Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
File:                     17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json)
Hash identifier:          L8hldP0mo0qSQnKgjrCYdhy76VBMjx06AHg4jG8iLTw=
Subject key identifier:   4E:52:81:5D:17:20:01:CC:1B:89:D3:3F:81:DF:3E:59:AA:CE:8C:26
Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
Certificate issuer:       /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Certificate serial:       24D1AE44C11E9F28B8A60B15D0547119E0776044
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
Manifest number:          017C
Signing time:             Wed 23 Apr 2025 15:31:16 +0000
Manifest this update:     Wed 23 Apr 2025 15:26:16 +0000
Manifest next update:     Sun 27 Apr 2025 01:43:16 +0000
Files and hashes:         1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=)
                          2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=)
                          3: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: vNmYJZqGS1A9FN5gk98jwKwY/gepBciq13mRffOtUWo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl
                          rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:ae:44:c1:1e:9f:28:b8:a6:0b:15:d0:54:71:19:e0:77:60:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
        Validity
            Not Before: Apr 23 15:26:16 2025 GMT
            Not After : Apr 27 01:43:16 2025 GMT
        Subject: CN=4E52815D172001CC1B89D33F81DF3E59AACE8C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:aa:a3:cd:21:e3:c1:9b:49:94:c4:a6:c7:
                    78:db:45:dd:cc:56:40:89:3e:8f:dd:1d:76:77:92:
                    98:b9:71:66:de:2e:a6:69:11:66:a1:91:4b:bc:47:
                    88:77:0f:24:59:b3:bc:dc:bf:3e:03:a0:f3:6f:c5:
                    06:14:b2:bc:46:66:84:76:9b:9f:ce:1e:45:11:46:
                    47:a6:e9:d1:75:2e:0e:5e:bd:7a:81:30:52:15:11:
                    4f:34:ee:c5:bd:95:c0:86:5e:b7:74:2b:7e:ab:27:
                    bc:30:c9:fb:58:a6:1b:41:96:2f:88:de:6f:5b:0f:
                    f6:51:91:e3:4a:d2:42:a7:45:f3:a7:0b:4c:13:75:
                    22:aa:c2:b6:e5:ad:d3:08:b8:0f:47:5a:d2:9a:13:
                    1b:16:60:c1:cd:80:8a:7b:ca:19:87:e7:ea:d7:52:
                    3b:27:fc:a9:88:f9:03:df:04:7c:36:d6:62:1b:f2:
                    f3:59:50:75:5c:a3:dd:e1:a2:64:08:a4:53:18:bc:
                    97:b5:1c:5d:bd:ea:9c:97:6d:f9:77:ed:68:f0:be:
                    82:90:d6:6c:e8:07:d2:1a:e1:bc:3c:4a:4d:d1:16:
                    71:b7:73:db:cd:52:43:a7:7d:e9:a7:62:31:86:6c:
                    bd:a8:ef:96:40:4a:e3:f6:1c:65:ea:e8:e7:21:04:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:52:81:5D:17:20:01:CC:1B:89:D3:3F:81:DF:3E:59:AA:CE:8C:26
            X509v3 Authority Key Identifier:
                keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:18:ef:ea:00:89:a2:60:ff:ce:f8:2b:92:36:70:55:f4:39:
         2c:12:9f:dc:b0:9c:29:98:e0:57:55:d5:dd:82:51:11:1f:5d:
         19:b1:e9:f5:be:20:27:36:cf:4c:13:50:af:58:5d:19:db:ea:
         18:81:fa:c6:1b:4a:68:95:20:ec:3a:d7:92:b3:de:da:b4:9b:
         8f:56:99:73:a6:14:cc:13:ca:22:9a:b4:2e:14:92:58:3f:f3:
         e3:2e:fe:99:c2:3c:bc:c4:f6:21:ef:58:b1:d7:68:57:22:7a:
         ab:b7:2b:ad:30:dc:eb:eb:42:76:0c:e3:3d:9f:32:e6:41:2f:
         df:6c:3c:8b:58:29:7b:5a:05:9e:fd:00:a6:5c:7d:cc:e9:41:
         3e:03:07:a1:93:94:c9:54:d5:e9:10:c3:b2:d6:e7:75:04:94:
         6f:29:1f:30:a5:c6:31:ff:14:4f:c8:2d:8b:ad:ac:f8:d0:33:
         d7:42:86:ec:7e:22:21:4e:c2:ad:df:67:01:2d:c2:3c:27:a2:
         8e:f4:6f:89:ce:9c:6d:97:85:7f:67:9c:3f:d3:c0:ca:01:fd:
         4c:bc:d2:ff:92:a2:cb:eb:f0:6f:80:f2:cb:48:2b:6e:6e:d3:
         32:de:72:9a:cc:fa:d8:58:8e:30:54:13:5a:5e:f9:89:0f:47:
         44:a0:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net