Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
File:                     1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json)
Hash identifier:          wcyEP/lB+qLIdu5pNcpaDIOPPN4ItxJrRj1oREdI5Qo=
Subject key identifier:   68:9E:24:A9:5F:68:B0:15:9A:58:F8:26:4C:99:20:04:EE:33:86:7F
Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
Certificate issuer:       /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Certificate serial:       0E59147873D5CC131B6BACCFF370E38CE70F9583
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
Manifest number:          01D4
Signing time:             Wed 23 Apr 2025 23:30:37 +0000
Manifest this update:     Wed 23 Apr 2025 23:25:37 +0000
Manifest next update:     Sun 27 Apr 2025 09:12:37 +0000
Files and hashes:         1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=)
                          2: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: Dx4ZG4ZVs8yr8zUbdW9STWTd1G/4ZXJ0MZ/5scm340s=)
                          3: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: MH4tMh/bjSiTVwxtUrrU8CNsu1hsXrl0cABIA1tFw48=)
                          4: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: vZ+6niMdV+dUYnofXQpH/AKII9AzCOM9QtbvbNiD8Wk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
                          rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:59:14:78:73:d5:cc:13:1b:6b:ac:cf:f3:70:e3:8c:e7:0f:95:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
        Validity
            Not Before: Apr 23 23:25:37 2025 GMT
            Not After : Apr 27 09:12:37 2025 GMT
        Subject: CN=689E24A95F68B0159A58F8264C992004EE33867F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:e0:7f:61:7a:cc:81:7b:aa:b4:25:ea:d2:
                    6d:fa:8e:d5:e7:06:a9:3e:43:11:2b:17:f5:e6:a8:
                    8e:81:3a:06:40:33:19:98:9a:16:79:67:79:c8:ca:
                    e3:cb:fc:3c:57:3a:01:30:9a:18:df:bc:8d:e9:e6:
                    a4:58:8e:d2:56:fa:d0:a9:f7:10:8b:27:74:10:7b:
                    d4:4f:72:35:fb:af:c2:73:2d:ac:07:b2:f9:06:79:
                    23:c1:17:ed:dd:3c:31:35:92:1c:87:e5:c8:26:a1:
                    5e:a2:c4:44:7f:00:ea:e4:e8:fe:95:d6:24:b6:94:
                    a1:81:0d:97:5c:2c:ca:40:6d:54:f3:0c:67:b7:05:
                    48:5e:0b:5d:67:93:b5:e1:2e:f7:9d:bb:8d:25:40:
                    93:a1:6d:0f:b1:8d:59:e4:88:59:80:43:52:94:02:
                    f8:a0:ef:f2:dc:d7:82:5b:4e:4a:92:f5:ae:de:0f:
                    6a:a8:98:bc:d0:60:96:64:7f:8b:64:f3:ac:55:4f:
                    1c:a0:ec:52:8d:38:b7:35:32:d3:bd:5d:48:51:b7:
                    61:92:56:39:9c:9e:17:77:48:4c:7f:61:cd:aa:4d:
                    6e:b8:65:01:a2:5f:c0:e4:8d:88:f4:78:07:a5:2c:
                    c8:1d:26:d7:14:ef:82:f1:5b:41:32:ad:2d:f3:5f:
                    83:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:24:A9:5F:68:B0:15:9A:58:F8:26:4C:99:20:04:EE:33:86:7F
            X509v3 Authority Key Identifier:
                keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3f:97:03:43:ec:fe:36:83:33:ff:5b:9a:45:95:85:a1:aa:
         03:65:0d:ce:cb:c9:89:75:59:8c:aa:d1:9f:c6:f9:b5:bb:ff:
         b6:f6:65:aa:2b:93:03:72:12:b4:d2:e0:c0:32:db:51:58:e9:
         a2:37:e9:14:89:50:32:0a:d2:24:4e:ef:a3:b9:00:a5:e1:43:
         32:73:ef:29:98:d6:af:e5:ed:de:0e:f9:62:00:bb:fa:ce:23:
         ad:23:ad:e1:7e:7a:60:10:3e:bc:2b:32:b5:2b:bb:ff:e4:bb:
         37:09:00:c6:f6:ff:f8:02:cf:dd:31:8a:47:bf:01:08:e8:cf:
         d7:69:e2:1c:e4:87:e9:e1:fa:86:c6:a1:64:45:60:52:a7:d3:
         3f:96:ed:49:76:8a:b3:6f:4f:6d:ee:cb:4f:d2:d4:d5:9a:44:
         be:73:c0:3d:17:24:b6:7f:de:5b:43:ad:bc:55:66:dc:ca:b2:
         7b:59:12:40:89:d2:58:a6:24:25:1f:22:17:c0:c0:48:34:94:
         25:c9:15:8b:dd:55:23:75:73:2a:58:36:29:47:70:e8:ea:03:
         94:af:2b:d5:84:05:97:c2:81:60:d0:35:53:df:37:bf:68:5e:
         d9:e8:43:ea:01:ba:90:29:79:6f:8f:3f:37:16:2c:01:1c:5b:
         47:81:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net