Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
File:                     DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json)
Hash identifier:          +WYl7ALkqhwLLHGRNZ42TsULMVc+c6HBfMU1I3hKeFk=
Subject key identifier:   A0:B0:E0:02:A9:4B:81:A7:D6:BE:6A:2A:F3:87:AF:51:B3:AF:0A:81
Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
Certificate issuer:       /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Certificate serial:       12AFC9470A6A6BC4C05E0409B44247534ECB55DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
Manifest number:          0300
Signing time:             Thu 24 Apr 2025 10:21:12 +0000
Manifest this update:     Thu 24 Apr 2025 10:16:12 +0000
Manifest next update:     Sun 27 Apr 2025 22:18:12 +0000
Files and hashes:         1: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: MmDjqY0in3Ron4tXoyw1IFEdlRaJCNk65DIgw6xUgLY=)
                          2: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: Y94ACgKRW/B6r5u1l5R9++TiByrUg/dDZ6VyKO+Pxik=)
                          3: 3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa (hash: ypT2E/4mQi8ZinwGIb3ksHfodPA0Ub74zZ/WxvTHyYI=)
                          4: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: 2/3aoS/oBHZ9b5IXD8LNkfp21rCG/SNMURjrTlE67Fg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl
                          rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:af:c9:47:0a:6a:6b:c4:c0:5e:04:09:b4:42:47:53:4e:cb:55:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
        Validity
            Not Before: Apr 24 10:16:12 2025 GMT
            Not After : Apr 27 22:18:12 2025 GMT
        Subject: CN=A0B0E002A94B81A7D6BE6A2AF387AF51B3AF0A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:aa:7d:60:43:b6:82:1d:7c:8e:1f:e9:9d:d5:
                    a4:16:ee:fb:e7:98:64:f4:0a:9f:2e:46:88:2a:e2:
                    47:b1:06:aa:18:c9:58:76:66:26:9f:f7:88:ee:90:
                    a4:d9:3e:11:12:4b:23:16:4f:87:99:54:e3:a6:77:
                    3c:16:92:ff:d9:cf:03:35:7e:9e:5d:9a:fc:ac:26:
                    4a:d1:60:d5:06:cd:4c:2a:ff:8a:a8:08:ce:1a:97:
                    7e:88:3c:51:d9:5c:73:9e:6b:ed:fe:6c:4b:1e:27:
                    7b:d4:1c:90:58:b6:fb:90:65:98:49:a1:b6:b7:89:
                    f8:ea:7e:a7:55:a7:9a:5a:fe:f1:b8:42:fd:7a:0c:
                    88:65:0e:e1:7e:c8:95:6b:61:12:a7:11:94:2a:f4:
                    01:42:86:63:58:47:7c:2d:4f:07:d2:f5:17:98:06:
                    7c:0c:8f:d0:56:01:a1:04:39:f7:15:3f:0a:41:21:
                    f3:e8:d0:e2:6b:e4:39:bf:9a:01:16:d0:d7:2d:93:
                    61:81:21:d2:db:5e:fe:6f:7c:e9:16:51:1a:9b:23:
                    68:13:98:d1:72:05:df:3b:7a:9b:fe:88:b6:d8:49:
                    69:0a:da:d8:d4:b2:15:80:f5:71:bb:f6:49:8e:7f:
                    a6:7b:5b:0a:9c:47:71:85:03:80:da:cf:72:8c:6b:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B0:E0:02:A9:4B:81:A7:D6:BE:6A:2A:F3:87:AF:51:B3:AF:0A:81
            X509v3 Authority Key Identifier:
                keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:22:59:1a:47:1e:eb:5c:f5:d6:c1:41:a0:5a:e8:1d:a3:ae:
         e8:2c:d1:98:5f:53:1b:b7:19:51:12:3c:77:28:df:11:8e:a0:
         ef:9f:9b:bf:67:77:d2:44:43:bb:be:a1:45:b8:32:87:b4:71:
         dc:c1:7b:33:77:ff:82:9b:8e:a4:75:f9:27:23:f4:ec:38:15:
         0b:54:8d:48:3e:ad:c8:56:8f:f9:f0:f6:d7:84:0e:3a:0d:a9:
         70:d6:92:65:35:ca:45:af:68:ad:24:49:62:55:81:14:de:76:
         6f:59:fc:7e:6f:32:e7:ec:8e:92:87:6a:ce:6d:95:09:fe:5c:
         84:dc:b9:42:6f:ae:ca:44:5c:cf:ec:0b:01:3c:06:d9:fd:ac:
         4c:c2:67:8e:01:1b:de:e5:3e:e6:a6:9f:b6:9a:c5:b6:22:0c:
         f6:c2:a6:38:9c:47:da:37:74:6a:3e:1f:18:40:17:67:ed:3b:
         62:e1:92:83:a0:a2:38:59:b4:aa:6b:e8:1b:65:e7:0a:a8:5a:
         f4:58:da:0d:4e:42:9b:0d:f2:2f:a3:20:df:8d:03:2d:b3:1f:
         0f:b9:bb:be:ff:ed:47:0b:47:d7:f1:ac:6e:b6:a7:71:4a:66:
         50:91:7d:3e:9d:f9:8f:92:fc:32:d0:06:f8:5b:39:32:64:9a:
         b8:53:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net