Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
File:                     065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json)
Hash identifier:          fO/zHQlG8wQGsBeAUmfX3uK5uunLviLAyQTaEYtiWJs=
Subject key identifier:   5A:20:8C:D6:90:B9:DE:2E:11:F7:19:1A:8D:A3:03:D2:AA:FA:84:98
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Certificate issuer:       /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial:       3A999E7A88FE17A674CF4BA563965149258A8DC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
Manifest number:          C1
Signing time:             Fri 25 Apr 2025 08:21:47 +0000
Manifest this update:     Fri 25 Apr 2025 08:16:47 +0000
Manifest next update:     Mon 28 Apr 2025 16:47:47 +0000
Files and hashes:         1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: an321h3sI8v+GMkWh1BVztGwQqu64GnudWducqmJkxk=)
                          2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
                          rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:9e:7a:88:fe:17:a6:74:cf:4b:a5:63:96:51:49:25:8a:8d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
        Validity
            Not Before: Apr 25 08:16:47 2025 GMT
            Not After : Apr 28 16:47:47 2025 GMT
        Subject: CN=5A208CD690B9DE2E11F7191A8DA303D2AAFA8498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:bd:87:30:41:b5:a6:5a:14:4f:e4:f4:1d:
                    35:b0:f5:3f:14:d7:fb:7b:be:2d:af:45:72:8d:cb:
                    88:b8:b9:ad:02:60:f6:8c:cd:c5:89:44:0a:34:98:
                    5f:71:a8:e6:c1:a3:1c:42:60:67:05:f9:06:ad:cb:
                    ff:b9:08:f2:21:03:42:79:8f:05:17:00:bb:5b:00:
                    33:a4:70:0d:66:1b:ff:c6:18:3d:ed:92:cb:fb:c3:
                    dc:ee:28:77:23:c8:d1:7f:dd:d2:3f:71:72:83:3e:
                    79:68:74:2b:51:08:d0:dc:c9:dc:7e:1b:32:85:ab:
                    61:05:95:aa:a8:01:59:19:71:b6:a8:f6:9c:1f:b2:
                    46:c2:5c:52:4c:8d:43:9e:d2:48:0c:35:3e:f7:63:
                    f5:53:a2:f8:46:85:3c:f2:66:b4:19:88:4e:7d:e8:
                    c3:af:bd:f9:55:c9:37:f0:13:f6:fd:3c:e5:d0:1b:
                    d5:2e:0d:d2:1b:cf:31:84:2c:c3:ea:29:52:72:5b:
                    48:66:b0:d8:06:15:57:32:7b:cc:c7:06:d6:f2:2d:
                    83:88:a8:6d:08:3c:8d:41:57:f6:e3:87:d2:55:6f:
                    27:dd:f7:d2:13:cf:82:3b:ab:5a:b5:71:ff:6d:f9:
                    9b:ed:ac:6a:64:8b:f4:4b:b6:ba:be:25:66:7e:d1:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:20:8C:D6:90:B9:DE:2E:11:F7:19:1A:8D:A3:03:D2:AA:FA:84:98
            X509v3 Authority Key Identifier:
                keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:cb:07:ca:42:81:17:50:b0:26:a2:5d:e3:cf:90:37:2d:
         4c:81:6a:41:47:f3:e7:53:d0:4e:cb:d4:57:41:fe:df:74:74:
         4e:11:b5:7b:3a:40:57:f5:66:10:4b:d4:e7:5b:02:54:82:24:
         4e:23:29:45:7f:28:69:be:78:c7:2a:e1:ea:dd:14:90:7d:bc:
         43:c5:27:ed:53:c6:3e:88:1f:c6:f4:f6:97:22:da:22:23:53:
         17:f4:70:89:27:60:00:1c:4a:92:47:97:ab:c7:58:15:d2:2e:
         8d:9c:f1:e1:c9:ee:b6:42:76:b9:69:c5:44:7b:2d:eb:05:4a:
         9c:83:68:25:fa:5a:59:c9:85:db:08:bc:42:c4:6a:19:a6:58:
         73:14:64:bc:d7:ff:f3:c2:ec:73:9b:93:a1:4a:85:d1:79:5c:
         9f:1c:99:31:eb:12:0c:9c:51:2f:c6:e4:90:af:76:ce:6a:5e:
         64:fc:2a:4e:ee:33:21:16:10:a5:06:cf:d7:6d:77:67:b5:55:
         05:af:b6:d4:38:be:2e:94:75:ea:e6:8a:34:9a:aa:92:19:e4:
         88:c9:75:a7:a5:03:75:82:31:2a:ce:46:39:76:58:a7:cd:af:
         8e:78:bd:19:0a:f1:3c:0c:3d:24:2f:4e:a1:13:3f:a6:85:ea:
         63:d8:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net