Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
File:                     4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json)
Hash identifier:          gl7efzNZyVNHEMLtrQq/Pt2bgaD5LsLfmgaxZWvfd7Q=
Subject key identifier:   AF:F6:56:58:38:57:96:AE:0E:04:EC:87:02:5A:A3:D6:EE:C7:FF:29
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Certificate issuer:       /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial:       4C00C58D9EA89BD7E928EDAB6054E87F67B2A77C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
Manifest number:          01D5
Signing time:             Tue 22 Apr 2025 23:51:20 +0000
Manifest this update:     Tue 22 Apr 2025 23:46:20 +0000
Manifest next update:     Sat 26 Apr 2025 09:33:20 +0000
Files and hashes:         1: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=)
                          2: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=)
                          3: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=)
                          4: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: s+tObiQ5t6AgXgomIcuCm25igYV93ULt6o/XKRKRffo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
                          rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 23:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:00:c5:8d:9e:a8:9b:d7:e9:28:ed:ab:60:54:e8:7f:67:b2:a7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
        Validity
            Not Before: Apr 22 23:46:20 2025 GMT
            Not After : Apr 26 09:33:20 2025 GMT
        Subject: CN=AFF65658385796AE0E04EC87025AA3D6EEC7FF29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:65:68:30:0c:ee:c1:2f:29:f1:42:ca:99:
                    ec:c6:bb:54:86:79:d7:f4:cf:8d:45:31:bf:88:0b:
                    68:0a:cf:35:7e:8e:c1:2b:da:3c:7a:ae:08:98:32:
                    62:b2:2e:2f:d2:1b:60:ad:29:55:62:e3:4d:a3:47:
                    58:01:a5:03:15:7c:1f:f3:81:29:28:da:b8:c4:fa:
                    1c:d0:32:6c:8a:22:44:51:24:8f:53:24:6a:4c:c3:
                    16:9a:54:ed:55:37:8c:03:76:1d:80:8e:00:dd:08:
                    df:b0:9f:8e:92:2b:7d:fe:9a:30:ed:ae:7b:07:30:
                    dd:0b:64:a9:6c:a9:33:ec:f4:fd:cf:d1:d7:33:99:
                    f1:dc:e6:93:80:d6:4a:8c:f6:96:e8:c7:31:70:3d:
                    33:34:29:31:7b:0d:00:50:be:2c:26:11:80:67:23:
                    0e:fd:a3:ac:8d:d0:bb:8e:14:f6:5b:ff:fe:5b:5f:
                    49:e9:8c:b3:e5:1d:86:10:9e:3f:09:e0:a3:31:73:
                    2a:8a:b7:f9:80:c1:af:cd:c0:18:cd:ee:eb:b1:4a:
                    87:5c:38:2f:07:48:ac:f0:fc:8d:e3:1b:4f:94:dd:
                    92:62:6f:27:58:d2:b8:38:d3:04:5e:7c:60:c1:60:
                    c2:c6:68:cd:a1:92:3e:4b:8f:44:4e:22:8f:6e:34:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:56:58:38:57:96:AE:0E:04:EC:87:02:5A:A3:D6:EE:C7:FF:29
            X509v3 Authority Key Identifier:
                keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:10:ed:63:44:44:10:f8:9e:d2:4e:97:52:ed:4d:b1:4a:ab:
         2c:86:7c:93:91:f1:2e:dc:d9:1a:e3:18:92:7a:e0:b6:f2:13:
         30:5c:ba:94:d0:51:ef:fa:08:f0:01:af:14:41:18:f2:ef:9e:
         2e:f4:c8:69:da:75:83:6c:bd:1e:37:3f:8f:b6:ed:17:7d:dd:
         41:d7:14:00:52:52:8e:83:90:a1:95:98:01:1e:8a:ea:bf:01:
         99:67:88:c1:ff:4b:6f:f7:d0:aa:b9:37:97:28:39:5b:2b:67:
         f0:ba:03:60:3d:4b:c8:a8:74:26:65:83:40:45:26:6a:99:1a:
         0c:c6:5a:93:05:df:71:ad:fc:8d:08:5c:b2:56:28:58:26:a4:
         98:86:ee:86:c1:a0:28:e8:02:eb:bd:1c:f1:c5:67:da:25:d2:
         ad:20:a8:09:05:a6:3b:1f:c9:e4:dd:91:9b:6a:ee:67:7e:83:
         4b:e8:b8:6f:0f:98:0e:d9:b6:59:49:fc:08:36:ac:6d:dc:da:
         c8:55:6f:17:2a:8a:89:de:a0:ad:0f:c2:65:ba:a7:fa:aa:7d:
         fb:94:98:4e:b2:8c:b8:cf:4f:ba:28:d4:29:6f:37:6c:d8:e7:
         d4:7d:ac:63:4a:28:ec:eb:13:d5:a3:96:11:11:c2:00:f0:8c:
         19:3f:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:28 2025 by rpki-client on console.sobornost.net