Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
File:                     41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json)
Hash identifier:          I5H7BQuFNoZZfQe3xODJ7kosbpzNiQbUvSSMbk5ESmg=
Subject key identifier:   84:5A:B8:FF:7A:86:CC:64:23:46:08:24:CA:9F:41:F4:A5:3B:F4:61
Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
Certificate issuer:       /CN=41820333252DF92B1DBA238F558CC8D822C768EF
Certificate serial:       56AE92CB5D95063D686D057A36CDFD2A0A6CD603
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
Manifest number:          0165
Signing time:             Sat 26 Apr 2025 14:31:09 +0000
Manifest this update:     Sat 26 Apr 2025 14:26:09 +0000
Manifest next update:     Tue 29 Apr 2025 18:14:09 +0000
Files and hashes:         1: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: FcEn5WQ0z8W62n6IbJ1sKKBxGP0irJKQQGaDbxwL9WE=)
                          2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: eG3L50RlSnDUuOVwkVlYnQebEQc3JXkDObYN4u0w6z8=)
                          3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: Y9d4RL5lwPJKIYYz/S5GmByBdyf8v8c66+665Lm4cNc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl
                          rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 18:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ae:92:cb:5d:95:06:3d:68:6d:05:7a:36:cd:fd:2a:0a:6c:d6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF
        Validity
            Not Before: Apr 26 14:26:09 2025 GMT
            Not After : Apr 29 18:14:09 2025 GMT
        Subject: CN=845AB8FF7A86CC6423460824CA9F41F4A53BF461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:85:94:8d:2e:dc:ff:66:50:0e:9f:37:12:
                    9d:91:07:6a:d8:d8:05:f6:70:33:7c:54:9a:11:c6:
                    c8:ba:22:c9:9b:9e:92:27:80:bc:23:2d:a6:24:6f:
                    c2:07:71:bb:4f:77:d1:38:71:ae:be:97:7e:4f:17:
                    6e:91:89:64:7c:c3:3d:e2:9f:66:f9:b0:b5:be:d0:
                    ea:d6:b1:f9:76:45:74:2b:2f:34:ac:d7:88:bb:76:
                    a1:b5:02:5e:d2:b5:62:34:59:3c:53:d3:60:b4:8a:
                    87:04:39:c4:d3:fa:74:14:38:71:c2:19:74:47:8f:
                    13:68:fe:62:75:bf:9c:51:37:9c:f1:72:3b:21:8b:
                    32:c4:7f:8e:35:a2:25:b5:ab:90:70:5f:64:37:77:
                    a3:16:d9:e3:0c:b6:76:8a:0f:5a:91:55:b6:61:d4:
                    31:6d:6b:0c:c8:96:20:c9:dc:27:79:c5:67:d3:03:
                    7c:1d:f3:71:fd:61:fb:c0:2c:3a:c7:b9:46:90:50:
                    2d:b9:00:89:06:59:1f:ef:e2:9c:28:6c:76:79:00:
                    d5:f3:8b:d6:6b:23:e1:55:54:9c:07:4a:bb:6a:78:
                    7b:57:c9:48:c7:16:fb:29:e9:2b:ab:02:62:5e:c1:
                    97:a9:8d:fc:fe:a9:0d:69:f9:d3:d4:af:74:1c:26:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5A:B8:FF:7A:86:CC:64:23:46:08:24:CA:9F:41:F4:A5:3B:F4:61
            X509v3 Authority Key Identifier:
                keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:22:85:c6:37:8a:1c:d6:8c:89:a3:4a:55:c3:92:5f:37:
         1d:c6:a2:90:01:81:cb:47:e1:1d:98:41:d7:83:92:67:ca:e1:
         0d:f4:f0:ca:80:58:e8:d1:91:cf:62:2b:0a:f8:2d:91:f7:15:
         60:74:5e:fb:03:1d:d2:d7:86:74:75:45:cb:48:45:c8:3a:ad:
         30:b2:4d:7d:71:4f:77:b6:04:db:a7:ff:e7:fc:47:02:8e:c5:
         38:32:35:4d:f1:90:c9:a0:4c:a9:aa:27:28:22:89:c3:83:28:
         8e:75:2b:a3:3e:b1:f2:0d:49:d5:29:50:2d:ef:95:3a:34:fe:
         ed:3f:b2:31:43:af:d3:2f:85:50:aa:0c:4a:27:6b:1b:e1:06:
         69:44:12:29:cf:aa:e5:9c:e1:2c:35:00:e7:94:3e:2f:db:5c:
         7e:ee:74:cd:f9:83:03:ec:f4:90:d6:bb:2d:7f:9a:b8:85:ee:
         69:f1:40:0b:b0:08:60:3f:1b:a3:21:e7:23:ce:37:ee:9d:09:
         e6:49:fc:dd:78:98:c0:22:c7:87:08:45:2b:b0:8e:d2:ec:d7:
         06:50:47:6f:87:e9:a0:f6:fd:63:dd:4a:43:7a:dc:59:64:d2:
         54:39:90:98:9f:12:42:6a:86:3e:a0:2c:87:97:0f:e7:0b:bc:
         66:b7:fa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:53:57 2025 by rpki-client on console.sobornost.net