Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
File:                     AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json)
Hash identifier:          nWL+hxC0sXFH3RmjAhdGfAtoJkPvPyuG9lGmLdYoLn4=
Subject key identifier:   E6:31:56:CB:DB:42:7E:9B:53:1F:AE:7A:FB:9B:E9:3E:0D:E8:14:31
Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5
Certificate issuer:       /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
Certificate serial:       0BF9BA3E29E75763A460267466EC92799236F184
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
Manifest number:          50
Signing time:             Fri 25 Apr 2025 00:40:01 +0000
Manifest this update:     Fri 25 Apr 2025 00:35:01 +0000
Manifest next update:     Mon 28 Apr 2025 01:25:01 +0000
Files and hashes:         1: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: AjW16B5R157K3hvjOmHF0WbVknW4Cg9BK3NqgeP7LAQ=)
                          2: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: lSe69yBxWFEd3+AnJHinzXbb/8hQvnN8fIUzcPG36kM=)
                          3: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: /DFyNaEsyO2usBnFzIOmfhaGZCRB0eHYovN+KsopEbs=)
                          4: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: XF0z782r3sHF+OrwCSt8ZCAVQ0WZ8tu8nYx4HOA7soI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl
                          rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f9:ba:3e:29:e7:57:63:a4:60:26:74:66:ec:92:79:92:36:f1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
        Validity
            Not Before: Apr 25 00:35:01 2025 GMT
            Not After : Apr 28 01:25:01 2025 GMT
        Subject: CN=E63156CBDB427E9B531FAE7AFB9BE93E0DE81431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:eb:42:3b:3e:14:22:7d:c9:19:1b:3a:e6:
                    72:93:eb:5d:b4:6c:9d:0a:e7:3c:4c:76:d9:47:9c:
                    c5:34:34:9b:bc:8f:7b:d8:36:44:7e:82:91:3c:98:
                    16:57:2b:1c:8a:af:f4:ec:2d:dc:75:c7:72:4e:6e:
                    81:60:f3:08:bb:c1:19:68:68:c2:fe:94:48:eb:3f:
                    7a:2f:3e:ff:6d:5c:8a:71:68:f8:4d:d6:fd:9b:56:
                    a4:5b:6a:67:fb:a0:7e:43:dd:44:15:80:61:11:08:
                    1e:20:12:a7:e4:0a:e7:23:25:97:b5:35:d0:70:73:
                    63:34:3b:0e:af:cc:ef:a8:64:22:87:a9:7d:79:a6:
                    ae:ac:bd:f2:18:c1:16:37:10:33:89:17:7b:50:f1:
                    01:d6:73:d5:b6:b7:4b:fd:11:a3:b8:c7:6f:fd:15:
                    32:88:95:f0:7e:99:ec:a5:14:7a:77:85:6d:4d:92:
                    87:37:a0:ca:a2:19:9e:0d:d3:8d:82:3f:6a:c1:f9:
                    24:0f:24:38:21:b9:29:b8:c2:c8:52:36:bc:72:24:
                    20:23:e8:b0:8c:0f:12:77:d6:83:97:6d:33:f2:a6:
                    dc:e2:49:f2:0b:07:9f:e2:7f:13:9e:e1:e1:79:ce:
                    f5:3f:2c:24:55:3d:a3:94:1f:73:ca:36:e2:94:c7:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:31:56:CB:DB:42:7E:9B:53:1F:AE:7A:FB:9B:E9:3E:0D:E8:14:31
            X509v3 Authority Key Identifier:
                keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:98:f8:0b:1f:44:ba:60:30:03:21:f6:1b:1c:ce:59:bc:b8:
         b8:c5:9d:46:1e:65:23:ad:94:93:09:6d:b6:ec:34:c9:5e:54:
         2f:4d:6b:56:d7:17:a5:a3:ee:31:5a:e3:8f:a7:2f:45:13:10:
         07:5b:66:e4:6e:ba:e2:e0:4c:b2:f0:3b:45:51:64:36:59:16:
         26:08:e9:c6:5f:6f:c6:86:a2:18:d1:ab:b0:1e:7b:ce:95:50:
         8b:e7:10:88:d1:46:6c:28:9a:b8:99:a6:e1:4b:e8:98:91:79:
         46:ca:61:1d:a4:70:2d:2e:e2:fe:62:ba:76:4d:b3:e0:d3:e2:
         58:1b:0b:f8:2a:6f:68:0a:4f:13:6e:04:47:07:9d:be:9c:4d:
         93:bc:a3:f8:88:eb:f3:8b:64:00:95:f0:54:a0:e0:03:be:9c:
         e7:df:0a:d4:fb:1c:a8:2f:41:b6:3e:13:37:83:98:d9:ee:2a:
         08:c9:b6:df:44:13:76:73:40:70:d7:4f:4c:e3:8a:33:56:fe:
         b1:06:bc:f1:40:65:8e:51:0f:ee:02:17:ec:14:92:75:fe:f3:
         6f:10:c1:72:99:ff:6a:31:97:99:c7:b1:e6:72:7a:4b:2b:a9:
         9c:e9:b8:18:78:7b:66:14:e5:a9:28:58:3a:2e:67:96:af:94:
         bf:d7:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net