Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
File:                     935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json)
Hash identifier:          vxipyVCcyd92EoI2sM5YCqKoNWLTtyZk71RdveRTDH8=
Subject key identifier:   FF:51:FA:1C:01:8A:3C:C1:0B:C6:EA:AC:09:09:EA:4D:8F:91:77:F6
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       0EAC1357A9DE4682CE6090913303E473001187F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
Manifest number:          04DA
Signing time:             Fri 25 Apr 2025 05:11:04 +0000
Manifest this update:     Fri 25 Apr 2025 05:06:04 +0000
Manifest next update:     Mon 28 Apr 2025 07:17:04 +0000
Files and hashes:         1: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: /vW/TSbog9WsObuCC1lgKjgijK+Dod2mciJtHHUezKU=)
                          2: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: gW10ROgt09o0IM/FgnaUDfTJF5ydZooB3pXvlmYpehM=)
                          3: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: r8ZqBwcrGdH8TEuK29OivEcKhqjzvIMTsJVTlTtuCYA=)
                          4: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: cDY4Z9d9g+KrirZABQ3RMVXlQjWVTpJ4E7KqPsvflsA=)
                          5: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: U+DhKaCX+eMWoG0BK1JUCp92Kg/SlFMW4W18iDWDPk8=)
                          6: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: MHLvNBBDeKLXnh9zpHXyspbjmbbkMSXMU/LUFMRRAKk=)
                          7: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: 7dk3+UbgX607IlNTst1WKsK+D+Kfaq5vP3vfslx3Dv8=)
                          8: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: jfQj9Xe+FFUAvRMk0Cart8oc9Moe7xONTWgrujdxqvw=)
                          9: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: BjsgdP0bBBN6UnRaespbf8YwMMjiGp/LVHsWqYC0AnA=)
                          10: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: YPCHB9+pVaURl8+dAGmuKHWAAYIp9zXHQ5RNjAvQlWA=)
                          11: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: hBCdf6MQ44EMODLH0goT5EgLIomwJ27fDjdA8l3goK8=)
                          12: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: EEaEZh5b8qX6GK9UvSPlgYe2sVCD2bNdjCbgrn86OIw=)
                          13: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: E3Ix9LCh0uoZASJHsryr0UOCFO0Y4eUcpygMjbixTxY=)
                          14: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: ff8501ZPkr7KlYGUXPEp2Ubjto55pXXgmuYMIxAXR0I=)
                          15: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: f1JmznDZXZsYmE+EOn6/ixZplBrsI4tfJgjAi4Te3YM=)
                          16: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: N2GLQMMA/qT2QiLPtJRjOfYhs4Npr6h5DA+qLf5C1dI=)
                          17: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: spz6qG1bxXEvqZGHND0wn8N5S0VzxSUNZ62Ev/Uf0x0=)
                          18: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: xEdRuUJTSivUpNPIDnPWLGfAdZM7XwpAuLlbwL66BaU=)
                          19: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: lR+WSBiL7cOFUb1JcRW+5/d+PDThjLOWPJrqzwsQquY=)
                          20: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: 3SF0bAW+7rz1kqWvQ04ZAo3EXSDUW7WAvx83Y52xCYs=)
                          21: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: lmN8CKwnpjABLBKuKVDCz9e5H4GmlgOLsUei3+Y0saA=)
                          22: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: uXjjFF8r0bZTRb9FAMyxiQMT6f66pjylh6TLVp8RaRI=)
                          23: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: DlYUP/F+RIK8nZbMYNKyJFx66/fMZlATHS8Y5cVRmHA=)
                          24: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: SFLp7JHgoak7sDdC+L9u5QI0FC/G9i3gPmiryYKJWE0=)
                          25: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: 1DsSg30Xy7wVzu/nL8H8hRAnWhIsBpUqum19dGO3/mk=)
                          26: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: vdW3QTcBsIPY6dF/jSl1kcP+cWlLsmSjo55p09Ujwos=)
                          27: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: BpLGzUp7Xs7lG8N9IL3uXt34bHOuJAyWCtEer8epdos=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ac:13:57:a9:de:46:82:ce:60:90:91:33:03:e4:73:00:11:87:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Apr 25 05:06:04 2025 GMT
            Not After : Apr 28 07:17:04 2025 GMT
        Subject: CN=FF51FA1C018A3CC10BC6EAAC0909EA4D8F9177F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:f1:c1:a9:33:d5:01:c3:63:4d:a0:64:74:
                    f9:fa:91:8d:e7:bb:cd:8d:c9:c1:fd:f5:72:be:d0:
                    ac:1b:2f:6e:a0:4e:94:35:9c:ce:8e:a1:e1:f5:64:
                    86:62:cb:bc:cf:2d:48:0c:69:99:37:27:61:82:63:
                    32:a4:ef:d8:d0:ab:3a:0f:3c:2a:e6:39:e2:04:7c:
                    2e:98:8b:64:a3:86:79:d2:f9:35:38:45:b1:f6:62:
                    10:7c:e5:0e:26:83:99:ac:d7:22:81:48:a3:ad:b0:
                    4e:39:af:fc:36:ea:a1:22:89:69:b9:3a:04:ae:76:
                    ca:a1:c1:c3:2b:19:3e:4c:3d:17:d3:8b:2e:66:c2:
                    e2:ad:5a:5e:b4:ec:00:89:e3:08:ea:c4:dc:40:99:
                    28:a3:1d:46:93:b9:a8:44:4e:f7:bb:e8:05:9b:3d:
                    54:8a:24:63:54:bc:71:12:3f:4e:95:36:a1:fb:8e:
                    e1:bd:82:00:41:02:9d:18:db:ef:00:14:02:4d:d6:
                    d5:36:f9:a7:31:7c:42:ba:24:09:9e:c1:16:4e:fb:
                    e4:b8:05:08:10:31:0e:9d:14:40:ee:41:18:4e:8d:
                    6c:34:a9:aa:97:33:43:7a:cf:67:3e:88:06:17:bd:
                    4d:21:53:60:dc:d6:f2:1e:f4:30:d2:55:51:41:03:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:51:FA:1C:01:8A:3C:C1:0B:C6:EA:AC:09:09:EA:4D:8F:91:77:F6
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:eb:60:af:63:84:b4:2c:74:71:54:b7:79:e0:8c:95:2b:9d:
         be:53:41:b8:d1:e9:9e:ac:d1:2c:74:0a:05:73:80:67:a4:99:
         4b:b1:17:d7:2f:1b:43:b7:e9:f5:ca:73:b4:12:a8:e5:6e:6c:
         ef:a4:3d:f2:40:83:e5:fe:5d:07:81:94:c6:ce:75:3f:0a:23:
         44:b8:83:a3:0c:89:1d:e8:15:20:a4:45:1f:92:38:43:b5:3f:
         1c:e4:4c:83:17:82:d4:8d:e4:66:82:a8:15:b7:e1:4a:44:4a:
         f6:ee:2a:df:d0:34:7b:cb:b0:a3:47:ed:53:8e:ff:d5:0f:62:
         0f:ea:65:81:2f:78:8a:7b:be:d6:22:77:a9:26:4a:5f:42:e5:
         8d:61:a7:39:5f:07:b0:9d:fa:fc:f1:f3:88:5b:c3:c3:a5:04:
         26:7c:b2:f4:5c:3e:91:5f:e5:f5:31:41:e9:fd:c2:65:17:cd:
         e4:95:1a:ae:9f:23:f5:81:fb:80:73:d6:62:2c:ef:54:f1:8c:
         9c:36:16:0f:09:05:7f:12:ef:03:04:88:2f:77:df:9b:9e:2c:
         ad:fd:da:33:fd:37:02:b0:37:f4:1c:4d:fd:1b:36:4f:70:37:
         94:e1:b9:d4:09:5a:5d:e2:69:fa:27:84:21:a5:8a:f5:fc:b3:
         26:b2:74:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDqwTV6neRoLOYJCRMwPkcwARh/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy
RERGRDhGMzAeFw0yNTA0MjUwNTA2MDRaFw0yNTA0MjgwNzE3MDRaMDMxMTAvBgNV
BAMTKEZGNTFGQTFDMDE4QTNDQzEwQkM2RUFBQzA5MDlFQTREOEY5MTc3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/PHBqTPVAcNjTaBkdPn6kY3n
u82NycH99XK+0KwbL26gTpQ1nM6OoeH1ZIZiy7zPLUgMaZk3J2GCYzKk79jQqzoP
PCrmOeIEfC6Yi2SjhnnS+TU4RbH2YhB85Q4mg5ms1yKBSKOtsE45r/w26qEiiWm5
OgSudsqhwcMrGT5MPRfTiy5mwuKtWl607ACJ4wjqxNxAmSijHUaTuahETve76AWb
PVSKJGNUvHESP06VNqH7juG9ggBBAp0Y2+8AFAJN1tU2+acxfEK6JAmewRZO++S4
BQgQMQ6dFEDuQRhOjWw0qaqXM0N6z2c+iAYXvU0hU2Dc1vIe9DDSVVFBAybJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/1H6HAGKPMELxuqsCQnqTY+Rd/YwHwYDVR0j
BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4
OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG
RDhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0YzY0YTktMzUzNy00YmM3LTg2
MTMtOGU5ODE2MjllNGNhLzAvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4
MkEyRERGRDhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJrrYK9jhLQsdHFUt3ngjJUrnb5TQbjR6Z6s
0Sx0CgVzgGekmUuxF9cvG0O36fXKc7QSqOVubO+kPfJAg+X+XQeBlMbOdT8KI0S4
g6MMiR3oFSCkRR+SOEO1PxzkTIMXgtSN5GaCqBW34UpESvbuKt/QNHvLsKNH7VOO
/9UPYg/qZYEveIp7vtYid6kmSl9C5Y1hpzlfB7Cd+vzx84hbw8OlBCZ8svRcPpFf
5fUxQen9wmUXzeSVGq6fI/WB+4Bz1mIs71TxjJw2Fg8JBX8S7wMEiC9335ueLK39
2jP9NwKwN/QcTf0bNk9wN5ThudQJWl3iafonhCGlivX8syaydF4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net