Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft
File:                     A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json)
Hash identifier:          tUxsrnugpHzoaezPlZF67PxMQxuy3nu7Sg7cQ+aqTkw=
Subject key identifier:   C5:2D:56:DD:59:20:AA:69:2D:B7:6E:36:2E:C6:A6:BA:1E:16:22:1B
Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13
Certificate issuer:       /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513
Certificate serial:       3F4354A847C9B16860282CE5483159F6F7ADFE7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft
Manifest number:          04C7
Signing time:             Sat 26 Apr 2025 16:00:50 +0000
Manifest this update:     Sat 26 Apr 2025 15:55:50 +0000
Manifest next update:     Tue 29 Apr 2025 20:04:50 +0000
Files and hashes:         1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: BYqod6MpiU+7Z1SRADWqrFu5PKrosN4N1nsDMn71XXQ=)
                          2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: ou6+fUJHXdcSj0cXtfBnZqccyTs9EPGW/7KsWbkPHEQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl
                          rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:43:54:a8:47:c9:b1:68:60:28:2c:e5:48:31:59:f6:f7:ad:fe:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513
        Validity
            Not Before: Apr 26 15:55:50 2025 GMT
            Not After : Apr 29 20:04:50 2025 GMT
        Subject: CN=C52D56DD5920AA692DB76E362EC6A6BA1E16221B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:11:c1:6e:19:5f:dd:44:cd:29:0c:18:ca:
                    53:db:cd:6a:70:61:8e:9c:6e:d0:c3:e8:3d:09:a1:
                    29:92:e0:e4:e5:49:ce:94:9b:0c:e9:d8:c3:e4:6f:
                    c4:33:83:9a:b5:f0:77:06:62:8d:07:28:d7:af:c3:
                    77:d9:8d:3c:8b:89:5f:cb:85:48:00:1b:d8:b8:f8:
                    19:65:45:0b:78:b8:ec:ca:30:77:65:ea:61:02:84:
                    99:fe:c3:24:88:57:8e:67:74:56:2a:98:09:77:78:
                    77:a7:c4:f9:3c:2c:96:be:f7:f2:0e:30:56:a5:d2:
                    ce:b0:8e:3a:05:4e:ca:37:71:63:a0:1c:1d:aa:71:
                    ba:0a:ae:1e:b0:88:a8:05:38:81:f1:8c:7f:9b:c8:
                    f2:2c:25:76:1f:91:dc:34:7a:90:0f:4e:e9:37:9f:
                    b9:48:9f:8e:d4:e1:2c:99:20:d2:2a:4b:6f:d5:b2:
                    aa:5e:9f:b8:e0:e1:96:4d:ae:cd:2f:76:08:ea:62:
                    1b:d0:02:5a:6a:10:b9:c4:4b:2a:d4:59:9c:0f:d8:
                    9b:5b:f4:77:1e:c6:c4:82:5e:31:c5:3b:f9:5d:5a:
                    04:d4:b2:10:bf:55:db:16:be:9d:f3:83:1f:60:70:
                    61:b2:b9:3d:31:3e:ab:32:b0:83:2f:56:eb:06:e4:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2D:56:DD:59:20:AA:69:2D:B7:6E:36:2E:C6:A6:BA:1E:16:22:1B
            X509v3 Authority Key Identifier:
                keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:50:a3:e7:31:eb:7e:55:a4:2c:60:0d:cf:16:13:0e:65:e0:
         3f:b7:b7:6e:70:eb:31:fe:eb:18:53:ba:2f:36:d9:8a:a1:e7:
         16:de:f1:fc:f9:b6:34:b8:07:1f:ac:36:9c:19:14:d5:c6:15:
         e5:c7:9c:58:06:5f:ad:ec:c6:30:cf:a6:2b:73:83:16:a8:55:
         0d:f7:52:6d:e9:d8:da:c7:45:2c:48:d0:5b:3d:67:d7:6f:53:
         ed:e0:2c:41:69:5e:7e:0c:fe:d2:37:8e:04:90:19:cd:7f:61:
         8d:ef:67:9f:64:8c:cd:da:d3:ac:17:07:49:9b:5f:d5:64:2b:
         39:e6:4e:75:e2:c4:ac:3e:a6:91:bd:97:26:95:74:ac:31:50:
         fc:82:b9:fd:54:cf:c7:ad:ac:cb:cd:22:2b:47:fa:eb:cf:86:
         8c:66:fd:6f:c4:22:c0:bb:1a:8e:38:70:52:c8:46:7e:e9:d9:
         23:cf:55:e8:5f:07:3a:08:ac:a5:25:95:2c:0c:bd:d9:72:e7:
         21:3e:19:0e:bc:14:17:29:a2:38:e8:d5:4c:b7:28:58:cb:6d:
         c9:97:86:8f:34:7a:a0:90:8f:37:e8:b4:cc:e2:9f:95:0d:db:
         bd:38:be:1e:d2:03:79:d2:51:d8:1c:8b:d4:a5:8c:34:42:06:
         ac:09:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:17:59 2025 by rpki-client on console.sobornost.net