Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
File:                     FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json)
Hash identifier:          aZbpzY74AFcDOvs7RepT9dIRIkktDnLjyDqYHBTrRgQ=
Subject key identifier:   A5:C3:04:E7:36:3A:BA:5C:1B:DB:6F:99:5B:3E:85:C0:5D:6F:BA:F2
Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF
Certificate issuer:       /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF
Certificate serial:       333DB5B273B65BAAF77C8B37BF53FE8E09B6A59A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
Manifest number:          016F
Signing time:             Thu 24 Apr 2025 17:51:24 +0000
Manifest this update:     Thu 24 Apr 2025 17:46:24 +0000
Manifest next update:     Sun 27 Apr 2025 20:23:24 +0000
Files and hashes:         1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: GNOF8brVgXz3bvHl24vTCw4VN2iGlFmFeZUMDJKeFZw=)
                          2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: OByvPBeXjXgICf8nfRM4X/bYHAakXPJvdP6ikk90YbQ=)
                          3: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: +DqYo+XGPKxdYmqEfvbVDZIQfk8DOXVm8gurI5u2/E0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl
                          rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3d:b5:b2:73:b6:5b:aa:f7:7c:8b:37:bf:53:fe:8e:09:b6:a5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF
        Validity
            Not Before: Apr 24 17:46:24 2025 GMT
            Not After : Apr 27 20:23:24 2025 GMT
        Subject: CN=A5C304E7363ABA5C1BDB6F995B3E85C05D6FBAF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:bc:8d:a4:65:04:c3:89:42:f9:45:52:05:
                    c2:a8:47:0e:94:df:66:1e:26:48:df:b5:d8:7b:4c:
                    c5:dd:92:f2:ab:72:5c:fe:58:55:f2:d5:4b:77:a4:
                    94:79:9b:59:0e:1e:c4:2e:0e:1d:ed:05:cf:77:49:
                    43:94:3c:ec:d5:41:73:2e:c4:85:cf:1f:c5:fe:d3:
                    36:65:04:f9:70:6a:af:05:e0:bb:1d:ea:f1:0d:fe:
                    55:25:2d:9b:a5:db:5b:d8:ab:86:68:8d:50:e3:90:
                    a7:c2:4d:4c:b7:6e:f9:ab:ff:e1:fa:70:4a:1c:67:
                    8d:5c:a2:d8:3b:51:ee:ef:5f:a3:52:ff:8c:c5:9e:
                    14:11:6f:b0:51:5d:2c:02:5c:be:f6:9e:83:b6:4b:
                    97:20:89:03:2b:1f:a5:97:4e:b4:1f:f0:e0:c4:b3:
                    60:e5:f3:20:dc:c4:14:b1:00:e7:f8:89:86:f6:10:
                    5a:a9:d5:2b:2c:db:d3:57:c6:24:06:2f:69:1d:75:
                    4b:79:df:d0:c6:4a:4b:63:c1:6b:f3:e7:00:1c:d9:
                    25:46:87:a7:26:da:22:52:4c:e2:b9:cd:7c:6b:cb:
                    fe:c2:f3:26:28:78:f6:f1:12:e9:c8:e3:43:aa:1b:
                    b0:1c:cd:c4:17:7d:ab:1d:93:44:2b:cc:00:a3:4f:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:04:E7:36:3A:BA:5C:1B:DB:6F:99:5B:3E:85:C0:5D:6F:BA:F2
            X509v3 Authority Key Identifier:
                keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9e:b6:c6:27:03:d1:12:95:bc:e4:69:eb:44:40:e0:2c:db:
         5e:7e:03:f9:59:77:4b:91:02:ce:e0:fb:a0:dc:5e:39:86:a1:
         5b:3a:f8:c3:06:eb:91:18:66:10:45:c7:7c:88:59:99:93:95:
         6b:2c:a4:b9:00:3f:bb:c4:33:2a:5f:d8:e1:ca:f2:1a:fc:a0:
         85:d2:15:4e:e2:c5:2b:3e:da:04:13:a2:17:3f:e0:64:83:1a:
         7a:c5:12:d4:47:50:b2:b5:21:7d:b6:0b:30:33:9b:8c:16:f2:
         89:39:d9:85:ba:95:a9:62:cf:5e:9a:b8:9c:bf:6f:66:62:01:
         b3:5e:13:70:01:00:92:58:47:f1:0c:84:9e:01:b2:e3:eb:01:
         20:e4:49:a9:e5:f2:4b:74:79:5f:37:7a:5d:28:aa:09:fd:6b:
         b9:a4:24:51:35:dc:98:46:99:4f:94:38:e3:55:1f:f2:ae:65:
         f9:e6:c1:c8:a6:42:e7:95:f5:2d:b4:42:bc:f0:a8:87:06:b5:
         71:ea:89:0a:f7:12:e3:86:ba:9d:13:2c:f8:02:a8:22:99:aa:
         b0:25:20:ef:15:18:42:34:a2:6c:23:78:5c:8e:8e:99:08:67:
         f2:ce:9f:3e:ac:72:f9:27:84:f4:d7:30:ff:8e:5c:a9:05:ab:
         4c:da:a1:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMz21snO2W6r3fIs3v1P+jgm2pZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF
MzMwQkVFRjAeFw0yNTA0MjQxNzQ2MjRaFw0yNTA0MjcyMDIzMjRaMDMxMTAvBgNV
BAMTKEE1QzMwNEU3MzYzQUJBNUMxQkRCNkY5OTVCM0U4NUMwNUQ2RkJBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcy7yNpGUEw4lC+UVSBcKoRw6U
32YeJkjftdh7TMXdkvKrclz+WFXy1Ut3pJR5m1kOHsQuDh3tBc93SUOUPOzVQXMu
xIXPH8X+0zZlBPlwaq8F4Lsd6vEN/lUlLZul21vYq4ZojVDjkKfCTUy3bvmr/+H6
cEocZ41cotg7Ue7vX6NS/4zFnhQRb7BRXSwCXL72noO2S5cgiQMrH6WXTrQf8ODE
s2Dl8yDcxBSxAOf4iYb2EFqp1Sss29NXxiQGL2kddUt539DGSktjwWvz5wAc2SVG
h6cm2iJSTOK5zXxry/7C8yYoePbxEunI40OqG7AczcQXfasdk0QrzACjT6YHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpcME5zY6ulwb22+ZWz6FwF1vuvIwHwYDVR0j
BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2
MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw
QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3
NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF
NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKmetsYnA9ESlbzkaetEQOAs215+A/lZd0uR
As7g+6DcXjmGoVs6+MMG65EYZhBFx3yIWZmTlWsspLkAP7vEMypf2OHK8hr8oIXS
FU7ixSs+2gQTohc/4GSDGnrFEtRHULK1IX22CzAzm4wW8ok52YW6laliz16auJy/
b2ZiAbNeE3ABAJJYR/EMhJ4BsuPrASDkSanl8kt0eV83el0oqgn9a7mkJFE13JhG
mU+UOONVH/KuZfnmwcimQueV9S20QrzwqIcGtXHqiQr3EuOGup0TLPgCqCKZqrAl
IO8VGEI0omwjeFyOjpkIZ/LOnz6scvknhPTXMP+OXKkFq0zaoZ8=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net