Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
File:                     5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json)
Hash identifier:          d8bmKUy2n1F78OB7zoCnOSctcYSmua0vYbBDx0jSn+Q=
Subject key identifier:   C9:C1:45:C3:8D:A4:A0:E3:4E:F7:75:EE:09:09:29:95:5E:92:02:FA
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       31285D38E4F4D3EFF573E914AFE3480054160E48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
Manifest number:          04CC
Signing time:             Sun 27 Apr 2025 01:22:17 +0000
Manifest this update:     Sun 27 Apr 2025 01:17:17 +0000
Manifest next update:     Wed 30 Apr 2025 06:41:17 +0000
Files and hashes:         1: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: rocwRr0NP6Uj0/rSOv/9FOGchYWFwBQRYbTt7bw6igg=)
                          2: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: gvdTawMjuZSpigUwAj2qBDjrcCcWCvIuD4DqGYmqvk4=)
                          3: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: 75Wta+uwJrqDvHsVCmnRjVlduNfxnIK2f2jA8o86w1U=)
                          4: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: ZT82QcxuoXSK/mo5/0b6wtHKdqTI+0QuWpVv7npukjI=)
                          5: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: NJ0tpUPsc3Bnm5NkUej4AyI75QawVIIptpD8njjI8Rw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 05:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:28:5d:38:e4:f4:d3:ef:f5:73:e9:14:af:e3:48:00:54:16:0e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: Apr 27 01:17:17 2025 GMT
            Not After : Apr 30 06:41:17 2025 GMT
        Subject: CN=C9C145C38DA4A0E34EF775EE090929955E9202FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:17:a2:2c:b1:91:72:01:43:47:e9:36:7c:6f:
                    c2:01:47:67:a4:be:52:63:c4:16:4c:7d:93:f5:0d:
                    56:b7:b4:eb:23:4a:58:f6:78:22:8c:b8:17:8e:f7:
                    72:9e:7a:85:1b:13:82:d4:9f:cf:76:fd:f0:0f:e8:
                    0a:c9:e4:6f:10:1f:90:6d:70:a8:82:9d:c8:8a:61:
                    a2:d7:1d:e1:7d:3c:3e:3d:1a:c9:c3:cc:20:57:cf:
                    f1:a5:1f:04:24:e2:87:3c:ae:b7:ec:f0:35:23:15:
                    19:30:5c:69:dc:5e:79:64:50:a5:6f:a5:d8:18:50:
                    17:9c:96:d9:1a:a0:05:d0:c1:76:2e:03:f5:fb:f0:
                    d5:3c:85:50:d1:e0:df:2d:0a:aa:05:05:11:82:04:
                    4b:ec:b5:59:38:3c:bc:52:39:89:c0:76:5e:5e:8c:
                    41:5d:43:25:95:63:18:59:bb:c7:b6:01:79:cd:77:
                    96:e4:bd:de:3a:26:97:6c:86:dd:11:33:b3:15:1a:
                    db:4a:71:01:a2:99:e5:30:13:12:b6:97:3b:fa:77:
                    4b:41:87:3e:62:a1:86:9c:c5:48:f1:47:fa:ff:3c:
                    f4:d2:e0:72:30:f5:bf:b3:5a:6a:f2:83:7a:bc:e4:
                    9f:1d:43:3c:b2:8f:b2:bd:4c:2a:b0:ba:5f:c1:30:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C1:45:C3:8D:A4:A0:E3:4E:F7:75:EE:09:09:29:95:5E:92:02:FA
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:91:f5:fc:72:c0:26:df:05:4d:3b:45:37:86:24:df:e1:c1:
         14:5b:c6:14:08:4f:c5:85:95:72:4d:c7:fa:e2:28:a6:dc:ac:
         ea:e1:6c:a9:84:0a:8d:4f:06:4f:e1:0b:14:ae:17:01:8c:62:
         90:6e:66:39:ef:3d:69:b1:9b:cf:78:60:1b:27:0a:ac:a7:83:
         0e:6b:c5:8f:c2:fb:1e:9f:f4:82:26:23:1a:fb:72:85:b2:35:
         de:31:f9:4d:ed:86:17:b0:12:52:5f:74:81:8a:03:fd:ab:da:
         f4:6e:e9:92:04:86:eb:2a:2e:b6:8b:d8:c9:71:ef:65:e6:78:
         91:f6:f8:68:99:16:03:ad:7c:15:52:aa:63:99:87:10:e3:7c:
         ca:c6:a6:db:73:8b:b0:e8:0c:df:1a:bf:a4:ed:57:8c:d4:ad:
         a0:75:c0:fc:05:02:71:42:53:13:77:9f:18:00:77:e9:97:01:
         12:d4:89:d0:ea:42:a3:e0:b1:a2:b8:57:3f:31:c1:f8:d1:15:
         af:e8:7c:23:2c:59:33:90:53:09:20:73:d8:3c:13:5e:25:a7:
         14:bb:10:24:3b:61:88:5b:49:9d:45:a3:a2:f2:16:60:49:c4:
         15:4d:31:8b:15:ba:49:bd:e2:05:e2:81:c7:73:c5:e2:0f:da:
         92:33:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:32:55 2025 by rpki-client on console.sobornost.net