Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
File:                     D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json)
Hash identifier:          yNpl4MLpzjiQrvVqeGgpNHfXY3m6DxOIozN4k0Q1A3k=
Subject key identifier:   03:4D:D3:66:DE:35:2F:32:D3:2F:D7:50:1D:98:18:6D:A0:F1:A8:6C
Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13
Certificate issuer:       /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13
Certificate serial:       1A759969EF6FD6F1959316DE92FB5CBCFED15B27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
Manifest number:          1D
Signing time:             Fri 25 Apr 2025 23:41:13 +0000
Manifest this update:     Fri 25 Apr 2025 23:36:13 +0000
Manifest next update:     Tue 29 Apr 2025 10:51:13 +0000
Files and hashes:         1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: VA4vZbtiSWHghHrra/m+AYb6lSFOMnkgpMwpTaC5TG4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl
                          rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:75:99:69:ef:6f:d6:f1:95:93:16:de:92:fb:5c:bc:fe:d1:5b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13
        Validity
            Not Before: Apr 25 23:36:13 2025 GMT
            Not After : Apr 29 10:51:13 2025 GMT
        Subject: CN=034DD366DE352F32D32FD7501D98186DA0F1A86C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a2:80:00:25:4f:cc:15:f6:39:a9:5d:f2:06:
                    ab:3e:d2:3b:e6:db:ff:0f:ff:a1:70:81:ff:f0:94:
                    c6:92:ed:68:50:1d:a5:2f:68:6a:d9:d5:68:cc:19:
                    4b:1c:e0:bc:0f:ef:1c:87:93:eb:d0:07:4c:91:08:
                    e0:bf:22:35:95:a5:16:44:42:08:20:a4:a5:5d:4a:
                    35:03:56:d4:0a:78:7d:fc:30:03:cc:97:ca:81:97:
                    1a:b8:e4:78:70:b4:59:f5:0d:7e:31:48:dc:6f:84:
                    bc:34:9a:6d:a5:65:8c:5e:d8:98:61:a2:8f:84:3a:
                    52:ec:c4:5f:69:79:ee:97:c8:65:84:62:2b:35:3c:
                    e7:e4:3d:b7:ec:95:2b:27:be:15:66:6e:e7:f2:72:
                    c6:e7:d5:18:cd:b0:98:01:42:11:ce:1a:dc:59:8b:
                    62:13:f3:96:4d:08:4c:d9:96:8a:c7:30:99:1c:bb:
                    46:c4:93:17:c6:a9:1a:42:39:4b:42:e8:31:bf:48:
                    d5:c7:e7:c5:6f:13:48:48:d8:3c:7e:73:f1:bf:51:
                    df:f7:94:c5:f0:1a:5f:0b:f7:2d:0e:d5:bb:31:ac:
                    3e:5a:d3:63:a9:ec:c9:1a:5e:89:12:1c:80:da:3f:
                    e5:94:8e:6b:8e:f2:35:96:a8:a5:0a:d8:06:9e:4a:
                    38:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4D:D3:66:DE:35:2F:32:D3:2F:D7:50:1D:98:18:6D:A0:F1:A8:6C
            X509v3 Authority Key Identifier:
                keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:80:1a:c8:b5:ca:05:c9:13:0c:a1:c2:7e:d3:40:38:ef:
         57:f3:22:2f:14:dc:cd:67:fb:5d:c6:97:68:18:c5:6b:16:87:
         39:94:7f:02:b9:40:18:33:65:63:37:36:57:91:a3:41:fe:f6:
         68:14:e8:53:d9:0b:b7:f3:30:7e:fd:1d:cc:ea:cb:c7:68:f7:
         00:75:e4:e5:38:f3:a2:c3:ac:c2:40:67:58:8a:ad:e9:d9:aa:
         40:a6:c0:65:0a:af:2b:ed:e4:b1:c1:7f:26:e8:28:38:16:27:
         19:82:36:12:1c:08:90:4d:75:82:4f:45:b1:b7:a9:d3:85:59:
         cb:33:90:8c:1d:8c:c3:c2:52:ca:39:18:14:d4:b9:3a:54:20:
         77:45:ef:60:07:2c:b3:49:77:20:85:1f:a7:e7:5f:fe:9e:5b:
         b0:f6:5f:2a:7a:9e:38:56:e6:ec:22:b1:5c:f0:ac:9e:0a:db:
         9a:21:2a:6b:77:54:7a:f9:01:ae:a4:c9:27:14:bd:8f:e3:36:
         b4:81:a5:24:dd:b0:07:1b:5f:19:e1:2b:c1:a9:90:22:d3:2c:
         17:6f:35:29:55:fc:fa:ab:e1:66:d4:d3:9e:6e:a2:63:4a:c2:
         d4:12:f3:83:c2:97:4f:f7:49:75:b2:32:17:4d:fa:17:f2:9a:
         7f:c7:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:32 2025 by rpki-client on console.sobornost.net