Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
File:                     BE7F813F3C6CA289A9CDAC5630975B7627458103.mft (raw, json)
Hash identifier:          8DjuTlXfdy2caxZpx3eLXJc1BsBynyP7V/EbfKqtJy8=
Subject key identifier:   9B:CC:5D:FD:94:62:B1:2F:D7:92:34:3E:10:80:60:34:4F:C2:08:B7
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       5C39BB25216892BF23BC5D5B38218FDB285C9A4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
Manifest number:          024F
Signing time:             Thu 24 Apr 2025 12:41:44 +0000
Manifest this update:     Thu 24 Apr 2025 12:36:44 +0000
Manifest next update:     Sun 27 Apr 2025 20:32:44 +0000
Files and hashes:         1: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (hash: ksLRob3f5SU2gNY1LxPipDlSLyvRGBxMHRiqu2c9VRY=)
                          2: 323430323a3738303a3a2f33322d3438203d3e203435373235.roa (hash: 95U2BXJDC2l18nsj8XM2nUsJ+ABvrMW9ZXaTSbsG2jU=)
                          3: 3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (hash: P6E4qcRf4KYQyvZ7AMZmZFaBs6o4L0ILx70mhGz8FoA=)
                          4: 3138302e3231312e38382e302f32312d3234203d3e203435373235.roa (hash: E/UKnr86zLsQEyoibRocTofq4+NWel7/5QD1XKQKqEc=)
                          5: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (hash: FoOUIBlL9T9MhX4bEhccY3Kjn0yIPa1cMqY4C0eO3xI=)
                          6: 3230322e3135302e3136322e302f32332d3233203d3e203435373235.roa (hash: GwuWySNcSg5ncnIH7xe0pJhIF0SwLtWfmclvASXmbzI=)
                          7: 3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (hash: P35zqgp/DvY+opYrPtfb+V3CygXLWvgpif4jdHfrT6Q=)
                          8: 3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa (hash: MSYIfxCSXKVIOCS47ld9jUS6r+ZriPGRUCkoG4RgECY=)
                          9: 34332e3233302e3135322e302f32332d3233203d3e203435373235.roa (hash: xHPJ7HI+304D7YAd37d8j6skpjceFwNnjTWGzXVwcKM=)
                          10: 3230322e3135302e3137322e302f32332d3233203d3e203435373235.roa (hash: xC6iCUJS7sp4GX/eEQoZ92l1XLRswuGGeIaV26g4P7I=)
                          11: 3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa (hash: w2ICECGLA7nw6Zv4Eo0IQI3O8W+wpDGsaM5DtnIpJKo=)
                          12: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (hash: UF1a9PE5Dt/zkVzCyOUURCowIbrLBVYZzXgzt2SLXOs=)
                          13: 3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa (hash: RYaUaP8z76N+rN9/CRDsCKHTh8kwn9eyhhBEqvlMUwo=)
                          14: 3230322e3135302e3136362e302f32332d3233203d3e203435373235.roa (hash: wRnGxN5uNoVdykOfNrkzIuyL1n8LTfsQZxmr2BmoYe4=)
                          15: 3130332e3234352e3133382e302f32332d3233203d3e203435373235.roa (hash: gXSdvzH/obw2tBhIhIcWb1ceK7qyFmLN4iW37pSP6wI=)
                          16: 3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (hash: pPKoAcX+7p00Sy44YJj0aiNIuzXOuSgLCA/RKAF2nXA=)
                          17: 3138302e3231312e38382e302f32312d3231203d3e203435373235.roa (hash: UrwHHQXWpjTi59OMqCHennU+aS155yzGb6/9UoO5zVs=)
                          18: 323430323a3738303a3a2f34382d3438203d3e203435373235.roa (hash: srQ63HzedpqK/Z+fkfeTxdmOJkM7qi6/v3UkdQRaL40=)
                          19: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (hash: CFmjdJ2vd2S1hwPDr69BfeMIGUvy+yNC1CU/AmoDxB8=)
                          20: 3230322e3135302e3136302e302f32302d3230203d3e203435373235.roa (hash: xQ4Ul97jwoDNyJ2eG9oO4TTlF8xSqcDLgnke6Urqw3k=)
                          21: 3230322e3135302e3136302e302f32302d3234203d3e203435373235.roa (hash: Y4T82wHbpzvGeh1LYj+UuVGIrkEWtMinUzP1PmfzBOY=)
                          22: 34332e3233302e3135322e302f32322d3232203d3e203435373235.roa (hash: pO9hy5n7UjW4vxC4PIPIijgfvw5lRU378EbEfDIE6ec=)
                          23: BE7F813F3C6CA289A9CDAC5630975B7627458103.crl (hash: HuPKQQvFyTibU4PF6qHY8r4b50YhOPNaPzZjjibbqPo=)
                          24: 3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (hash: 5gtSpN1P146ocldJClXJUUX1hGb29RqzWbJ13iydccw=)
                          25: 3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (hash: OgCMc6N8YMB+q9soDBfzLtklXuNaeCduzkpg+Npc+Pg=)
                          26: 323430323a3738303a343a3a2f34382d3438203d3e203435373235.roa (hash: q6uWsjDfmvPCM3wtKPBAHFLOKfxyuluuaFv/8slgJu8=)
                          27: 3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (hash: Vd4YXu/zv6QpeJqZrRqJLtEJqDsjx9BYEUrETFSOwbg=)
                          28: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (hash: 6XFpo57f1LKHWqv/atS95pTJHDHEw9gxmYNcdpJ+RZk=)
                          29: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (hash: /MSndQdhW7y2Ps5XO1tBE5LRjY41c2iW6OY/QNg9AHs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:39:bb:25:21:68:92:bf:23:bc:5d:5b:38:21:8f:db:28:5c:9a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Apr 24 12:36:44 2025 GMT
            Not After : Apr 27 20:32:44 2025 GMT
        Subject: CN=9BCC5DFD9462B12FD792343E108060344FC208B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:d5:47:df:95:d2:eb:c1:38:ca:6e:71:d9:
                    8b:bd:06:a9:f3:b9:db:d2:cc:6d:a4:61:1c:8d:2e:
                    8f:ff:90:9d:49:b2:d9:42:c1:e5:46:41:4a:1a:41:
                    f1:e4:a9:47:40:18:ab:1d:84:42:12:b6:50:a9:77:
                    bc:a1:c6:1d:ed:60:8b:c0:86:83:a6:cb:2b:af:57:
                    51:a6:ac:3c:32:4f:fe:23:e1:1f:a9:17:83:db:f5:
                    b0:46:6e:26:c3:6b:0c:ab:9d:39:ac:bf:a1:75:bf:
                    7f:79:3c:a9:84:33:c1:2c:81:95:5b:67:06:56:19:
                    22:f9:eb:67:5c:d5:6a:66:e4:2e:ed:12:96:21:bc:
                    be:d5:a8:54:8c:a9:50:15:ff:8d:4f:23:32:2e:03:
                    17:cf:91:57:47:fe:4f:de:9a:2d:a0:de:4a:16:18:
                    f7:9a:64:8c:4e:90:ab:ab:a7:d1:93:40:d8:6b:a4:
                    25:d8:60:31:bb:06:11:96:34:83:39:c0:18:3b:2b:
                    6f:26:31:6f:16:26:88:21:0b:25:31:95:03:70:5f:
                    a7:f8:c3:5e:7e:4c:13:bc:9d:b4:9f:d4:27:e6:2a:
                    1d:87:26:95:36:20:64:d9:36:8e:69:6c:3a:96:64:
                    ba:0c:8d:d3:5f:d9:37:1f:27:cc:94:59:91:d1:30:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CC:5D:FD:94:62:B1:2F:D7:92:34:3E:10:80:60:34:4F:C2:08:B7
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:72:44:91:2e:83:23:b2:79:c3:eb:ee:d7:b0:81:5c:11:
         01:e2:ef:93:81:84:10:5b:de:69:64:f5:96:ba:43:e0:4b:f3:
         c1:00:ca:e0:16:a1:56:b7:c9:6a:84:35:6e:12:da:0b:c2:a4:
         2b:94:51:48:01:d3:9d:f8:46:37:f0:df:23:cb:8a:41:38:23:
         1e:fc:6e:7c:39:a8:d9:35:83:de:8c:3c:70:37:55:0a:b7:5c:
         7d:cd:2d:78:16:ff:2d:58:1b:a6:43:73:9d:f5:2f:6d:0d:14:
         61:de:f6:d9:8e:a2:6a:cd:39:f5:2e:ee:3a:cb:b6:16:fd:0c:
         00:98:f5:be:3d:da:ea:70:95:76:05:a8:b3:d2:07:9e:9f:81:
         d0:ef:0b:31:1a:db:a8:f0:bf:ad:4b:52:59:b8:ea:fc:72:a7:
         c5:14:5b:ce:af:65:fe:89:e6:07:4e:bc:2e:fe:d7:1c:c7:de:
         d6:0e:ad:ab:5f:1e:65:b0:31:d0:11:37:0a:02:be:6a:90:b5:
         d9:a9:07:c2:f7:bd:57:57:c6:4f:16:13:4f:31:0e:c1:c3:06:
         d3:bc:71:55:e7:9a:f8:f9:ea:cf:ee:8e:5e:15:fe:4e:39:06:
         ee:4d:b6:e6:d4:69:df:ec:fb:ac:ce:b6:05:e5:a8:6e:4c:ec:
         af:95:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net