Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          y0yTaBmMdClqEaoZFrXTOpmiX+MQ7aXPF625P/wqRBY=
Subject key identifier:   7C:4D:44:FC:BB:40:BA:7D:42:33:CD:F2:86:C9:A0:15:93:69:5A:4A
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       192E3A428EDEC7F86DE8959B7EA33672526B8B82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          04D8
Signing time:             Fri 25 Apr 2025 17:40:54 +0000
Manifest this update:     Fri 25 Apr 2025 17:35:54 +0000
Manifest next update:     Mon 28 Apr 2025 22:06:54 +0000
Files and hashes:         1: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: JizELHWBc29vv6ZjehlmiLNECzxh6hYttD2vQ3zzH1A=)
                          2: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: EiOpEEWve4ItYjwbIDlrPYKQ63msR1gGrgu6w5qOw4A=)
                          3: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: lQOtdNJdvntWhCn4oNxG5S3GH9Dk0Cvh7IK+W2/tjTY=)
                          4: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=)
                          5: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: 4zfKxec4CW/On9+Q8etMWNevAsjtiZx6NtttZLldtac=)
                          6: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: 9ox32o2qvbcsND5fYvTWnO2uJ4CVwur4EBGsHFdJw7Q=)
                          7: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=)
                          8: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: WxWgRGgAM+ftAg8EQMmcnBlvtc8N+Cba7x40/kmtm2I=)
                          9: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=)
                          10: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: /cOSCLURwMnYRY1LEPKn/FGjfHtiEkHQU6Af0iOYRl4=)
                          11: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2e:3a:42:8e:de:c7:f8:6d:e8:95:9b:7e:a3:36:72:52:6b:8b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: Apr 25 17:35:54 2025 GMT
            Not After : Apr 28 22:06:54 2025 GMT
        Subject: CN=7C4D44FCBB40BA7D4233CDF286C9A01593695A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:7c:d7:a1:9b:35:1e:3d:e6:4b:27:5a:dc:
                    42:0a:1a:2d:13:21:da:1c:7e:46:9a:af:8e:5f:33:
                    3a:1f:c7:8d:84:2e:22:91:84:57:40:09:d8:87:df:
                    fb:22:72:c4:02:c4:01:6d:74:d0:dd:7c:56:ce:d4:
                    b9:81:28:d7:6b:c6:24:8e:82:67:cb:2b:9f:8c:8b:
                    57:88:d4:16:ac:6c:05:a3:77:a5:d7:1e:19:02:11:
                    19:38:87:48:b6:8f:02:d1:f6:81:e8:64:ee:eb:49:
                    6f:79:14:85:55:41:98:0b:af:81:e4:e2:3d:ed:71:
                    e2:fc:69:06:82:8a:5a:b5:f0:93:49:39:de:a5:da:
                    de:4d:74:da:53:4c:7a:f6:55:e5:ae:24:77:ca:ba:
                    3c:62:40:bc:e5:5a:7e:23:77:37:86:7f:5e:93:c5:
                    c4:cf:bd:bf:46:a9:c0:09:70:0a:45:0b:2f:14:fa:
                    50:65:65:75:3b:b2:ee:56:9d:3d:4d:fe:10:88:3e:
                    03:5c:0e:7f:34:e1:47:d7:31:4d:56:54:63:84:d9:
                    1f:d9:e8:cb:75:25:58:83:04:ca:92:d7:b6:fe:d0:
                    20:f3:73:f3:c8:ab:0b:98:5d:b8:0d:73:7d:71:f7:
                    01:c2:97:25:e5:81:b2:21:bf:c2:e1:6c:fc:b4:07:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4D:44:FC:BB:40:BA:7D:42:33:CD:F2:86:C9:A0:15:93:69:5A:4A
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d1:ac:57:00:8f:3f:b6:b7:9a:6c:26:69:01:2b:3f:eb:5c:
         f2:f1:60:41:f5:b1:5d:22:27:9e:ec:9e:c8:40:1d:f5:6a:51:
         38:e1:46:17:f1:35:92:60:20:64:09:68:3b:e6:f4:d8:ea:19:
         e4:37:72:3a:71:c0:8b:cd:2a:9e:c1:c3:8e:9a:b6:65:8f:53:
         68:bc:ec:81:60:49:c7:e0:85:60:a5:de:60:3b:06:cf:c6:16:
         c8:6b:f2:a7:10:30:70:4c:75:15:b5:7e:2d:4c:7f:99:8e:73:
         9e:d7:1b:81:d9:9e:48:f4:e0:f2:a1:32:cf:e4:df:c6:d1:b5:
         28:e0:9d:97:7c:cc:c9:e4:25:90:1c:64:b2:5d:fb:5a:fb:51:
         8c:66:d1:01:07:8f:b2:46:5b:f5:14:ae:30:de:fc:b0:21:08:
         aa:a4:16:93:db:0e:8a:d0:35:10:54:b9:d7:91:2a:a2:f9:19:
         61:7f:1e:f7:8c:81:47:4d:8c:3a:e0:4c:96:1b:80:e3:69:ab:
         ca:e8:60:63:65:57:2c:fe:44:3b:c1:fd:fc:47:a1:19:80:fd:
         78:61:08:e7:89:d0:0e:71:53:41:e0:58:c0:bf:66:95:a9:e6:
         a8:d5:5c:94:e2:38:99:a7:c6:ac:6a:ad:fa:22:9f:ad:2b:ce:
         3c:45:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net