Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
File:                     66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json)
Hash identifier:          bjk/VKBl70yN4UBDEHhnpJ8oBnuQlKdtE7G6XWWOYsM=
Subject key identifier:   E0:D0:E8:8A:52:C0:F8:DF:4F:2A:13:06:9A:E5:C3:81:77:09:0A:E5
Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7
Certificate issuer:       /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
Certificate serial:       46573ADE888EA27B9A35A9FB869909EB89ADCE33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
Manifest number:          021F
Signing time:             Wed 23 Apr 2025 02:52:07 +0000
Manifest this update:     Wed 23 Apr 2025 02:47:07 +0000
Manifest next update:     Sat 26 Apr 2025 07:16:07 +0000
Files and hashes:         1: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: 3yNadH5UObiEmtHARrnQZT+Op/4Y8C9oXLlSYOYGT5c=)
                          2: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 0j/OnwOdFjaxB+FdHyREBb9GsfY0gUkr8uOJgHM40w0=)
                          3: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: HZ2RlTa0ShtMozsl632wUCBjGvdspqNpWVFnePh2zho=)
                          4: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=)
                          5: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: dznTYUq/hlOgzr7tq1QdOQNeZPsy/c8Pv0hfpBFl9Oo=)
                          6: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: E6zY9IF+LuOZ3BAlN5O+kmO2W8oIfhWG4MJCZRG/08w=)
                          7: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: N8sKDLIk57D/gE8LMz+4WsORXIvlDWXrXNAbseziHz4=)
                          8: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: k5t3dTLbkf5cumobFfO0JB27WkNENVQf5Ox/fOqEPps=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl
                          rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 07:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:57:3a:de:88:8e:a2:7b:9a:35:a9:fb:86:99:09:eb:89:ad:ce:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
        Validity
            Not Before: Apr 23 02:47:07 2025 GMT
            Not After : Apr 26 07:16:07 2025 GMT
        Subject: CN=E0D0E88A52C0F8DF4F2A13069AE5C38177090AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:5f:32:14:ff:e8:54:ed:42:cd:b2:fa:93:
                    79:8c:63:ea:ce:9b:02:65:d6:fa:ce:b0:4d:35:aa:
                    16:23:25:7e:1e:d7:a8:f2:ed:ff:f3:a7:57:ba:b8:
                    e0:a2:c6:97:d3:f2:eb:b7:6e:a3:ce:f2:57:c6:ae:
                    55:7a:7e:a4:48:6b:97:85:19:6a:56:16:84:e3:e6:
                    76:b5:61:df:e1:8a:b6:00:a9:d0:8e:e0:a4:b9:91:
                    69:91:c6:73:74:91:a9:76:72:8d:81:86:78:7b:1c:
                    b0:6e:0a:23:e0:0f:43:d2:27:21:01:b0:a2:3b:b0:
                    7b:69:6c:e1:8c:c0:8c:9a:a1:76:2a:63:d7:b8:cb:
                    10:d8:c5:ea:94:80:b0:43:1c:69:80:99:5d:1a:62:
                    a9:4f:3c:ee:04:4d:64:64:ab:bf:a2:99:0f:60:e6:
                    d2:32:95:07:85:84:cf:19:ee:68:0b:db:82:f1:2e:
                    f8:de:19:a4:10:4f:2a:51:12:de:fe:00:9a:36:4c:
                    2c:70:9e:5e:4c:3b:96:01:c4:2d:55:5f:0d:0b:32:
                    25:df:06:76:b2:83:f2:37:4b:9d:be:6e:b8:c5:85:
                    4d:9e:41:c5:a4:0e:9f:17:61:b9:5f:5e:b0:4f:51:
                    6c:b8:5b:ad:a0:60:37:41:d2:d2:dd:03:fe:a5:56:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:E8:8A:52:C0:F8:DF:4F:2A:13:06:9A:E5:C3:81:77:09:0A:E5
            X509v3 Authority Key Identifier:
                keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:c5:79:8b:f1:c5:1b:c3:b3:f8:3e:db:19:d3:26:78:71:
         0b:54:32:58:10:52:a1:4b:23:78:cd:09:4c:b7:16:ff:98:5a:
         86:3f:f4:97:ac:32:c8:86:53:3c:e9:32:38:dc:2f:7d:6b:0a:
         0a:f5:1d:a1:c3:b1:04:61:98:ef:e0:ab:f2:53:26:9c:90:17:
         bd:e2:70:11:a2:4c:14:09:52:8c:c0:73:b2:e7:38:ef:b9:4c:
         c1:d0:c1:12:a9:50:9f:d4:d8:ed:88:8b:c4:6e:aa:14:25:25:
         1c:18:4f:50:ab:41:04:10:d0:5d:3a:1d:f8:d1:cd:de:e4:b2:
         ed:06:a0:a6:86:26:7e:4a:6d:f3:04:55:e2:b2:0d:67:b3:2e:
         29:bc:e4:c6:14:1f:a5:f4:45:86:d1:0c:b2:51:28:01:b9:ca:
         30:3f:a8:03:d3:47:30:07:3e:20:5c:76:d1:1c:50:c3:dc:8d:
         eb:95:8d:75:07:78:bd:07:8f:1c:3f:7e:d1:49:8b:36:8c:28:
         75:28:fc:6d:f3:35:76:4e:5c:4f:fc:3d:de:2f:5a:9f:07:0c:
         bf:24:17:86:d0:4d:9e:a9:9a:d4:dd:56:bb:ec:ab:15:16:68:
         0d:be:9a:8c:e1:44:5e:93:a0:52:2a:81:c3:31:2c:97:1d:71:
         0c:55:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:31:51 2025 by rpki-client on console.sobornost.net