Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft
File:                     CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json)
Hash identifier:          fW3rjpx38clALcXrQ23h1VJcMrnHBZ0utWyAGB0LE/0=
Subject key identifier:   32:91:6F:6D:8F:8F:DA:BD:9B:C0:8A:D6:DE:D8:B5:5C:02:5C:3E:C7
Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8
Certificate issuer:       /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8
Certificate serial:       3BF62B4218931FB35671E604C848FA0586278E74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft
Manifest number:          DF
Signing time:             Wed 23 Apr 2025 20:41:52 +0000
Manifest this update:     Wed 23 Apr 2025 20:36:52 +0000
Manifest next update:     Sun 27 Apr 2025 00:02:52 +0000
Files and hashes:         1: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: Ev5Zm+aPL92pxSenRQlxJLjnfs8255qKsPZ8oViu6OY=)
                          2: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: ujXZEqTb+Qpvl4UCdCefHpkvSPz4EXp01C/5//Rb46E=)
                          3: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: Ffr7HSxRfBzoFYefTz5XE3Cvp6ZJFdX7ThQTqqqgwdo=)
                          4: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: rEdOpyNjEZ8YMixA7t2nlCbVfs6jDuqgxnmxKD+tDAw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl
                          rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 00:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f6:2b:42:18:93:1f:b3:56:71:e6:04:c8:48:fa:05:86:27:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8
        Validity
            Not Before: Apr 23 20:36:52 2025 GMT
            Not After : Apr 27 00:02:52 2025 GMT
        Subject: CN=32916F6D8F8FDABD9BC08AD6DED8B55C025C3EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:0b:85:07:48:5d:0c:09:90:a5:3e:fe:40:
                    dd:28:ed:84:3a:55:15:64:b4:1a:b3:43:92:50:93:
                    b9:40:63:63:3e:9f:a5:dd:1a:d5:bd:99:be:09:b0:
                    9d:a8:63:e5:49:a5:6b:ef:bb:2f:f6:2b:58:56:64:
                    1a:5e:d5:07:66:b0:54:ec:bf:f1:ea:ce:c4:24:a6:
                    4d:af:31:8e:1e:70:b3:b9:ac:e1:25:e3:10:a0:c6:
                    ce:4b:0c:f1:6c:f9:41:f8:c3:48:84:09:72:04:fe:
                    00:3b:9e:16:c1:c4:86:1e:76:1d:27:98:36:4f:2f:
                    af:7c:10:56:06:9e:3d:fd:6f:6c:22:5e:7f:1f:cf:
                    91:fc:8c:ca:2a:58:ee:43:1b:85:eb:cc:2e:f3:1c:
                    a2:7b:a8:41:6f:76:94:c9:cf:98:73:2e:71:28:e5:
                    95:2e:67:15:48:20:32:fa:0e:b9:d8:45:6f:ed:e6:
                    3b:12:d4:15:5e:dc:d9:8d:be:ad:8a:c5:ad:ef:f7:
                    21:18:3b:6d:e8:a2:51:53:56:2a:e4:04:9f:2f:28:
                    44:78:48:e0:fa:38:0a:f1:17:6e:48:0f:a9:b3:c6:
                    f6:5c:46:bc:f8:86:67:2f:a0:06:3b:66:60:55:0c:
                    a4:14:d2:45:34:b7:6e:bd:55:74:bc:ad:f4:fb:f9:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:6F:6D:8F:8F:DA:BD:9B:C0:8A:D6:DE:D8:B5:5C:02:5C:3E:C7
            X509v3 Authority Key Identifier:
                keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:30:53:63:08:5e:1d:7b:10:61:f2:f4:b2:c6:f1:bf:dd:
         78:22:cd:1a:a6:41:84:9d:8a:0a:7d:61:f0:21:64:33:b8:68:
         c5:fa:f9:9b:56:32:9c:ba:7f:c9:bc:97:99:eb:2a:b4:9e:97:
         9c:9e:ba:78:06:aa:48:19:53:55:47:de:b8:b6:b7:55:b1:10:
         72:33:57:29:01:3a:e6:d8:4d:5d:52:4d:f4:c4:13:6c:97:ba:
         6d:c5:ed:07:62:a5:14:5f:ed:f5:97:4c:d7:fe:ed:2e:30:7d:
         09:78:5d:cb:18:f7:4e:27:df:95:32:6c:94:67:7f:65:1a:96:
         c7:9e:75:7b:03:67:bb:57:41:8f:d9:ee:df:62:ef:44:df:df:
         05:1e:cc:59:b4:38:d2:82:c9:7d:9c:a0:59:49:42:0e:fb:3f:
         8b:98:4e:8b:73:4e:0a:62:17:15:0b:0d:e5:33:1b:ac:ed:5f:
         10:3e:5e:58:22:b8:84:59:fe:84:ec:59:01:1b:a9:e9:6f:e6:
         4a:52:c3:5b:ef:cc:2a:8b:28:92:51:13:9a:d1:7e:6d:ba:06:
         42:a5:14:c5:2d:25:39:09:70:81:14:27:c5:69:fe:a2:d8:52:
         55:6b:dc:f4:8d:4c:9c:be:69:4a:5d:12:b8:24:92:de:c0:7e:
         0d:18:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:12 2025 by rpki-client on console.sobornost.net