Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
File:                     34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json)
Hash identifier:          zQqNqELxXtAzJNFYQNFL6/wHirArlByPqub//R1Akd8=
Subject key identifier:   AC:34:5D:67:DE:BA:4B:2A:0D:AA:4E:59:11:10:EA:60:5C:6E:CC:26
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       73BF33D6322D7FB24D9F4A4A0F3ECFD008E62411
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
Manifest number:          0238
Signing time:             Fri 25 Apr 2025 16:31:48 +0000
Manifest this update:     Fri 25 Apr 2025 16:26:48 +0000
Manifest next update:     Mon 28 Apr 2025 17:32:48 +0000
Files and hashes:         1: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: 7mvR+mrk6XVRpW6E1/VuvDMZmc8T0jBPxFC1EdUFnrU=)
                          2: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=)
                          3: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: 5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=)
                          4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: s3aYQ8LQ0b3amJyDD6i2ZYI2B6oFeKkC+XfwFx/HBQY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 17:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bf:33:d6:32:2d:7f:b2:4d:9f:4a:4a:0f:3e:cf:d0:08:e6:24:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Apr 25 16:26:48 2025 GMT
            Not After : Apr 28 17:32:48 2025 GMT
        Subject: CN=AC345D67DEBA4B2A0DAA4E591110EA605C6ECC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:4f:1d:2a:f4:61:40:ec:b2:a6:b4:45:d5:
                    d2:70:09:47:3d:51:d3:28:5d:0e:cb:f8:a2:9a:8c:
                    8e:b3:32:d8:f5:40:fb:76:ee:6b:db:c5:cf:f3:92:
                    f6:20:e1:b3:2f:07:f7:eb:f6:29:a4:9d:0f:ab:72:
                    f9:23:a1:15:2a:95:93:c4:49:aa:ff:25:fe:36:01:
                    60:c4:18:40:32:0d:fc:6b:27:c1:bc:68:48:ed:d4:
                    46:e6:3d:77:8e:14:46:ce:a1:43:9d:ea:0f:de:25:
                    85:23:ff:94:5f:5c:28:04:bb:20:c6:6f:93:9c:44:
                    fe:72:79:57:45:c7:a8:7b:02:04:89:e4:7a:7f:2b:
                    80:d1:e2:21:68:5b:44:26:1e:b9:db:e5:67:46:af:
                    6e:08:4f:27:b8:de:fa:88:1a:dd:09:a6:3a:ae:3f:
                    61:58:70:5a:22:fb:ad:7b:1e:6c:4a:83:ed:a2:53:
                    70:19:67:5d:60:fd:47:c8:91:06:6d:f0:75:2f:cc:
                    a0:13:41:56:56:06:58:0b:53:76:cc:c6:ae:bf:c3:
                    f8:5a:36:ae:f8:b8:a8:e6:ed:7f:38:2d:9d:74:27:
                    4d:b0:e6:f1:96:87:59:c6:28:65:ef:4d:5d:36:b9:
                    ab:24:6a:21:89:6e:ea:20:5e:58:32:3b:03:37:86:
                    2b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:34:5D:67:DE:BA:4B:2A:0D:AA:4E:59:11:10:EA:60:5C:6E:CC:26
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:ae:00:ee:c9:28:c3:85:56:61:fe:a6:cf:5b:ce:52:eb:
         67:15:ce:79:87:eb:2e:25:ce:47:00:ec:2f:f0:d8:aa:33:9a:
         8f:f6:31:21:76:03:31:b0:28:c0:97:42:f4:3b:3a:27:bd:4c:
         da:13:63:7e:71:d0:5c:64:79:97:71:4c:b1:ce:08:b3:27:90:
         7d:e9:63:a5:42:1b:61:22:a6:1d:34:b0:24:e9:03:22:a1:3f:
         92:0f:a0:4d:a1:e8:ff:74:f1:f5:2d:b6:af:bb:6d:a8:bd:2e:
         e4:b9:1f:9f:55:ed:0f:b6:fb:a8:d6:50:42:94:2a:9d:a4:2c:
         4d:a1:b9:86:6b:f3:35:09:72:22:c3:c9:ca:3d:c0:6a:f2:17:
         a9:5b:9a:18:80:13:e4:c6:26:2e:6d:1b:37:f5:88:fe:40:0e:
         72:5d:12:72:5e:4b:35:7f:9d:b4:a4:55:a8:e8:1e:84:02:ce:
         a2:15:1c:47:01:3e:d0:6f:47:59:3d:03:06:0f:ea:2e:e9:a8:
         38:9f:b1:d8:73:08:2b:64:c0:5c:68:c8:78:df:fa:a2:62:b3:
         71:c6:36:fc:6d:0d:72:3b:c2:42:ae:3a:36:06:c3:bb:6f:4a:
         3e:1d:a0:26:14:77:36:68:88:91:41:94:de:41:33:f1:c9:54:
         38:b8:40:6d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc78z1jItf7JNn0pKDz7P0AjmJBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz
RjkxMzk5NDAeFw0yNTA0MjUxNjI2NDhaFw0yNTA0MjgxNzMyNDhaMDMxMTAvBgNV
BAMTKEFDMzQ1RDY3REVCQTRCMkEwREFBNEU1OTExMTBFQTYwNUM2RUNDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTU8dKvRhQOyyprRF1dJwCUc9
UdMoXQ7L+KKajI6zMtj1QPt27mvbxc/zkvYg4bMvB/fr9imknQ+rcvkjoRUqlZPE
Sar/Jf42AWDEGEAyDfxrJ8G8aEjt1EbmPXeOFEbOoUOd6g/eJYUj/5RfXCgEuyDG
b5OcRP5yeVdFx6h7AgSJ5Hp/K4DR4iFoW0QmHrnb5WdGr24ITye43vqIGt0Jpjqu
P2FYcFoi+617HmxKg+2iU3AZZ11g/UfIkQZt8HUvzKATQVZWBlgLU3bMxq6/w/ha
Nq74uKjm7X84LZ10J02w5vGWh1nGKGXvTV02uaskaiGJbuogXlgyOwM3hitRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrDRdZ966SyoNqk5ZERDqYFxuzCYwHwYDVR0j
BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3
RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx
Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3
MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw
OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFcbrgDuySjDhVZh/qbPW85S62cVznmH6y4l
zkcA7C/w2Kozmo/2MSF2AzGwKMCXQvQ7Oie9TNoTY35x0FxkeZdxTLHOCLMnkH3p
Y6VCG2Eiph00sCTpAyKhP5IPoE2h6P908fUttq+7bai9LuS5H59V7Q+2+6jWUEKU
Kp2kLE2huYZr8zUJciLDyco9wGryF6lbmhiAE+TGJi5tGzf1iP5ADnJdEnJeSzV/
nbSkVajoHoQCzqIVHEcBPtBvR1k9AwYP6i7pqDifsdhzCCtkwFxoyHjf+qJis3HG
NvxtDXI7wkKuOjYGw7tvSj4doCYUdzZoiJFBlN5BM/HJVDi4QG0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net