Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft
File:                     D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json)
Hash identifier:          4kRaClJptm5POsxJC84TLTZPDixS8T8951W9Zx3ni4g=
Subject key identifier:   82:9C:AC:21:E6:62:EC:CB:38:7B:71:C5:40:AC:84:6F:A6:7C:AE:26
Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14
Certificate issuer:       /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214
Certificate serial:       2BF7BBEEAE485A9B971C026E531118B15B5E62AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft
Manifest number:          7C
Signing time:             Fri 25 Apr 2025 05:51:51 +0000
Manifest this update:     Fri 25 Apr 2025 05:46:51 +0000
Manifest next update:     Mon 28 Apr 2025 08:14:51 +0000
Files and hashes:         1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: 4nJcHAArTK60KcNueLt00Uskm8Vczw7OaTeMo8yA3OI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl
                          rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f7:bb:ee:ae:48:5a:9b:97:1c:02:6e:53:11:18:b1:5b:5e:62:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214
        Validity
            Not Before: Apr 25 05:46:51 2025 GMT
            Not After : Apr 28 08:14:51 2025 GMT
        Subject: CN=829CAC21E662ECCB387B71C540AC846FA67CAE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:a7:f5:c4:66:0b:48:9e:3e:c4:8e:2e:45:
                    81:81:ca:cf:fc:6b:88:63:c1:7c:36:db:4b:f5:55:
                    74:6d:30:26:38:8d:55:c5:5f:2a:82:24:44:c0:3e:
                    22:c4:40:61:ed:24:b0:14:6f:b8:c9:36:b0:9e:72:
                    f6:7b:70:e8:1c:44:43:09:60:33:77:3d:c3:b8:13:
                    89:ef:3b:82:74:dc:28:06:ea:4c:c8:bc:d4:f6:93:
                    83:1e:82:17:cd:73:04:7d:0f:fa:7b:2f:8a:8b:83:
                    b5:ed:65:ab:bb:4c:78:52:e9:63:d4:35:b9:7b:88:
                    ea:90:46:7d:7b:d0:54:0a:8a:b8:96:6b:df:1e:3e:
                    e7:7f:c7:ac:cc:da:2d:d5:58:1c:34:1c:8c:54:ec:
                    b5:fa:22:fc:32:a7:ad:0e:dd:3c:be:07:51:18:09:
                    b3:bc:19:9c:29:32:cd:56:b4:60:6d:05:85:66:ae:
                    32:81:b1:cf:9e:df:28:a8:9a:53:5b:a9:25:03:ab:
                    bc:d8:fb:51:95:b0:7b:12:8a:cc:c9:78:ff:1a:7e:
                    b6:e7:fb:76:06:c6:71:bf:f3:40:a6:21:ab:99:32:
                    e9:b6:ce:09:a3:ed:10:1a:a6:0a:d5:55:69:c3:bd:
                    5d:ed:6d:62:e4:d4:63:57:2e:5e:20:aa:6a:56:3a:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9C:AC:21:E6:62:EC:CB:38:7B:71:C5:40:AC:84:6F:A6:7C:AE:26
            X509v3 Authority Key Identifier:
                keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:c1:0e:ea:85:4c:6e:f6:65:73:30:f9:2a:2c:c6:62:61:
         aa:e6:f9:ac:b4:df:ac:39:3b:37:84:27:6f:f4:89:17:09:82:
         d2:5c:6f:ba:bb:f2:9a:f1:95:6f:13:c9:9a:04:3c:af:c2:bf:
         cf:97:7b:e0:19:0e:dc:8a:1c:9a:23:4e:92:25:6f:c4:3d:f0:
         7b:70:3e:32:a3:ce:a1:ca:80:bc:b3:d2:56:78:b2:9f:89:a3:
         ab:f8:75:7c:af:dd:c0:65:29:96:3b:a7:4c:fe:15:10:0e:18:
         af:31:83:dd:a3:5f:5e:32:e9:d2:a8:56:22:7c:be:6d:38:3e:
         18:d6:29:9d:d5:d2:b4:89:be:16:16:cf:c3:b4:c0:2d:92:4d:
         17:94:ac:22:81:59:66:43:2d:98:67:e3:0d:9b:61:a7:f1:27:
         a1:fa:aa:d9:3c:64:4d:4b:8d:b8:2b:0c:ea:a4:4d:6b:5f:28:
         f4:66:70:34:b1:92:ec:bb:72:6a:1f:44:91:73:5b:a3:8c:8b:
         7d:17:d2:26:f2:cf:3a:a9:8f:29:c8:41:08:e9:7e:c2:66:86:
         14:9b:55:ad:28:e2:fb:57:f6:e7:a1:25:77:ec:af:f8:1d:ab:
         a9:37:f3:26:76:16:a8:34:74:57:e1:9e:42:85:a2:c4:62:1e:
         2b:d7:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net