Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
File:                     132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json)
Hash identifier:          h8ulffkgQfLlZbVE74lE6KVxeHP9M4cemwsM6vw9iWc=
Subject key identifier:   3A:62:FF:AA:44:30:8B:37:11:93:37:35:B9:12:63:7D:56:A0:F4:E8
Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10
Certificate issuer:       /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
Certificate serial:       58C13D2C5454DC425E974E96A1378A259811DD86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
Manifest number:          01AF
Signing time:             Thu 24 Apr 2025 18:00:59 +0000
Manifest this update:     Thu 24 Apr 2025 17:55:59 +0000
Manifest next update:     Sun 27 Apr 2025 20:07:59 +0000
Files and hashes:         1: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: Ekl0FrcYaGWxYw7IgCiFXv5CngMgEcsPhMAedshOar0=)
                          2: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: TsbQSh0EleeESQUK/usKxqoHHOIBh1gp9BKJgqAFN50=)
                          3: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: yqVByWoqWaGQSJdRTT1pFtq4po68gHdBaNFSAwsiI5w=)
                          4: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: A6qaCFKyI8dUr1nO6FquVRGin/CswiRL6mnLkqKByNE=)
                          5: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: uI8UCvH3U4LliCexGqC//eVDVZvX3ux4xZSROFcXGxI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl
                          rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c1:3d:2c:54:54:dc:42:5e:97:4e:96:a1:37:8a:25:98:11:dd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
        Validity
            Not Before: Apr 24 17:55:59 2025 GMT
            Not After : Apr 27 20:07:59 2025 GMT
        Subject: CN=3A62FFAA44308B3711933735B912637D56A0F4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:4e:cd:a6:68:7f:bb:84:ac:51:00:03:00:
                    ba:9f:e0:88:f2:95:0f:0a:4e:9f:f8:43:11:dd:1b:
                    6c:b6:ff:63:b6:d1:ac:8d:d0:5d:ac:61:a2:e9:06:
                    e3:3f:61:49:39:93:a1:60:fc:80:5a:12:84:ca:f2:
                    71:23:24:02:ee:d1:b2:0e:46:c0:ee:da:0b:68:1e:
                    30:c9:56:99:56:9f:84:23:4f:f2:ba:a6:06:3e:14:
                    f9:dc:50:a8:f8:74:eb:1d:a5:31:ad:87:0e:ad:c3:
                    2a:3f:30:d1:7f:12:71:54:5c:d1:5b:0d:5f:f1:ea:
                    71:90:b2:b8:07:8f:bc:00:fa:42:b4:39:2e:bc:71:
                    c7:07:d0:05:f3:0d:f0:20:7e:6b:82:14:64:8c:47:
                    55:98:57:8d:1f:e5:69:4c:c2:29:08:21:40:7e:84:
                    61:ca:26:b8:b5:36:5c:62:0e:4e:1f:9f:c4:47:b3:
                    4a:50:33:9d:36:1b:19:5f:0e:38:5f:de:9c:3b:f2:
                    eb:cf:56:cc:c7:c0:cc:51:97:49:de:fa:b3:48:19:
                    e5:fb:ba:df:6d:c7:25:2c:ba:3d:f6:e8:a9:a9:74:
                    e2:df:ff:3a:ff:1c:c8:e9:cf:e4:55:a3:8a:ee:5b:
                    7f:c5:2c:77:5a:6e:d2:01:66:20:01:95:90:dd:0a:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:FF:AA:44:30:8B:37:11:93:37:35:B9:12:63:7D:56:A0:F4:E8
            X509v3 Authority Key Identifier:
                keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a9:57:81:4e:9b:51:bf:d9:cb:36:ed:dd:9b:66:10:58:00:
         e8:68:62:44:cd:b3:9a:8e:41:94:c9:8a:9c:9b:d9:ef:be:a9:
         f1:17:4f:c1:02:ce:47:03:99:9b:40:65:d6:f0:9f:f3:46:73:
         1c:3d:cf:a6:35:bd:a6:9f:97:82:e7:f4:28:6d:0f:00:1c:50:
         4a:84:b3:3c:0c:33:6c:db:18:91:50:d9:b8:84:09:57:8f:97:
         bf:80:2f:57:52:b2:26:91:b7:95:e7:09:dd:c3:d8:ab:c6:57:
         38:2c:1a:af:98:a2:4c:06:a2:c7:ae:bf:8b:ed:9f:4c:1b:63:
         96:5f:06:c9:4e:1c:26:13:0c:ba:7f:39:53:0f:43:c4:46:4b:
         dd:39:ae:ff:87:62:69:0c:31:0e:0e:5c:d6:b5:dd:8d:bf:7b:
         a5:98:93:aa:09:47:0b:05:bf:7c:5c:5d:b0:2a:71:dc:e1:98:
         07:0e:10:3c:b7:a2:60:ac:8c:f3:3e:47:c8:6b:cd:3c:d8:a8:
         80:8b:e2:81:a7:82:c9:3a:cb:8d:19:ec:2a:7c:1d:c1:fe:4c:
         cd:42:44:1c:12:c9:22:e3:1b:dc:02:ce:27:8d:53:e7:a6:b5:
         9a:ed:8b:84:5f:ff:02:7f:5f:55:d4:95:f0:74:b5:22:21:18:
         b6:b4:bb:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWME9LFRU3EJel06WoTeKJZgR3YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz
OEQwNDQxMDAeFw0yNTA0MjQxNzU1NTlaFw0yNTA0MjcyMDA3NTlaMDMxMTAvBgNV
BAMTKDNBNjJGRkFBNDQzMDhCMzcxMTkzMzczNUI5MTI2MzdENTZBMEY0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbEE7Npmh/u4SsUQADALqf4Ijy
lQ8KTp/4QxHdG2y2/2O20ayN0F2sYaLpBuM/YUk5k6Fg/IBaEoTK8nEjJALu0bIO
RsDu2gtoHjDJVplWn4QjT/K6pgY+FPncUKj4dOsdpTGthw6twyo/MNF/EnFUXNFb
DV/x6nGQsrgHj7wA+kK0OS68cccH0AXzDfAgfmuCFGSMR1WYV40f5WlMwikIIUB+
hGHKJri1NlxiDk4fn8RHs0pQM502GxlfDjhf3pw78uvPVszHwMxRl0ne+rNIGeX7
ut9txyUsuj326KmpdOLf/zr/HMjpz+RVo4ruW3/FLHdabtIBZiABlZDdCvFBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOmL/qkQwizcRkzc1uRJjfVag9OgwHwYDVR0j
BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5
RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw
NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4
YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz
M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAapV4FOm1G/2cs27d2bZhBYAOhoYkTNs5qO
QZTJipyb2e++qfEXT8ECzkcDmZtAZdbwn/NGcxw9z6Y1vaafl4Ln9ChtDwAcUEqE
szwMM2zbGJFQ2biECVePl7+AL1dSsiaRt5XnCd3D2KvGVzgsGq+YokwGoseuv4vt
n0wbY5ZfBslOHCYTDLp/OVMPQ8RGS905rv+HYmkMMQ4OXNa13Y2/e6WYk6oJRwsF
v3xcXbAqcdzhmAcOEDy3omCsjPM+R8hrzTzYqICL4oGngsk6y40Z7Cp8HcH+TM1C
RBwSySLjG9wCzieNU+emtZrti4Rf/wJ/X1XUlfB0tSIhGLa0uy4=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net