Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft
File:                     D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json)
Hash identifier:          m1JIzSUo4HgdstK82Dm6VcsgVKGnvafQ0rCn5rxOpFY=
Subject key identifier:   54:1A:79:6B:51:12:92:B0:E4:35:CD:46:46:56:EB:BE:C8:5F:1E:7A
Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0
Certificate issuer:       /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0
Certificate serial:       6A30950E3BC2A9DAB3202EEF8ECC45929D7AC00D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft
Manifest number:          01C4
Signing time:             Thu 24 Apr 2025 01:41:49 +0000
Manifest this update:     Thu 24 Apr 2025 01:36:49 +0000
Manifest next update:     Sun 27 Apr 2025 12:55:49 +0000
Files and hashes:         1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: NtC/9DkERrS8Se0d2UvqlmaqW3LAEFq7y+ASCTxgFQE=)
                          2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl
                          rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:30:95:0e:3b:c2:a9:da:b3:20:2e:ef:8e:cc:45:92:9d:7a:c0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0
        Validity
            Not Before: Apr 24 01:36:49 2025 GMT
            Not After : Apr 27 12:55:49 2025 GMT
        Subject: CN=541A796B511292B0E435CD464656EBBEC85F1E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:c0:a1:d0:15:d4:56:42:95:1a:b2:50:f8:
                    b3:1d:5a:26:7c:31:7e:5b:bd:bd:db:d9:e0:fd:54:
                    a0:03:89:c6:0b:c8:21:b7:f8:0b:23:6a:06:b0:a2:
                    12:63:a4:a2:c5:2c:e6:6b:24:bb:7d:83:a6:8d:c6:
                    66:d8:55:2e:9a:73:ac:5f:96:b7:98:fa:da:e7:43:
                    34:14:8d:25:0f:a0:e4:82:4d:e2:77:0d:d6:7d:c4:
                    04:d9:2e:1f:b8:c9:dd:4e:2e:e8:60:47:80:b8:36:
                    14:52:b0:c0:88:16:53:c0:93:3a:ac:e1:d0:e0:f8:
                    69:d9:2a:4f:04:4e:64:b2:96:f3:b6:58:6d:cf:18:
                    0d:85:98:06:63:88:1d:23:b1:d2:3c:41:e9:63:f0:
                    5a:23:cf:63:e3:11:ef:ff:c7:77:93:8e:52:f1:ac:
                    c5:04:b9:c0:fd:aa:08:0c:c9:51:3f:d4:ae:1f:8b:
                    7f:c8:71:39:8d:d5:8f:37:2e:0e:90:99:5d:0e:b7:
                    77:c6:8e:8b:e2:34:7b:9a:eb:a3:33:59:a7:08:2a:
                    f5:97:dc:e4:04:87:d5:97:41:67:78:a1:88:08:c2:
                    5e:be:57:72:77:17:27:0c:1c:2c:19:70:b6:8a:87:
                    ed:09:25:c9:4a:a9:69:78:da:b6:60:a7:b7:d8:4f:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1A:79:6B:51:12:92:B0:E4:35:CD:46:46:56:EB:BE:C8:5F:1E:7A
            X509v3 Authority Key Identifier:
                keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b1:8d:d9:bc:1d:8e:90:fa:de:49:2e:d6:f6:b1:8a:b4:21:
         9e:07:ba:0e:db:ea:66:e8:0e:67:57:52:1e:69:0c:4e:6a:fb:
         97:7c:12:1c:9d:02:68:73:d4:b2:83:68:f0:0a:b7:dc:60:e7:
         4f:85:57:8f:82:dd:89:0a:f8:df:6f:83:a7:be:40:50:75:a5:
         73:26:40:ee:07:0c:ac:44:0a:e5:6a:e2:20:ff:50:0c:f8:fa:
         34:40:f4:c5:19:fc:50:d8:b6:a8:b6:cb:ba:1f:fd:e4:d3:e2:
         cb:a6:30:da:a3:5c:5c:b8:53:1b:07:d2:90:3b:bf:6f:5e:64:
         21:be:1f:e8:da:dd:b2:95:d6:7e:cc:5a:29:7e:c0:97:29:2f:
         39:b4:a2:bf:d2:12:25:63:b6:c5:89:61:8c:75:64:ad:bb:9d:
         64:2a:8e:2f:49:1f:bb:a3:51:77:90:80:ed:da:3d:06:1f:e6:
         d1:a7:26:29:89:fe:c9:31:e6:3e:c1:cb:27:b6:0c:36:3f:e0:
         4a:6a:94:a4:d2:17:08:85:03:65:df:a6:ef:87:be:ab:79:98:
         51:d8:93:70:c0:20:85:3f:65:69:d6:9e:87:58:c7:a9:fc:3d:
         7b:b3:6c:35:13:f9:7d:c2:fc:43:a6:78:85:ad:dc:f7:b5:ec:
         e0:e1:85:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net