Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
File:                     F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json)
Hash identifier:          S23WSOxtUAnGkHxYhDKgPNleo4rqWzMt7XOREif/zu4=
Subject key identifier:   B0:F2:FC:A9:B9:64:67:7E:52:41:9C:4F:16:57:25:EA:02:E4:E4:58
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       417A2B3086D686CA008DA57FA0E4FF8B93DED41F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
Manifest number:          0276
Signing time:             Thu 24 Apr 2025 07:42:12 +0000
Manifest this update:     Thu 24 Apr 2025 07:37:12 +0000
Manifest next update:     Sun 27 Apr 2025 16:17:12 +0000
Files and hashes:         1: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: zpFiy3FC33PxDZc1vBBofLe5pmUqk+GtpDTCVezdxX8=)
                          2: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: VwTNigUnV52ERl4JC5acU3ZlKRaYwPoaUPZcexI3ywI=)
                          3: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk=)
                          4: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: W4a/cfhB9oac3lsy90TNAMFErRsxFA2KdB5prppjaDo=)
                          5: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ZffeIBEtnLg/Ujj93wFNolRHO6kiysPo5MQ8XNigO0w=)
                          6: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: RgKgrskhhkjPJ/Dk8nbIAuuLnQfC2xLVHfdXQzj2BLI=)
                          7: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: z29/6B1kOK/eMjCWZtmvPZLgk+HLmYp/VefCqYrAsKY=)
                          8: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: nC9Vz/V7n91DCoxvdGVxW+GzAM9lX59dn3xendBCsjg=)
                          9: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=)
                          10: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: Yi662bRsVhQynKfcqy7qXGygDZ5R6XwwA4ioPRSjZss=)
                          11: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 10:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7a:2b:30:86:d6:86:ca:00:8d:a5:7f:a0:e4:ff:8b:93:de:d4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Apr 24 07:37:12 2025 GMT
            Not After : Apr 27 16:17:12 2025 GMT
        Subject: CN=B0F2FCA9B964677E52419C4F165725EA02E4E458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:ff:d7:6a:04:1f:c5:45:69:6a:11:2d:1e:
                    52:06:0c:05:23:36:7a:09:57:b5:0c:1e:1e:02:f7:
                    45:e4:5b:4f:40:bd:cb:90:44:2e:38:8d:88:26:d7:
                    25:58:04:0b:bb:05:c1:3a:a7:bd:0d:87:64:01:53:
                    15:f1:a4:a5:c4:13:96:41:70:6b:ba:b9:bb:d4:05:
                    d0:a0:a4:97:bd:a5:b1:96:ce:3d:a6:34:02:6d:87:
                    7a:92:24:31:de:85:2e:5c:cb:03:db:73:3b:db:4b:
                    bd:2c:d0:89:8b:b6:86:1a:dd:18:17:fd:c5:0d:27:
                    45:30:91:eb:46:30:5d:13:0f:e8:c6:fd:8a:b7:a3:
                    85:34:51:c8:d9:5a:08:33:fe:b3:80:6b:0f:23:12:
                    14:db:0d:72:e2:f4:94:74:3b:c7:02:17:21:a7:85:
                    52:f2:4d:a6:97:c6:a5:35:16:42:3b:3c:7f:4f:ba:
                    d7:64:d3:e2:ae:49:bb:0d:f0:9d:e1:2f:d8:65:16:
                    69:e7:e6:7c:f8:9c:c4:6f:db:ce:dd:92:67:e8:3b:
                    ec:aa:e7:60:31:c5:07:90:20:44:ed:4d:17:d0:79:
                    8a:40:31:11:27:6a:d5:c0:ff:db:4f:40:b3:03:27:
                    c9:5c:3d:45:2f:65:c6:0d:86:be:38:4b:65:ec:7e:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:FC:A9:B9:64:67:7E:52:41:9C:4F:16:57:25:EA:02:E4:E4:58
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:98:31:cf:e2:7f:f9:a7:e5:76:8d:06:67:4a:b3:43:e1:01:
         6a:7e:bd:6b:7b:c8:1e:aa:23:6f:07:8b:fc:11:41:5c:eb:f9:
         ff:f2:c0:5e:df:2d:3f:32:a8:4c:55:47:37:56:f9:58:0f:5b:
         59:1a:ff:65:a1:73:7f:d1:2d:f1:2d:41:f8:0d:cf:9e:67:e7:
         36:3d:57:a1:da:89:db:07:2d:e4:36:b7:1a:de:d9:b9:cf:86:
         08:e3:c6:8b:c0:70:97:c1:00:39:18:1a:08:81:d7:8c:72:52:
         92:2c:94:6b:ef:72:c7:9c:ca:4a:fe:0e:a6:7b:39:b3:03:87:
         9b:41:c0:b9:88:53:da:42:62:b7:44:75:bf:1f:e3:0c:e7:2c:
         aa:31:22:c7:e4:f7:4e:6a:c1:95:ea:54:81:a1:b4:c3:a9:3f:
         f8:14:0c:e7:df:35:07:9c:e4:c4:e3:f4:71:90:5d:22:4f:89:
         37:14:16:03:8a:3f:a7:27:61:ce:53:d5:4f:6e:a9:9a:6b:d4:
         34:e0:49:03:fb:8f:45:80:2e:89:86:ee:ad:fb:2d:db:fa:8d:
         bb:ee:cf:1a:0f:9c:f9:2c:59:15:64:c7:39:94:88:00:ae:33:
         26:5d:a8:ca:03:0c:ef:f3:40:75:ec:0c:33:de:f2:40:c7:bf:
         f4:37:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net