Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft
File:                     4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json)
Hash identifier:          3ZO4QUUuVCbJMabeqsD7tBGX1qUfOc1C7P4ft9bQyqU=
Subject key identifier:   79:42:14:72:25:81:23:54:9B:4F:96:41:36:32:29:A2:E8:CF:D6:05
Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
Certificate issuer:       /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Certificate serial:       591ED607FE9047B341660AC295A89E04D7486B90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft
Manifest number:          04D3
Signing time:             Tue 22 Apr 2025 18:00:01 +0000
Manifest this update:     Tue 22 Apr 2025 17:55:01 +0000
Manifest next update:     Sat 26 Apr 2025 04:46:01 +0000
Files and hashes:         1: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: 8llNfwrUTFXUaOZxOG2FdVdGooONQqY0triO7boP8ZE=)
                          2: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: LvR9+VDLSikP//Vh/PJHaya9q/IUH0YPVv4fYsGY0jY=)
                          3: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: RbezRzshmathyV4EoiQ/5deOypXsD7H6MYLkfw1/pRw=)
                          4: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: KvTsgODxSTYXSwM09nr1mlGXAPY3uRhzMZlaVsc+OC4=)
                          5: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: y8ADkM9INdo4B5YpCY3N+ofggmxgoMYRUDnTX9TJFJg=)
                          6: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: ZMeuRsHtVSwXmTeOlP2EBAn6yOUfUCueHpz1hHvcg+E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl
                          rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 23:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1e:d6:07:fe:90:47:b3:41:66:0a:c2:95:a8:9e:04:d7:48:6b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
        Validity
            Not Before: Apr 22 17:55:01 2025 GMT
            Not After : Apr 26 04:46:01 2025 GMT
        Subject: CN=79421472258123549B4F9641363229A2E8CFD605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:e7:d7:16:ab:a2:b4:4d:b0:ac:2e:c7:34:
                    45:7e:e0:b6:a0:b2:b0:90:e8:27:ed:37:58:bc:53:
                    be:62:ef:a2:43:01:1e:c6:ca:0e:db:b3:20:81:c9:
                    af:b6:a6:90:76:f6:54:80:37:32:e5:5d:f4:df:07:
                    e3:63:5f:7f:61:74:72:aa:4b:cd:23:1d:e6:bd:6a:
                    e2:86:fc:a6:57:4f:ad:0c:21:c7:be:5f:9d:11:50:
                    ab:85:79:4a:e8:51:22:a4:0f:a1:77:80:53:7d:fa:
                    82:70:34:92:10:cb:29:39:9c:1d:07:ce:44:85:4b:
                    d8:92:17:f9:ba:eb:e9:f3:99:6a:0a:8d:cf:89:fa:
                    ff:97:d9:d5:ef:bb:f1:c8:06:5a:4d:8d:78:5e:38:
                    21:3a:c3:54:0a:be:0b:0b:b5:27:52:6c:06:ff:03:
                    5f:7c:fb:e1:4d:35:b3:c1:79:18:85:c5:0f:cd:90:
                    67:18:27:aa:05:b3:8d:49:ab:9e:2a:ba:77:db:ac:
                    2d:1c:24:a2:21:85:61:75:aa:5d:63:90:e9:3c:2d:
                    d7:81:ad:57:80:92:93:af:7e:b6:bb:ea:d1:96:91:
                    a0:a7:85:d1:cb:c3:cd:99:36:92:80:fb:bc:c7:2f:
                    c2:ae:1c:a9:16:f2:f0:7a:0c:c6:b5:47:e5:46:d5:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:14:72:25:81:23:54:9B:4F:96:41:36:32:29:A2:E8:CF:D6:05
            X509v3 Authority Key Identifier:
                keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:30:98:1e:47:27:d4:f2:63:13:97:bc:5e:04:cc:bf:06:de:
         24:f4:2e:e7:9b:1f:7b:97:5d:e2:35:55:dd:ad:e6:79:08:4c:
         c8:71:16:6b:98:35:a3:f4:5c:7d:63:94:aa:16:00:a3:05:07:
         7d:a2:5c:62:5e:bd:02:35:68:06:60:7c:82:fb:5d:af:8f:bf:
         d5:dd:d6:f5:c8:31:39:ab:36:e5:c8:17:8f:53:0a:8e:da:c4:
         f6:8e:79:99:0d:b0:2a:26:49:a0:85:70:30:0d:cb:1a:c2:e6:
         e7:7f:1f:ea:c8:6b:ee:0c:fe:84:30:9d:47:2c:f3:e3:86:e0:
         6b:df:a1:99:3f:7f:07:e8:f4:09:a1:0d:c8:56:77:57:7c:70:
         2d:6c:55:84:5d:ef:62:2c:ee:40:34:fe:40:c1:c3:60:1d:4e:
         49:ba:f7:a3:d4:62:11:84:f3:8c:0a:dd:ca:30:0f:19:89:67:
         be:fe:39:5a:16:9b:53:47:5d:4e:ab:69:04:46:ff:3a:64:98:
         82:76:70:b2:c0:5e:d5:7c:ee:38:75:74:52:0c:94:9c:b4:d9:
         3e:32:a2:be:20:cb:f8:04:75:b0:23:a0:12:19:14:15:1a:9f:
         33:f2:0b:e8:e8:18:cd:52:44:e0:65:60:96:6d:80:67:ee:ef:
         f7:e9:59:8f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWR7WB/6QR7NBZgrClaieBNdIa5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF
RTZBRDFGOTAeFw0yNTA0MjIxNzU1MDFaFw0yNTA0MjYwNDQ2MDFaMDMxMTAvBgNV
BAMTKDc5NDIxNDcyMjU4MTIzNTQ5QjRGOTY0MTM2MzIyOUEyRThDRkQ2MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmufXFquitE2wrC7HNEV+4Lag
srCQ6CftN1i8U75i76JDAR7Gyg7bsyCBya+2ppB29lSANzLlXfTfB+NjX39hdHKq
S80jHea9auKG/KZXT60MIce+X50RUKuFeUroUSKkD6F3gFN9+oJwNJIQyyk5nB0H
zkSFS9iSF/m66+nzmWoKjc+J+v+X2dXvu/HIBlpNjXheOCE6w1QKvgsLtSdSbAb/
A198++FNNbPBeRiFxQ/NkGcYJ6oFs41Jq54qunfbrC0cJKIhhWF1ql1jkOk8LdeB
rVeAkpOvfra76tGWkaCnhdHLw82ZNpKA+7zHL8KuHKkW8vB6DMa1R+VG1X8RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeUIUciWBI1SbT5ZBNjIpoujP1gUwHwYDVR0j
BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1
NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB
RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh
MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy
QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFIwmB5HJ9TyYxOXvF4EzL8G3iT0LuebH3uX
XeI1Vd2t5nkITMhxFmuYNaP0XH1jlKoWAKMFB32iXGJevQI1aAZgfIL7Xa+Pv9Xd
1vXIMTmrNuXIF49TCo7axPaOeZkNsComSaCFcDANyxrC5ud/H+rIa+4M/oQwnUcs
8+OG4GvfoZk/fwfo9AmhDchWd1d8cC1sVYRd72Is7kA0/kDBw2AdTkm696PUYhGE
84wK3cowDxmJZ77+OVoWm1NHXU6raQRG/zpkmIJ2cLLAXtV87jh1dFIMlJy02T4y
or4gy/gEdbAjoBIZFBUanzPyC+joGM1SROBlYJZtgGfu7/fpWY8=
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:23:16 2025 by rpki-client on console.sobornost.net