Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
File:                     4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json)
Hash identifier:          kD3wiSRX1er2WsQglW4a9V+j/a8bmVZYqZSCdn907+U=
Subject key identifier:   35:D2:EE:EA:CF:9C:43:86:EF:52:29:5C:56:33:1F:D4:22:7B:B7:61
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Certificate issuer:       /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial:       045F19C8CEA054688473478E3D8F1CA88EA96E5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
Manifest number:          04CA
Signing time:             Thu 24 Apr 2025 20:41:06 +0000
Manifest this update:     Thu 24 Apr 2025 20:36:06 +0000
Manifest next update:     Sun 27 Apr 2025 21:54:06 +0000
Files and hashes:         1: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: TKlrYYxdW4d0W7hA0lV/DSzBaApabiKYJpgjro7Ns1Y=)
                          2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=)
                          3: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=)
                          4: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: TQ9YEujxuYGPWo0DI5K0ju28ILQHMq7rccwpCR1K65o=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
                          rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5f:19:c8:ce:a0:54:68:84:73:47:8e:3d:8f:1c:a8:8e:a9:6e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
        Validity
            Not Before: Apr 24 20:36:06 2025 GMT
            Not After : Apr 27 21:54:06 2025 GMT
        Subject: CN=35D2EEEACF9C4386EF52295C56331FD4227BB761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:e6:db:e4:30:8d:d9:b6:3f:fe:ee:71:62:
                    ad:01:11:49:fc:ac:87:96:aa:8b:14:42:97:4b:60:
                    0c:43:94:73:66:2a:e9:bb:fd:7d:a7:ee:77:a8:0e:
                    1e:1b:b1:0b:59:da:4c:5a:e1:31:f7:73:61:13:2e:
                    f4:95:27:7a:78:e2:61:64:9b:5b:a2:95:2a:83:c4:
                    8d:40:59:42:84:61:05:40:62:20:7b:4e:9b:26:5d:
                    22:83:90:07:d7:8b:ea:f7:fe:ef:44:d7:d4:a7:e9:
                    96:8e:23:6f:ef:0e:71:df:be:89:18:82:b8:d9:14:
                    46:93:96:5a:83:ad:bb:93:02:d5:d1:ab:8f:ef:15:
                    b8:8c:f5:9b:7d:f6:21:0b:1f:7d:e5:2f:40:8e:5e:
                    2c:e3:c7:21:3b:15:60:6d:e6:21:da:46:af:b8:13:
                    1c:ad:e5:d5:f6:1d:f5:1f:7e:ec:00:8d:bb:57:52:
                    d0:2a:e0:69:c9:fe:72:a0:c0:0f:b2:53:56:7f:b1:
                    11:1f:25:b7:8d:c2:5e:93:74:d2:2a:09:30:18:3b:
                    1c:a1:85:1b:1f:af:50:06:8f:a5:bb:c1:80:74:1f:
                    9d:d8:d0:49:3a:18:f8:7a:82:aa:9d:a4:d6:7c:74:
                    e8:79:13:42:2c:d7:3f:60:c1:d2:9e:49:7d:96:fe:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:EE:EA:CF:9C:43:86:EF:52:29:5C:56:33:1F:D4:22:7B:B7:61
            X509v3 Authority Key Identifier:
                keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1e:88:65:3b:72:8d:ac:0d:ab:d4:f4:46:db:b5:cc:36:e4:
         78:a0:05:5b:52:69:5e:d1:b2:f3:89:d6:9a:a1:b0:70:3c:7f:
         f2:d4:d3:80:01:86:52:0e:8f:3d:bf:23:af:f6:88:53:0c:23:
         31:ad:5c:83:5f:de:10:93:ac:36:a6:ce:dc:16:74:fd:25:d5:
         ca:eb:4f:d0:06:68:c0:f4:d8:d3:21:5d:dd:b5:ce:24:18:68:
         81:cb:c0:d8:78:37:71:d2:75:41:bb:fc:46:9b:ea:cc:6a:ab:
         87:df:1e:d3:f0:39:cd:b5:d1:ac:b4:c9:fd:46:2a:51:78:b4:
         ec:5a:6f:cc:31:e9:da:cd:da:ad:02:88:ff:2a:89:ec:06:44:
         2d:67:fa:58:d8:a9:2b:26:97:63:fa:04:b6:ba:9d:0d:c3:32:
         46:02:30:8e:11:8e:bc:b3:e8:84:c1:b8:2e:46:97:f0:b1:7c:
         8a:77:cf:5d:7f:a6:38:8b:e1:d6:93:48:06:0f:c7:47:de:77:
         b9:7c:85:fa:15:c2:96:76:4c:4a:50:2f:ef:98:4e:83:5c:90:
         45:98:d9:77:86:9b:02:b9:58:29:ea:9c:20:2a:62:91:da:13:
         3a:0c:9d:8c:db:9e:69:cf:ae:b2:6c:e9:f6:65:d4:b0:27:f2:
         91:95:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net