Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
File:                     C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json)
Hash identifier:          zlov32Rd3OioBjd5+scAnJ0qRJC3sGmjcj7cfMgPUd8=
Subject key identifier:   75:13:9D:23:41:8E:3F:CD:86:93:71:0F:D8:18:C3:5C:3E:71:ED:62
Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55
Certificate issuer:       /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255
Certificate serial:       077272882637503CB289D8E35B5D3126E8C2268C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
Manifest number:          D4
Signing time:             Thu 24 Apr 2025 16:51:39 +0000
Manifest this update:     Thu 24 Apr 2025 16:46:39 +0000
Manifest next update:     Sun 27 Apr 2025 21:06:39 +0000
Files and hashes:         1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=)
                          2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: CV7wPSjApVAuqrKwahAE06v6ISAaDGscp+NQUPEjvdw=)
                          3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=)
                          4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl
                          rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:72:72:88:26:37:50:3c:b2:89:d8:e3:5b:5d:31:26:e8:c2:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255
        Validity
            Not Before: Apr 24 16:46:39 2025 GMT
            Not After : Apr 27 21:06:39 2025 GMT
        Subject: CN=75139D23418E3FCD8693710FD818C35C3E71ED62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:d1:33:07:bc:44:a9:3e:d6:93:47:6d:3f:
                    96:8c:04:89:75:53:12:67:b7:dd:9d:86:69:ff:14:
                    87:1e:e5:c1:e8:f4:d3:ad:d7:b5:35:f3:65:4e:1e:
                    87:ae:3b:e9:8f:42:7b:00:8f:07:e5:67:d6:4b:70:
                    9d:2a:9a:06:c0:54:fc:e0:cc:3a:0a:77:77:bc:f3:
                    d7:35:51:37:c6:5c:70:3d:3e:de:e4:59:65:0d:0f:
                    da:60:de:26:26:64:fb:4d:47:88:49:9c:d1:21:ed:
                    a4:ba:56:04:c1:fc:b9:12:77:62:3b:88:03:7b:47:
                    d7:cf:ea:6d:4f:c0:28:48:ec:32:77:03:c8:92:1b:
                    5e:e1:bd:40:89:1e:0d:86:86:d8:8b:08:3f:bc:5c:
                    72:7f:3d:b4:0d:7c:10:42:2b:73:5d:51:2f:80:f0:
                    ad:f0:17:4c:a9:f5:8a:f8:b1:3f:32:fe:a5:6a:d9:
                    fd:2b:7c:03:2b:d2:19:b8:ef:2a:a0:84:6c:2a:37:
                    b2:c3:1e:72:ba:2f:f4:0b:09:e6:2d:be:ae:3b:94:
                    ec:ff:c3:4d:3a:0c:f6:d5:31:f3:2c:40:8e:d7:95:
                    fb:88:25:f8:9a:63:aa:44:08:a8:c6:4b:e9:8e:b7:
                    0d:e5:eb:1f:1a:90:c4:e8:24:85:5d:6b:41:66:c0:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:9D:23:41:8E:3F:CD:86:93:71:0F:D8:18:C3:5C:3E:71:ED:62
            X509v3 Authority Key Identifier:
                keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:f6:31:aa:d9:85:d6:ca:58:62:fe:eb:6a:29:58:ee:cc:
         22:be:da:ac:cc:90:02:89:c4:4a:73:39:88:6b:b2:cf:1c:9d:
         0b:81:6e:e8:16:7a:f5:b1:94:c8:7f:ad:84:2c:3f:0e:8f:1b:
         1a:72:e0:93:c6:42:33:24:8f:55:c8:08:3b:be:3c:7b:79:d6:
         e2:e2:ab:78:3c:2b:ac:0f:bb:37:8f:17:72:67:8f:53:c7:a4:
         fc:41:d1:ce:1a:9e:cb:66:58:8b:c1:30:fa:c7:ed:b6:37:51:
         f4:93:59:fe:5c:73:8c:ef:e7:56:99:0b:a1:47:bd:e5:56:18:
         a8:45:e9:e1:07:bb:46:b9:79:90:0b:7b:f9:40:6e:de:c1:00:
         e2:dc:58:15:94:0d:bf:83:18:e5:c1:42:69:34:f4:5f:e8:0d:
         3b:dc:b3:a4:03:8d:9b:ce:fd:b0:94:14:54:04:30:30:20:3b:
         fa:c2:91:20:dd:8f:1e:41:e9:b1:be:9f:83:f1:7f:89:83:65:
         2a:30:83:85:21:19:f0:6a:c0:35:60:94:4a:d1:8e:b7:29:9a:
         ac:8a:2a:b8:18:57:e3:07:4a:06:5a:74:dc:37:ad:9e:6f:ae:
         e2:d2:9c:b7:91:c1:3b:7a:01:4f:c8:03:6e:8d:ce:82:51:0b:
         80:bc:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net