Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft
File:                     8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json)
Hash identifier:          /JjhnJu5vj9AkvsmS6CXcYobwAEdGzGC474Htwb6GjA=
Subject key identifier:   F4:DA:C9:35:FA:74:41:52:E5:C9:52:1D:D2:30:58:D8:01:6E:2B:25
Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68
Certificate issuer:       /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868
Certificate serial:       449239A00BB2C14A0C542C17F2710EAED7965BA0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft
Manifest number:          0199
Signing time:             Wed 23 Apr 2025 19:11:50 +0000
Manifest this update:     Wed 23 Apr 2025 19:06:50 +0000
Manifest next update:     Sun 27 Apr 2025 00:11:50 +0000
Files and hashes:         1: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: WVBEt0AhprtjIrOBApfHE1k4FJ+v+UwE9zU084WwkRk=)
                          2: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: nKx2W2J5QqbAPLTUpYp/KQAECRR7E2z1uXn+5NBG7zs=)
                          3: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: j2ooxEgwl+PYCxzVzg+BL2wikozzxYfw566b8wdA2jI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl
                          rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 00:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:92:39:a0:0b:b2:c1:4a:0c:54:2c:17:f2:71:0e:ae:d7:96:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868
        Validity
            Not Before: Apr 23 19:06:50 2025 GMT
            Not After : Apr 27 00:11:50 2025 GMT
        Subject: CN=F4DAC935FA744152E5C9521DD23058D8016E2B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:4b:0d:94:84:dc:da:b8:c0:88:80:c6:c2:
                    4d:20:47:e1:e9:3f:3a:16:a7:5a:01:64:95:59:af:
                    4f:a2:30:d0:ff:c1:2e:47:06:4e:2e:5d:57:57:fd:
                    30:4c:5f:ac:88:ec:41:76:94:00:72:3a:14:4a:ec:
                    86:26:79:94:06:45:9e:64:dc:2a:98:5d:af:b6:86:
                    59:4a:b8:88:d2:92:6a:60:c7:48:77:29:9b:5b:97:
                    a6:5a:00:20:13:d0:c4:86:99:bb:88:61:c6:68:d8:
                    5c:b3:54:97:64:9c:50:8e:68:73:a4:34:53:fe:b7:
                    a3:b9:a0:36:ed:1c:ec:cd:37:3d:4d:1e:a6:73:9c:
                    de:1e:d9:b1:2e:19:2e:c1:33:85:6e:81:19:7b:59:
                    da:55:de:40:da:79:33:be:6a:5c:75:29:5f:d8:7c:
                    34:0c:57:eb:e1:3b:fe:95:a7:7a:be:45:aa:f7:ef:
                    61:f2:9f:60:fe:8c:6c:3b:96:25:a3:6f:1f:85:6f:
                    66:c0:22:11:4c:8e:1b:76:5e:91:a3:25:fb:d5:f8:
                    d7:9c:ba:22:34:0a:38:7d:2c:98:27:35:bb:18:41:
                    96:a0:94:32:89:94:21:4f:49:52:ab:99:39:7b:65:
                    fd:11:d1:43:cc:bb:8b:55:bf:78:13:52:1e:a8:a9:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DA:C9:35:FA:74:41:52:E5:C9:52:1D:D2:30:58:D8:01:6E:2B:25
            X509v3 Authority Key Identifier:
                keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:b9:f8:59:9c:3f:4b:d9:35:d6:40:22:05:14:1a:c9:4d:
         7a:72:ab:3c:bf:b5:ca:f9:3c:5f:1a:63:f9:3e:5b:09:17:bb:
         a4:1f:92:e3:63:11:b7:a5:7e:9e:da:92:c8:26:63:1a:0c:e1:
         71:e5:41:b7:c9:f9:0a:13:bf:37:57:c3:e6:3c:9d:a4:21:59:
         34:b3:b1:dd:26:bc:f6:86:2c:46:19:13:64:57:e0:42:e7:98:
         7d:24:f7:cc:2e:b5:08:58:09:fa:f3:e2:05:68:6d:80:e8:55:
         93:d0:ca:58:60:0b:d0:f0:e6:fa:e8:b0:1c:e9:99:f4:ab:27:
         8e:15:48:11:b0:05:99:a9:a9:ce:2d:ca:1c:d5:1f:f6:d3:e8:
         1c:fa:18:33:fe:c3:f3:f7:1e:2b:1a:8f:90:48:a9:be:98:66:
         ef:90:bc:13:09:22:7e:3a:44:5a:62:a4:4e:79:cb:78:ff:69:
         1d:8b:ab:71:6b:19:6e:83:a9:f8:ea:cd:83:d2:a7:17:59:f1:
         27:f4:87:81:d7:00:ed:be:34:ea:a8:61:db:cd:e7:1c:62:bc:
         a3:6d:6d:d1:6f:7e:b6:80:ba:cd:8e:fe:63:b8:32:76:0b:93:
         bd:fa:0d:d1:7e:ce:a1:72:33:d1:f1:5f:4e:70:f4:27:43:c9:
         27:54:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net