Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
File:                     9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json)
Hash identifier:          WDO/8/QVYE/U4Vy+JoLRkg9PHTbh4aVUvbZexRAYxlY=
Subject key identifier:   52:0A:6D:97:14:C8:BB:DB:6B:8D:6D:C4:DE:C0:5A:2C:C2:78:D3:E8
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Certificate issuer:       /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial:       2AB28F3A4B7B857C0432599FA14A29776F2B3CD9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
Manifest number:          033D
Signing time:             Thu 24 Apr 2025 02:00:52 +0000
Manifest this update:     Thu 24 Apr 2025 01:55:52 +0000
Manifest next update:     Sun 27 Apr 2025 05:22:52 +0000
Files and hashes:         1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: Sig0nFMfO5RkDUk8FgUIatppAOnDZWpc4k1u9t/hLqU=)
                          2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=)
                          3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
                          rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 05:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b2:8f:3a:4b:7b:85:7c:04:32:59:9f:a1:4a:29:77:6f:2b:3c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
        Validity
            Not Before: Apr 24 01:55:52 2025 GMT
            Not After : Apr 27 05:22:52 2025 GMT
        Subject: CN=520A6D9714C8BBDB6B8D6DC4DEC05A2CC278D3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:05:d5:7e:d4:82:58:e0:ce:a4:6e:e0:a7:
                    b0:24:51:8f:f4:23:37:ad:6b:7c:ac:ab:c3:a6:07:
                    39:e5:1e:38:b9:8c:f3:11:80:71:3c:d6:05:85:9b:
                    60:bf:c0:66:8d:ae:ed:a9:a7:9a:16:9b:3a:94:a4:
                    8a:87:c4:b4:1e:e5:0c:2a:fd:4c:b9:34:f0:0b:c4:
                    57:e6:88:59:d3:65:db:21:67:92:6c:9b:89:a2:1a:
                    ad:ee:1f:b7:f2:c6:ca:52:bf:b5:cc:0b:83:d6:bc:
                    72:09:be:8d:6f:d4:e0:af:c7:72:8f:09:82:d5:42:
                    c1:cc:df:e3:7d:4e:44:32:e7:12:ae:ac:08:e1:c9:
                    51:d1:87:50:5a:ca:bf:bc:a0:87:dd:ca:ef:08:c0:
                    b7:51:62:58:1f:34:16:be:50:3d:94:cd:1b:ef:da:
                    78:64:eb:42:ea:3b:61:a4:42:7a:e9:25:cd:66:6f:
                    b0:8f:a3:cd:db:5d:dd:63:50:69:c0:20:4a:19:10:
                    db:09:3f:60:e5:8c:b3:fa:03:d3:3d:c1:91:38:27:
                    d3:bf:ef:f2:9c:0e:82:81:39:02:83:1b:e5:62:44:
                    7e:7b:7c:45:cb:36:45:d3:84:21:7b:56:8b:50:6b:
                    1c:6a:0b:55:0c:25:30:c7:42:3e:3c:c9:dd:3d:9d:
                    db:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:6D:97:14:C8:BB:DB:6B:8D:6D:C4:DE:C0:5A:2C:C2:78:D3:E8
            X509v3 Authority Key Identifier:
                keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:c9:2a:8c:87:49:45:d9:42:f7:61:35:cf:24:f7:88:ae:
         cf:9c:f7:1a:c0:e6:75:88:0e:51:54:01:9a:ce:e6:98:40:b7:
         2d:c3:88:e6:7a:26:05:cb:3e:3d:21:29:1d:ea:6f:fb:ea:54:
         5c:bf:63:df:69:01:78:58:11:7a:1e:95:f8:72:2d:f2:1f:89:
         76:27:47:28:9b:ae:bf:cb:ec:39:e2:23:95:70:97:0c:96:6e:
         d5:e5:01:93:7b:c6:28:40:a8:18:8a:44:48:56:37:44:c6:69:
         a3:87:32:14:5b:1e:0e:05:2e:2a:e3:4c:62:f6:92:94:f5:3e:
         9f:56:94:93:98:54:21:ca:5f:47:18:31:29:55:4c:54:af:e6:
         06:76:12:fd:45:d7:79:f0:b0:6d:18:10:83:15:f6:a4:7e:30:
         b0:05:10:57:a4:b9:02:41:70:ef:ff:19:78:58:aa:f1:a8:20:
         2d:0a:2c:af:9d:a4:9e:ce:bb:e8:6e:4f:c4:23:55:25:37:d6:
         24:f6:64:8f:2d:9a:e8:2d:61:96:eb:aa:5c:64:97:5b:03:35:
         c7:26:5b:71:eb:b5:12:63:0c:c2:ee:93:9c:59:84:ae:4e:8a:
         59:d3:42:0b:a0:03:0c:45:ad:49:5d:f8:05:b8:e2:e5:fa:b0:
         79:24:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net