Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
File:                     41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft (raw, json)
Hash identifier:          BQAZgs+0EwFZ1u01yE4EYKSG7bN9mgkIBi7sbINYORU=
Subject key identifier:   BB:B7:76:F8:6C:20:54:EA:0D:3A:BE:AD:BA:9F:6F:1C:80:14:D3:DB
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Certificate issuer:       /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial:       597ED4E3A21BA7EE371EC7E28302C179E3D45F44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
Manifest number:          016B
Signing time:             Sat 26 Apr 2025 10:51:29 +0000
Manifest this update:     Sat 26 Apr 2025 10:46:29 +0000
Manifest next update:     Tue 29 Apr 2025 11:49:29 +0000
Files and hashes:         1: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (hash: QpQ1/sm5zXzKMRcJ3nXPQnI+vIIBo+CCNe1F4YSgeSo=)
                          2: 3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (hash: qIgN11+WPom9/7TNDZoyX6fP1sCsas2zffkRRMYFeHM=)
                          3: 3230322e3137332e37392e302f32342d3234203d3e203233363935.roa (hash: JlV82roW0wq9X2Q7J+tUUs8b8oUVk7NAH3mIbLD0we8=)
                          4: 3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (hash: kHEvnsONRQITDgcaeW14+b5i/pT074x2j6ak8xJ3qTA=)
                          5: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (hash: kYREuhiT4n/pjRYISa3PHavGRxERDOS8izljvugeJrk=)
                          6: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (hash: bXcYT55Yk5nGWBx7FCOVlDHnPL+/TKis1JRYYVSX17o=)
                          7: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (hash: oDlDI6fU21fZbXJ7xjJnRhwvlH5l3glqD9qF8ZX5Ecs=)
                          8: 3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (hash: kBeUG+J3aaoaEctPb/7V99FsXKX0tZO2cRt3bs0z0/k=)
                          9: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (hash: Vcu3cvP6TpAtiqIJRyIG86FnbkyFCwZwDKOk+Zdad3Y=)
                          10: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (hash: o2ln+IfG7vkZVTnGCTylCBTI2pbcc89CV9g/agRQLtQ=)
                          11: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (hash: 8/H1q3EcizQtYAaVI5vaP4CIs/Srkv0IwoIGGhf07is=)
                          12: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (hash: fMnLos8+J1VIZ4qwJVBJ1J3B9BHaKTUBDhVAh5aNCi8=)
                          13: 3230322e3137332e38342e302f32342d3234203d3e203233363935.roa (hash: X9OlKSdhEP9aR8QcezvNKe8bo7GaRw8yvBmdk6EUw2A=)
                          14: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (hash: SmTukg2uSres2nPLyHTBL++dFIaU5SWdWD9V1LnZKzA=)
                          15: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (hash: NGImgtjhDUZw4LYbto24tiacu1uj5ePcNIzwHQKWr60=)
                          16: 3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (hash: UlX0UeHxNwDo/jIJmlDlRnsp3ZbSu9xVDF7FdNoezxw=)
                          17: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (hash: Xthgw31h3s+GW8ypk/PRH8TnEVJQ++dwiKocGGYj4NY=)
                          18: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (hash: yeM18fVhFIvaqgN5QmmIrEdPBDtaljcx9XyjNtHhwl4=)
                          19: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (hash: lhuajvGIv7rcCg6mlRyz9c9eb3L+IyDr9Q9rPP2Ha5s=)
                          20: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (hash: 2bUXUTcYKqH84i/OW2TNfGKGcjdUBjA5fkOcr7LqU+Y=)
                          21: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (hash: HIAVUx6ij09H4kiiZ/OJGBRVevXktqzOjuX4vjeRYfI=)
                          22: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (hash: JrMofhOCMVdNP1sEAWvpSSTT2LmZl0HuhRslYJ7iy9U=)
                          23: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (hash: uUWqQ+r90afq72pms35ZsH7xSBYfCse9ZKzmHy/kk18=)
                          24: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (hash: mn95e/RHwrm52jwgTOEuu2HIFPqZkwjgw7iJzDcC0Aw=)
                          25: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (hash: 6QSQEwf0Vg6SaXjS+GIzWwNuYlP7VRzDWIXvyWeiVCo=)
                          26: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (hash: P5crg0R32gyS1n02458lLpX18WRXH3sQSc1skd1DZ2k=)
                          27: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (hash: w2YQbT4d401gEkexkGPNI5ffRS/JYHdhmh+BaqpDiJs=)
                          28: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (hash: vDU9gcRo8sjLDkCnZOzt+rm8fLZLUHyOqnl2eV08+uU=)
                          29: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl (hash: WwcMM8HxR5x7NtwhPEOyarxjZC0MyXH5rBZI3fuA2vM=)
                          30: 3230322e3137332e38312e302f32342d3234203d3e203233363935.roa (hash: fZQK9JY5pm3VYutUjV1YUz0UdbDku9RPZXo98IsSdnQ=)
                          31: 3230322e3137332e37302e302f32342d3234203d3e203233363935.roa (hash: QfY1rUIQ5PL3Z5jxkldepfjgl0wlr3DkT3fjGc62FLQ=)
                          32: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (hash: Qe7KScU7+lZMmSIY+33thQD4DgpTET1HSNVXslVMyw8=)
                          33: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (hash: kWaiaFCi5F4TW6LYG0q3VELQGQNXbZe+dclFyLeSNAY=)
                          34: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (hash: nSzlfFPpI7N3qrGPleUZ7U2AGFdMYcBNQO4RGyLMKDU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
                          rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7e:d4:e3:a2:1b:a7:ee:37:1e:c7:e2:83:02:c1:79:e3:d4:5f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
        Validity
            Not Before: Apr 26 10:46:29 2025 GMT
            Not After : Apr 29 11:49:29 2025 GMT
        Subject: CN=BBB776F86C2054EA0D3ABEADBA9F6F1C8014D3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:74:4e:66:97:40:54:05:2e:b7:8d:a0:0f:
                    50:e3:5a:0d:a0:27:cb:85:f8:2f:7c:36:8b:4c:5c:
                    73:d1:96:ab:ea:8a:7e:25:ec:cd:2b:7e:fe:2f:0b:
                    08:76:0e:63:1d:ff:ea:17:c1:80:f4:4f:c4:0c:a7:
                    15:13:d0:80:81:a2:02:f3:da:10:8e:41:37:77:19:
                    73:2a:86:b4:1f:a1:02:e5:f2:a5:f8:4f:18:32:02:
                    24:45:0e:41:5e:a7:f2:5c:87:c4:02:ac:9d:ca:b8:
                    ab:2f:bb:70:9e:fb:6b:85:a2:e8:53:3f:2c:4b:68:
                    c9:02:8f:e1:be:0a:5e:9a:df:5d:1e:47:7b:44:b6:
                    3e:b9:67:9c:28:db:dc:de:2a:f0:75:f6:65:a4:8e:
                    8f:d4:a3:71:25:18:94:d9:6d:c0:85:f1:9c:02:ab:
                    e8:29:2f:05:17:f5:88:86:32:8e:db:cf:25:b5:78:
                    d3:0b:b8:bb:9b:c4:02:5e:88:8c:96:52:f9:af:3a:
                    c0:e5:77:f6:00:5f:9b:41:4e:dd:0d:02:63:01:82:
                    eb:0a:8b:0c:9d:45:68:b5:41:72:81:dd:64:ae:d8:
                    91:a0:83:21:4a:4c:c3:e6:29:ee:a7:e4:c1:8f:d7:
                    78:df:a1:20:91:61:35:61:3c:c2:0f:4a:1c:91:c4:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:76:F8:6C:20:54:EA:0D:3A:BE:AD:BA:9F:6F:1C:80:14:D3:DB
            X509v3 Authority Key Identifier:
                keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:07:9b:6e:4a:b8:fd:83:d5:82:cf:05:fe:85:2d:7c:56:a1:
         34:10:1a:ae:b8:71:b9:40:70:2a:2c:d9:5b:08:52:14:07:c0:
         f2:3e:97:5c:3f:cc:ce:a1:7c:92:c2:45:a8:09:bf:de:63:15:
         ec:fb:09:ee:cc:f7:1a:22:25:75:a3:c8:d6:67:29:5b:03:5f:
         38:fc:9f:47:d2:74:96:bd:b9:79:b3:f1:80:99:99:0c:93:8e:
         e8:63:a1:e5:51:c0:69:70:5f:ed:35:1d:03:d1:e4:bb:3b:82:
         4e:47:81:2c:04:d1:4c:fb:6e:44:f6:dc:08:df:17:50:03:2a:
         f4:70:36:93:14:92:7b:bf:f0:14:dc:97:92:e1:11:bc:2f:68:
         ba:05:58:02:ad:d3:47:7b:3a:e1:86:be:a5:66:a5:d4:6e:a8:
         f8:f3:07:74:05:29:aa:9c:c6:dd:85:5a:87:b0:33:72:21:1e:
         87:f3:83:65:f1:5f:7b:37:cb:a8:4f:bc:15:02:5d:cf:cd:69:
         84:d7:56:d9:b5:54:b1:78:67:74:8d:e8:16:38:89:f9:02:68:
         96:ab:cb:85:cb:f2:a9:75:a3:17:18:48:03:8b:2f:87:48:06:
         5a:67:e5:3d:b2:58:06:cb:5c:80:98:42:93:eb:27:72:8c:15:
         21:91:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net