Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
File:                     08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json)
Hash identifier:          6a+iBFC1Wu6A7NEW1FqJhVf/myLtQsZSC06aHNDbscE=
Subject key identifier:   14:CB:38:42:0E:1E:35:10:F6:DF:CA:CE:B6:7F:77:66:31:A6:65:59
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Certificate issuer:       /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial:       66A4157EE4F3D5EC5D6ABB38EC6752B971F23DF4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
Manifest number:          04CF
Signing time:             Thu 24 Apr 2025 22:01:30 +0000
Manifest this update:     Thu 24 Apr 2025 21:56:30 +0000
Manifest next update:     Mon 28 Apr 2025 01:10:30 +0000
Files and hashes:         1: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=)
                          2: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=)
                          3: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: W8Ab8VFBZPutfTfu3ObICYVzVDGJQ4U4rm/B/IiMiKs=)
                          4: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=)
                          5: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=)
                          6: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=)
                          7: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: uvqfjeAuMsDgy2S+lqKfVA/VGjsHmAxmc+ppKnV8vvI=)
                          8: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: RiJN0l87aY48VKpm5kB/oKohwUhSNuwZ2dejTOYaeE0=)
                          9: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
                          rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a4:15:7e:e4:f3:d5:ec:5d:6a:bb:38:ec:67:52:b9:71:f2:3d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
        Validity
            Not Before: Apr 24 21:56:30 2025 GMT
            Not After : Apr 28 01:10:30 2025 GMT
        Subject: CN=14CB38420E1E3510F6DFCACEB67F776631A66559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:89:eb:e2:ae:a1:c9:4e:d7:67:90:6e:1f:
                    ca:77:39:e7:6d:8e:a0:6b:9d:74:55:56:5e:da:31:
                    4e:c8:11:4c:b5:ce:27:ce:6d:5c:64:49:06:fa:df:
                    4d:eb:67:99:00:66:bb:e2:4e:23:2f:1e:af:4c:1d:
                    2c:a2:26:84:68:56:cd:b1:9c:be:28:13:48:b2:aa:
                    23:f7:32:e7:37:c8:95:c3:9b:21:d0:31:2c:25:1b:
                    29:fc:cd:0f:05:ff:4d:27:e6:81:25:9e:b8:02:b6:
                    59:17:e9:cd:20:ec:79:f0:00:da:fd:33:65:2f:3c:
                    61:d6:85:13:d3:26:aa:6a:8e:8c:62:0c:d5:a6:b2:
                    2a:5d:61:6f:2f:85:9f:91:d7:70:04:02:ba:bb:e2:
                    fd:b4:fe:00:a5:a9:69:55:21:34:b5:36:84:d8:63:
                    1b:b6:86:ff:cb:70:bf:eb:3d:b0:64:f3:84:97:b4:
                    15:7d:db:ff:25:ab:95:0a:1a:0f:68:3b:ac:15:7d:
                    8e:d9:2a:29:b5:85:81:04:90:a6:f7:51:db:a8:55:
                    0f:a1:d3:75:eb:8b:e7:79:1d:b1:90:90:42:d4:31:
                    51:a9:83:5f:ef:1d:00:19:1e:ea:31:8a:6d:a2:d4:
                    84:1f:60:2c:34:78:19:89:40:13:49:96:c9:31:25:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CB:38:42:0E:1E:35:10:F6:DF:CA:CE:B6:7F:77:66:31:A6:65:59
            X509v3 Authority Key Identifier:
                keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:50:bb:80:d4:f3:80:ac:c2:88:34:b7:78:1f:7e:ae:f6:e2:
         b0:9b:44:06:80:e9:1a:6f:9e:d5:1b:00:34:06:16:98:6d:72:
         0d:28:24:03:5f:11:9e:cf:65:55:35:3f:4b:e5:8b:2d:2c:8b:
         17:30:8c:32:af:e0:5c:f8:65:e6:df:4f:73:95:ee:69:1c:31:
         9d:b2:ba:01:7c:84:12:a7:da:3e:87:2b:a1:41:d1:9c:19:8d:
         a5:f6:4f:c4:37:24:29:74:f9:e3:86:b2:08:1b:c2:b6:6d:b5:
         0e:7c:2d:21:7e:ba:7e:d0:b0:26:11:18:f5:bd:b8:a3:8f:2e:
         4f:77:9a:af:93:10:98:c6:ac:74:e6:4d:e1:19:22:db:bb:67:
         43:62:88:f1:ab:cf:b5:78:dc:ca:ee:98:e2:fc:8a:c5:3a:92:
         34:77:c2:3e:4f:de:1d:73:f0:01:f9:75:56:f4:73:6f:bc:23:
         26:6d:f0:b8:89:1d:6a:82:71:63:32:1f:ee:83:6f:8f:15:73:
         e4:f5:93:db:2e:97:e3:8c:ad:9c:7f:81:7b:9b:ab:7a:b2:f1:
         40:fc:f5:b3:3c:b7:9e:0f:24:39:3f:24:b1:dc:06:28:4f:fa:
         83:c4:c2:61:09:49:84:a6:45:03:95:bd:0e:81:4b:b3:d3:90:
         cf:84:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net