Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
File:                     339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json)
Hash identifier:          egFFWyVIGfBqv5x2CGlCoHwxFLxGEHvo+hm0Cyum6I8=
Subject key identifier:   7A:11:B9:81:55:67:4E:FD:4B:96:5F:46:EF:60:43:A6:9D:F3:00:E0
Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
Certificate issuer:       /CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Certificate serial:       197161F152FA48E54423D248042BE54166221657
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
Manifest number:          01E8
Signing time:             Thu 24 Apr 2025 08:21:00 +0000
Manifest this update:     Thu 24 Apr 2025 08:16:00 +0000
Manifest next update:     Sun 27 Apr 2025 15:16:00 +0000
Files and hashes:         1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: gks6adPoT13seHqvvdxMjgMULtm+2hTDtcyfOgo8NK0=)
                          2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl
                          rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 10:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:71:61:f1:52:fa:48:e5:44:23:d2:48:04:2b:e5:41:66:22:16:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03
        Validity
            Not Before: Apr 24 08:16:00 2025 GMT
            Not After : Apr 27 15:16:00 2025 GMT
        Subject: CN=7A11B98155674EFD4B965F46EF6043A69DF300E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:c8:2a:9c:1c:1f:a2:6a:46:85:32:e9:43:
                    0d:3f:d8:a6:26:a2:8e:e9:fa:ef:f7:e3:bd:bd:77:
                    5a:7e:0f:56:8c:d1:8b:f5:63:03:27:f5:fb:40:3b:
                    e7:e7:f4:23:ef:22:86:5a:9a:7c:e8:33:2c:d7:5d:
                    4f:0f:a8:7a:ec:c0:fe:0d:de:1f:a3:2d:bd:f4:cf:
                    0e:dd:02:bb:7d:db:72:34:16:47:d1:63:b2:5f:ab:
                    b6:a6:02:94:6d:18:f2:92:76:8c:81:81:19:c7:e7:
                    bd:05:08:7d:ba:07:f7:4f:16:2a:63:d8:72:3e:03:
                    3d:8e:17:6d:e3:7b:12:9f:77:93:a7:d3:4c:dc:31:
                    85:1b:c1:3d:86:e6:07:84:72:a3:5a:3e:4e:56:ec:
                    e8:64:ba:94:f0:10:0b:21:e9:63:f6:3f:ca:36:cf:
                    51:ad:ae:4a:a8:31:db:3c:c0:0d:95:81:7e:39:88:
                    4f:a8:25:9e:3a:a4:00:6f:e8:40:02:c7:54:4a:a5:
                    cf:ff:82:3f:a7:d2:01:42:bd:02:f6:e3:f4:02:be:
                    f7:25:fb:76:68:d6:f9:46:99:fd:f9:e5:2e:bd:71:
                    60:d5:c8:e2:8b:0c:02:5e:5b:7d:bd:93:ba:90:fd:
                    23:c1:b9:ae:86:81:4f:f5:03:c8:1c:62:22:cb:0c:
                    77:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:B9:81:55:67:4E:FD:4B:96:5F:46:EF:60:43:A6:9D:F3:00:E0
            X509v3 Authority Key Identifier:
                keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:66:80:9a:3c:88:2c:54:d9:44:a0:0b:c8:e2:c5:85:56:5c:
         9b:c4:a4:c9:f5:99:7d:9d:6c:8f:a1:a2:54:87:85:51:12:8e:
         ca:7c:10:10:bb:2f:ca:8c:5f:24:c5:ab:19:48:b3:92:a3:14:
         15:55:ce:d1:aa:db:91:af:23:6b:8d:e4:da:70:4c:36:8e:df:
         88:c9:fd:6b:94:f2:82:36:f5:72:7f:7c:af:71:23:2d:1f:68:
         fc:88:36:5b:38:8f:e4:aa:09:d7:1a:3d:b5:a8:d2:50:77:63:
         fc:15:5d:16:b4:0a:ea:61:9a:60:08:c1:a7:82:6b:23:13:7e:
         ec:2e:4d:3a:46:8a:52:22:4f:00:20:dc:05:20:ea:fb:43:c4:
         25:d0:df:4c:84:e4:2a:9b:78:1f:c4:e2:8c:6a:f1:00:68:fb:
         1f:69:9c:fa:86:22:db:7d:22:fb:e2:31:7a:2a:9e:ca:5a:6a:
         22:37:83:79:66:7b:e3:80:7a:be:31:3f:47:b4:f0:3a:f5:3b:
         f5:e5:a3:6c:cf:7e:74:d7:5f:11:fb:14:54:86:f7:4c:4a:bb:
         73:b7:04:b3:76:8c:06:17:aa:d9:02:29:05:f0:ff:6e:c7:29:
         bc:12:79:b1:11:9e:86:fb:d5:b5:56:ea:04:1f:18:a2:44:39:
         5a:19:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net