Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
File:                     41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json)
Hash identifier:          HnXvil5GLiUmR6dO//hLvhYPWvnV1uyvnVdkPpDiFq0=
Subject key identifier:   43:C5:26:2C:72:37:A3:7F:D9:7A:8C:44:9E:3B:C6:34:04:18:89:65
Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86
Certificate issuer:       /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
Certificate serial:       368806CF73A0C0D198C38A92CFC8AB2460EDA816
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
Manifest number:          01BF
Signing time:             Thu 24 Apr 2025 09:12:07 +0000
Manifest this update:     Thu 24 Apr 2025 09:07:07 +0000
Manifest next update:     Sun 27 Apr 2025 13:39:07 +0000
Files and hashes:         1: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: 7EG2+rahwawGY5jfDx/uNk7K14S5PvXqSxrw0AhvBU8=)
                          2: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: q2Yb4yMAQtfwd6naBrfG63XhT4cy5Z0/X6q/WuK9T+Q=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl
                          rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 10:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:88:06:cf:73:a0:c0:d1:98:c3:8a:92:cf:c8:ab:24:60:ed:a8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
        Validity
            Not Before: Apr 24 09:07:07 2025 GMT
            Not After : Apr 27 13:39:07 2025 GMT
        Subject: CN=43C5262C7237A37FD97A8C449E3BC63404188965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:09:c1:1f:3e:8c:fb:e8:e2:90:0d:d2:c9:
                    b5:88:30:0e:7e:05:a5:11:1d:66:cf:1e:41:49:5c:
                    97:2d:c9:1f:21:41:69:93:47:28:e8:40:dc:e5:42:
                    74:21:4f:07:ea:82:74:ed:54:8e:e0:4b:7b:3b:2b:
                    d1:9d:38:64:a0:a6:75:3b:2c:c2:bf:2b:3d:89:de:
                    b9:8b:58:8b:32:d5:2d:5b:00:73:b1:5c:3e:46:54:
                    ad:8a:95:95:be:6f:b9:2d:ba:e8:83:c0:55:9e:26:
                    14:26:aa:52:85:3b:d4:19:76:25:b1:33:87:ac:f6:
                    7f:63:37:0a:df:37:fc:49:99:a6:59:6c:e1:e8:e1:
                    fa:d0:5b:05:63:79:61:46:0b:2e:63:ea:87:c0:64:
                    3d:40:f0:47:78:ed:f7:3c:37:48:e0:d3:64:7c:88:
                    48:27:40:d0:3d:82:1d:ea:b1:e5:3b:18:62:fa:88:
                    c9:bc:3c:42:0c:03:32:0a:10:ef:a8:65:7a:f7:fb:
                    f1:2c:10:00:1f:ad:89:4e:f2:3f:40:ac:d4:f0:74:
                    34:df:47:84:59:b0:c0:2d:de:66:83:3e:4c:db:24:
                    d8:fa:81:d6:93:e5:77:56:24:cc:9d:de:ac:b3:75:
                    33:a2:cb:54:b1:d2:d8:7f:91:90:1d:ef:3b:61:d1:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C5:26:2C:72:37:A3:7F:D9:7A:8C:44:9E:3B:C6:34:04:18:89:65
            X509v3 Authority Key Identifier:
                keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:89:82:f5:fc:27:d4:6b:e5:97:bf:a5:93:14:4b:6a:ce:
         3c:f8:5a:0f:ed:24:86:90:28:86:71:85:af:8b:c6:9d:e2:d7:
         72:80:43:d8:8d:22:9e:b0:72:5c:7b:96:5a:6c:61:ca:c1:be:
         6a:42:32:d0:4c:5f:2f:f0:af:bb:54:6b:86:08:91:90:ba:dc:
         86:0a:03:14:8c:a5:ed:e7:cc:0b:5e:41:58:b0:61:18:cd:2d:
         3f:43:0b:d1:75:b6:64:69:4e:51:ee:34:9a:e8:94:58:a9:90:
         1d:07:c2:6c:43:df:32:87:97:c9:08:88:7e:f3:e4:07:de:90:
         15:6d:8a:25:27:02:a2:35:00:41:1d:d7:e2:2c:7b:10:31:b7:
         c9:d6:05:22:40:71:c9:e6:e4:fd:6e:9c:a1:00:25:6e:fa:25:
         e9:5a:50:94:88:91:f5:0f:20:f7:0e:37:00:7a:41:60:4f:6f:
         6a:01:fb:1c:fd:80:68:78:c3:0f:a5:1a:19:a2:91:e5:cd:88:
         53:fe:95:b8:d9:ec:33:80:e0:d2:94:41:27:e0:38:1e:13:df:
         d8:a7:d9:18:76:52:68:c2:ad:f9:7c:47:df:84:c4:04:76:a3:
         2c:ed:13:48:2d:f5:07:7d:b3:5f:bc:15:14:bc:76:37:a3:72:
         0b:61:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net