Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
File:                     2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json)
Hash identifier:          4PpkI4YzTh5hUG761ExxN7aaHApPF6FgXSoHacJqYO0=
Subject key identifier:   F7:46:C1:75:B4:BB:45:09:06:06:B7:26:39:03:BE:F9:23:2F:85:34
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Certificate issuer:       /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial:       10B902B0022DE955FA06B8C27F29B7B40718450D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
Manifest number:          031C
Signing time:             Wed 23 Apr 2025 17:31:00 +0000
Manifest this update:     Wed 23 Apr 2025 17:26:00 +0000
Manifest next update:     Sat 26 Apr 2025 20:57:00 +0000
Files and hashes:         1: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: IG6t7nYlULhsMgBABVk9BSJ2moXKjUg9u7BBivZ69qI=)
                          2: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: BAj6wGXRStOevsKAAs4sF+Q+V6U6g9tECkAMCeQYV7c=)
                          3: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: UslCbRmwLTu6vrZVcVWeGtdiQ119Xz7/Tru1xPRFk10=)
                          4: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: dr9xu7CIi6+ik1UpGLg3wt8yFQdd1RVO43AbherDW7g=)
                          5: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: fhHYRVOyLx3EWvXLGXFYvmq/vgj8Oa201e8XUizUgAA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
                          rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 20:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b9:02:b0:02:2d:e9:55:fa:06:b8:c2:7f:29:b7:b4:07:18:45:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
        Validity
            Not Before: Apr 23 17:26:00 2025 GMT
            Not After : Apr 26 20:57:00 2025 GMT
        Subject: CN=F746C175B4BB45090606B7263903BEF9232F8534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:66:fa:6c:42:53:51:57:b4:15:31:b6:6f:
                    5d:ef:e2:f0:44:ec:af:75:7e:f7:b5:a4:af:8b:3b:
                    59:d5:46:82:31:74:46:fd:3c:5e:27:23:e0:d6:e9:
                    f1:fd:a5:92:00:eb:70:e7:8a:b7:cc:0b:66:f3:34:
                    ec:ca:39:20:9e:25:10:2c:c4:ba:ac:e3:29:66:00:
                    dd:3c:42:1b:41:82:09:b8:ee:df:a5:42:5a:ea:ef:
                    da:6e:04:fb:9f:6d:e2:e4:6d:88:c5:ae:46:5a:35:
                    8b:a7:9d:14:49:fc:30:f8:9d:1d:08:ee:8b:d6:b1:
                    8a:6c:72:8e:df:c6:c8:be:54:9f:42:5a:7d:7a:35:
                    87:4f:af:f5:a0:b2:35:10:74:b4:30:27:62:97:89:
                    b4:bf:d4:3b:d2:3a:f1:84:82:83:6d:af:c7:0c:de:
                    03:db:ae:f9:92:da:40:43:03:e8:f5:ad:c4:3e:f0:
                    6e:8e:86:98:44:72:aa:b2:2e:3d:75:e6:13:e1:b1:
                    8e:22:47:87:c3:39:89:87:11:af:3f:76:cc:5e:e9:
                    7f:e3:04:5c:18:fb:23:82:57:c5:32:45:7a:b0:a7:
                    4e:f8:12:1f:56:f7:80:4c:15:e4:ca:94:0d:96:5b:
                    77:2d:c5:6b:0e:a5:cd:74:86:e1:9e:b3:56:49:a8:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:46:C1:75:B4:BB:45:09:06:06:B7:26:39:03:BE:F9:23:2F:85:34
            X509v3 Authority Key Identifier:
                keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:41:e0:b4:d9:7e:0e:64:69:29:1f:7c:5a:04:ca:26:8c:
         40:04:0d:24:3e:95:3f:ae:8e:4a:b9:ce:86:98:51:dc:0e:18:
         67:d5:a8:a0:10:2f:6f:5c:49:2c:e5:ee:02:57:8e:23:50:d7:
         43:5a:06:8a:d2:c8:4c:17:a7:ae:2b:63:b3:f3:ca:90:51:9e:
         bf:e7:fe:47:fa:2f:74:73:6b:c3:2c:41:e3:c1:8c:48:b2:f7:
         95:7d:80:4f:27:55:41:da:27:6c:9f:6b:1d:75:1e:8a:b4:e7:
         88:f2:1d:5c:e5:fb:ba:bf:53:2a:59:d6:64:96:e3:b9:f5:90:
         ea:97:d1:0b:93:12:ef:ea:cc:9c:28:60:9c:0a:cc:4f:52:3d:
         e5:de:49:d0:4b:ad:52:29:75:17:6d:78:f2:9f:f7:f8:70:ea:
         c8:8b:b4:d7:5e:d9:3d:5f:27:ae:04:03:7e:1c:c0:4b:b4:28:
         36:65:23:d0:e5:30:64:6e:7d:07:3a:c9:8a:f1:10:61:09:44:
         2a:7c:fd:10:5f:99:a4:f4:8f:4a:12:a6:85:f7:bd:24:92:40:
         63:61:1d:16:75:be:7a:15:1b:2d:7e:c7:44:51:7e:9a:88:59:
         ea:2e:37:f5:66:10:4b:04:ae:97:da:9b:77:f3:a5:bf:05:49:
         ee:c3:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:41 2025 by rpki-client on console.sobornost.net