    99:59:e8:05:c8:24:d6:38:b9:e3:30:e3:32:fe:da:
                    9e:d5:67:5e:3b:65:c4:fc:9f:93:c9:0f:3d:9e:5e:
                    20:b6:e7:7c:2b:06:40:81:88:ca:33:ec:79:fa:4d:
                    33:66:4e:af:1f:56:2e:3d:08:bc:fc:2f:81:0e:bb:
                    e6:da:fa:73:e2:ef:4b:98:ea:f4:71:60:3e:e2:11:
                    d1:1e:6f:05:dd:85:58:1b:67:1f:40:9d:3d:ee:51:
                    98:86:cc:fb:e2:b3:55:b9:c6:b0:29:6a:8d:a7:22:
                    4e:eb:75:2e:6f:8a:b4:cc:86:79:11:77:03:c1:84:
                    5c:26:45:1f:ea:5a:a4:c9:5c:65:b1:76:b7:c0:4f:
                    42:ae:18:bb:da:b0:ac:bc:b2:3b:05:6f:a1:19:ad:
                    30:d4:38:7f:b7:22:42:17:c5:fb:7d:fc:8a:43:7f:
                    0c:11:4c:66:99:f7:7c:dc:1f:24:f1:8b:81:21:a5:
                    d9:6a:cf:a1:6c:e6:08:28:48:cd:5e:15:f2:50:64:
                    4d:97:6c:40:8d:9f:c8:d6:33:b7:06:ea:12:7a:55:
                    93:10:b9:36:34:ed:2e:09:9d:40:0e:ba:8a:96:03:
                    51:55:d7:69:38:55:b5:3d:42:64:8b:b6:de:af:52:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:22:B9:71:24:8A:ED:7B:33:42:10:BE:30:48:B6:90:A9:40:6A:EF
            X509v3 Authority Key Identifier:
                keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:b9:84:c4:66:d0:67:5b:7c:13:0b:8b:6e:be:01:c6:72:4d:
         16:b5:4e:5d:0f:52:dc:8f:76:fa:6e:f5:7c:b6:e3:80:28:84:
         0c:78:0c:68:ac:12:cd:21:34:a0:62:68:76:12:39:a8:d9:73:
         ea:3d:9d:db:07:f9:e4:c4:c7:f4:73:f6:b5:9a:9c:8d:be:1f:
         f8:44:49:68:71:44:83:a5:ad:3a:cd:d9:4c:8d:fb:20:56:70:
         34:99:2b:78:90:0e:70:cd:f0:dd:09:44:1b:5e:74:9e:16:64:
         c9:25:b9:1f:53:7c:f7:a1:10:5d:eb:36:df:0e:73:cd:f5:fa:
         a7:80:ae:22:92:ef:f0:7a:19:7c:79:16:e5:a4:a5:d8:51:fd:
         00:b3:d9:4e:2d:93:5f:cc:76:ed:fb:3e:75:a6:80:7b:ca:15:
         d0:d0:96:70:22:ba:a1:99:e6:92:ac:ec:22:3b:d3:26:71:03:
         ce:a5:cb:49:b5:96:27:7c:9a:0c:0c:b9:a9:2d:ce:f4:7b:67:
         24:65:b0:64:12:f1:f2:54:39:cf:69:af:3d:0a:fa:a7:fe:1c:
         e9:e7:a1:4c:83:80:92:85:09:21:2b:c3:b9:a3:bb:be:3f:3f:
         bc:75:1f:2f:13:74:93:19:af:69:9d:ea:a9:c1:df:b4:df:6c:
         23:84:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net