Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
File:                     4F022459BA46CF30700E070671C752B44729E249.mft (raw, json)
Hash identifier:          sjhFGe3xlaiiWouXClSTfCf051GYvlOCRssDL6trnTQ=
Subject key identifier:   FE:E4:3A:5E:C9:F0:37:98:2F:3E:64:12:90:47:C4:A3:B6:06:5C:DD
Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49
Certificate issuer:       /CN=4F022459BA46CF30700E070671C752B44729E249
Certificate serial:       4868E315579AFDEB0846ED15F739FFA94D9958DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
Manifest number:          016D
Signing time:             Wed 23 Apr 2025 21:42:09 +0000
Manifest this update:     Wed 23 Apr 2025 21:37:09 +0000
Manifest next update:     Sun 27 Apr 2025 04:16:09 +0000
Files and hashes:         1: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=)
                          2: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: VvIxYiO1vpW4N2M0c206efZBd+dmDTRrTwPYKqia/UQ=)
                          3: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=)
                          4: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: cetMoeUynmxh/pm7Ewp2OFaME2S5f+zRdRQlgMooBCg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl
                          rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:68:e3:15:57:9a:fd:eb:08:46:ed:15:f7:39:ff:a9:4d:99:58:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F022459BA46CF30700E070671C752B44729E249
        Validity
            Not Before: Apr 23 21:37:09 2025 GMT
            Not After : Apr 27 04:16:09 2025 GMT
        Subject: CN=FEE43A5EC9F037982F3E64129047C4A3B6065CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:9a:17:52:1f:5c:74:72:8b:cf:f3:09:04:
                    c5:08:43:46:69:46:27:c2:3b:76:e0:96:fb:d7:08:
                    2d:e6:e4:c6:dd:01:79:54:f0:13:1e:75:17:9e:89:
                    be:9d:e8:c9:be:9f:d2:c8:d1:30:8a:d1:ef:62:2c:
                    27:2a:71:59:e2:f7:86:35:70:1b:5c:5f:67:b5:3a:
                    b8:af:e0:31:9b:1d:ed:85:9c:b1:84:b5:2f:6a:40:
                    98:b5:ed:ca:90:44:a6:40:fc:cd:b0:d4:13:44:1b:
                    31:58:79:ea:49:f1:7f:0e:70:f7:c9:f5:44:64:22:
                    74:64:cd:de:73:12:e5:09:d7:44:78:91:62:09:25:
                    8b:18:0f:e3:a0:1e:9f:cb:f4:20:5e:3e:cd:0b:0e:
                    a3:35:57:3c:72:97:59:bf:22:9d:17:9a:28:0a:32:
                    a7:98:79:10:e0:35:e7:d3:52:21:be:c4:18:87:65:
                    d2:89:11:c5:34:a9:9c:98:07:19:4b:46:7e:65:59:
                    3d:e2:86:15:97:0f:f5:85:0c:27:83:4b:bc:69:7f:
                    3d:70:a1:c6:b2:41:59:31:74:06:92:ac:33:81:2d:
                    89:0d:df:35:fd:c2:59:c1:c0:fe:9b:c7:ad:3f:82:
                    fe:e5:fa:47:79:c4:49:6e:90:80:d6:58:30:f5:0e:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E4:3A:5E:C9:F0:37:98:2F:3E:64:12:90:47:C4:A3:B6:06:5C:DD
            X509v3 Authority Key Identifier:
                keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:89:a9:aa:4d:5d:47:fb:8a:c1:f4:b4:59:88:58:7c:68:4b:
         98:57:47:d8:a2:6d:e0:7a:85:8a:04:2f:52:e2:4e:ac:34:8c:
         93:c1:35:b9:75:2d:1a:91:ec:fd:51:62:89:ed:a4:62:74:f0:
         af:1b:f2:7e:13:e1:56:ce:56:e9:47:19:08:73:14:5f:1b:9d:
         17:16:d6:4f:7d:ba:bb:54:3e:51:bf:17:6b:75:91:1a:43:1a:
         1e:85:d3:f2:dd:32:35:b5:08:a6:91:41:34:5a:49:b9:1e:1d:
         22:0b:83:83:89:3d:ef:6e:7f:16:ac:82:c2:21:07:ff:0f:06:
         17:81:62:19:6b:c4:59:72:45:e2:d5:22:48:95:46:5b:e8:2b:
         6a:60:64:41:9c:8c:1d:d1:de:48:fa:40:0e:a3:81:28:14:bf:
         c8:d3:71:34:94:c2:4a:5b:c3:b2:c9:1e:fe:aa:60:cf:00:36:
         0f:de:8c:d4:cc:92:c7:d6:62:5f:ac:14:4c:ba:8a:c3:f7:99:
         a7:66:a1:a1:79:ea:2e:3c:ea:c1:9b:79:89:43:f3:7c:36:11:
         0a:66:a6:82:ab:15:9c:63:9a:15:5a:eb:87:18:fa:be:52:08:
         e1:1b:ee:92:47:85:01:64:4e:5d:bc:08:7a:2d:54:96:92:ba:
         24:91:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:17 2025 by rpki-client on console.sobornost.net