Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
File:                     38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json)
Hash identifier:          JNbABemGTqEQLv5n4JZ8g80mpuhO7TL++LgBy2iahu8=
Subject key identifier:   4F:2F:1D:EB:A2:C6:FE:C5:F0:70:CF:83:13:22:28:41:F5:CF:9F:46
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       1EDA5ECD41AA256E59AC67C423F9C479FDDB44DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
Manifest number:          0143
Signing time:             Wed 23 Apr 2025 22:30:54 +0000
Manifest this update:     Wed 23 Apr 2025 22:25:54 +0000
Manifest next update:     Sun 27 Apr 2025 04:38:54 +0000
Files and hashes:         1: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=)
                          2: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=)
                          3: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=)
                          4: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: /LllE3Z3Z6cmsr6m8Rlegi9/QASZ7WUJDrf0bq8yxSw=)
                          5: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=)
                          6: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=)
                          7: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=)
                          8: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=)
                          9: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=)
                          10: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=)
                          11: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:da:5e:cd:41:aa:25:6e:59:ac:67:c4:23:f9:c4:79:fd:db:44:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Apr 23 22:25:54 2025 GMT
            Not After : Apr 27 04:38:54 2025 GMT
        Subject: CN=4F2F1DEBA2C6FEC5F070CF8313222841F5CF9F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:18:f1:03:f8:f7:43:c4:9a:60:80:61:e4:
                    27:cb:e3:81:ac:ac:f8:54:5c:5d:af:11:09:2b:a1:
                    7d:02:81:16:d0:2c:95:1c:59:ec:e7:8e:bb:d9:fe:
                    a4:19:12:8a:f8:b6:6b:68:1c:76:14:fc:4e:9d:75:
                    a4:15:34:5f:2e:a9:a5:ea:99:19:26:bd:eb:b5:21:
                    4a:91:72:ca:4e:da:cb:a4:53:2d:04:96:14:af:27:
                    bb:e2:3e:21:e4:58:de:c4:30:bd:4b:22:95:e2:4d:
                    5d:70:5e:12:b2:82:e7:44:38:67:c0:59:96:1b:ea:
                    4b:f9:6a:c3:2f:d0:4a:e1:89:f2:e8:aa:da:12:e6:
                    c9:a3:87:31:b2:f2:f4:3c:42:5a:72:a2:15:e1:e7:
                    6d:38:92:58:58:f5:96:53:c9:9d:f6:d5:2c:7b:15:
                    f3:8f:69:88:88:20:80:53:aa:a2:66:50:9b:94:cd:
                    0d:6a:fc:f2:b4:e1:f0:3f:54:4d:45:ec:81:66:37:
                    87:43:2b:38:55:76:3c:8f:eb:8d:85:7a:c0:4e:f1:
                    67:be:a6:26:0e:24:f6:ca:2a:8c:3c:dc:7a:02:fc:
                    0b:6a:ef:62:ec:01:ae:ee:5a:b2:11:57:5c:66:78:
                    26:85:d7:21:ed:ce:91:ab:25:40:03:88:43:d4:85:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2F:1D:EB:A2:C6:FE:C5:F0:70:CF:83:13:22:28:41:F5:CF:9F:46
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:71:b0:e7:56:aa:cc:3a:fe:87:91:83:64:7b:fb:d0:03:ae:
         b7:28:02:f6:f1:8c:74:04:ed:db:82:db:9b:c6:99:34:af:be:
         87:5b:79:70:d3:a3:a1:43:ba:c9:af:06:35:c1:0f:3f:19:2d:
         fb:30:ab:bb:ab:93:c6:64:2f:d5:95:a3:a8:1d:da:13:7e:23:
         56:7d:ee:72:c0:7e:77:b9:39:65:bd:fc:c6:2f:05:a2:26:ff:
         89:80:48:c8:f7:5c:80:75:81:c0:80:f6:ee:8d:bc:10:a9:90:
         c4:98:22:35:b6:9f:a3:cc:55:67:9a:84:fe:6d:93:a0:a1:e8:
         dc:9f:cd:30:ca:b4:62:00:f7:54:d5:62:dd:4e:0f:8d:b4:f8:
         9c:ce:e8:be:b3:85:a1:07:91:f9:e3:8f:52:10:d8:5e:5a:55:
         0a:fd:ec:7c:04:89:4d:b9:5a:20:cf:cb:cb:21:32:0f:b3:4d:
         a7:04:bc:0e:3b:90:2d:15:85:ba:43:11:a3:f2:e6:13:3d:78:
         09:90:84:a3:cf:ce:0c:4c:29:f8:f2:97:77:cb:99:58:56:0a:
         24:b6:e1:46:fd:b6:d7:9f:92:b1:06:4a:ee:25:4c:69:35:c4:
         f1:85:1c:76:07:3b:15:d5:70:b0:41:dd:04:43:60:06:1c:2b:
         cf:fd:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:16 2025 by rpki-client on console.sobornost.net