Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
File:                     DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json)
Hash identifier:          NRJwtjjtjKYjCQgOj/FXAiUzKwdPwIyn5yd75n7oXww=
Subject key identifier:   1F:E9:76:85:5B:CF:CE:4C:76:84:AF:71:FD:B6:C4:9F:6E:37:18:C8
Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF
Certificate issuer:       /CN=DE4325727D17555F6DABCC72788E361C741D47CF
Certificate serial:       3CDF0E4EA3A8C317F9B6D27F69FA44167BF55DD1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
Manifest number:          018A
Signing time:             Fri 25 Apr 2025 22:40:03 +0000
Manifest this update:     Fri 25 Apr 2025 22:35:03 +0000
Manifest next update:     Tue 29 Apr 2025 07:01:03 +0000
Files and hashes:         1: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=)
                          2: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=)
                          3: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=)
                          4: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: 7nqc2lxCKg8L0D5ftRiGvZQ67Z7zYLwHW6IM3haW3Bg=)
                          5: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl
                          rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:df:0e:4e:a3:a8:c3:17:f9:b6:d2:7f:69:fa:44:16:7b:f5:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF
        Validity
            Not Before: Apr 25 22:35:03 2025 GMT
            Not After : Apr 29 07:01:03 2025 GMT
        Subject: CN=1FE976855BCFCE4C7684AF71FDB6C49F6E3718C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:66:30:da:d9:c2:a4:55:b9:01:0b:bf:2f:
                    1d:fd:15:e8:90:ca:f4:d1:4a:6c:ae:09:3e:24:99:
                    b8:9c:64:3d:ff:e6:58:a0:f7:80:f7:82:9a:2a:82:
                    c4:5a:ed:00:3b:c3:30:e5:d0:ef:84:93:5a:04:13:
                    51:65:68:83:80:68:d2:95:ca:df:85:23:48:8d:d1:
                    d9:5a:3a:e6:52:fc:a0:65:a0:9d:c5:07:77:93:1f:
                    e3:22:41:0c:8d:51:09:f1:ea:9d:cc:1a:20:0d:71:
                    00:91:1a:0a:a8:1a:ad:ed:1e:a1:03:d2:5e:b2:d1:
                    eb:42:1e:f9:8d:7c:72:40:38:31:9b:0b:51:eb:a8:
                    88:19:36:52:0a:e2:ad:5f:25:60:74:3a:62:0b:cd:
                    91:46:3c:90:91:ea:05:2c:be:69:0e:cd:03:f3:44:
                    ce:72:07:4e:49:25:72:45:0b:37:4c:81:18:d0:c5:
                    da:7d:1b:1b:cc:e7:61:14:86:8d:dd:d7:cf:98:e1:
                    ed:5a:c3:e3:c3:26:99:87:e5:95:8e:83:2e:77:93:
                    d6:1d:ad:99:2e:2f:b2:49:ec:18:1f:05:c2:a5:58:
                    7a:4e:c3:da:c5:2d:aa:38:06:f9:80:3a:36:95:13:
                    e1:97:69:55:3d:f4:7b:c0:b2:1e:48:8a:ed:9b:17:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:76:85:5B:CF:CE:4C:76:84:AF:71:FD:B6:C4:9F:6E:37:18:C8
            X509v3 Authority Key Identifier:
                keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5b:8e:33:23:89:d7:b2:92:f9:f4:b7:a7:6a:af:c9:1d:03:
         2f:78:41:09:ed:f2:95:33:44:2f:75:74:f2:d6:98:fd:d4:97:
         52:2b:31:f4:bf:a3:36:9d:ab:81:3c:d7:a1:15:51:23:40:c6:
         f1:cc:ae:75:15:a0:f2:9f:fa:f0:78:78:00:3e:67:98:6e:b9:
         a7:ba:f7:3d:a3:a2:30:03:b8:f2:3f:53:d7:f8:48:d2:8b:ac:
         6c:f9:e8:9c:f3:ce:86:23:93:a9:46:5b:0c:fe:92:3c:da:b0:
         e8:96:37:73:71:f1:d4:c8:bb:c6:11:b6:db:11:9a:ca:8d:b6:
         95:2f:19:eb:aa:e9:a4:de:48:1e:7a:f5:4e:65:42:15:52:7c:
         05:9e:fb:ca:8a:80:17:a8:b5:3b:52:5b:59:ce:d7:00:57:57:
         60:96:43:07:c3:a1:e2:68:94:6e:fd:e2:08:5e:df:ac:6a:3d:
         5a:0b:95:8a:a2:ca:60:1a:84:aa:a3:7c:14:11:99:3f:d7:f0:
         ca:14:d1:ab:b2:55:74:2c:a3:f3:9c:28:82:3c:5f:2c:c9:62:
         9d:c0:2c:39:87:94:1c:e7:61:64:86:df:42:b4:16:46:ad:60:
         ff:3a:16:7f:26:86:d3:99:5d:7c:a7:67:7e:e5:2e:8d:98:73:
         84:88:a6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:32 2025 by rpki-client on console.sobornost.net