Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
File:                     284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json)
Hash identifier:          OCgBlR6vGgZyxpqij8y2S95jhnYpCVRMZ4Qfh2x9BCE=
Subject key identifier:   3D:12:93:17:F8:8E:FA:85:A0:8D:B3:B4:40:02:D9:7D:3D:2B:EE:F7
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       24F488E969FF1F75BEFEDF9066A24860D09460B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
Manifest number:          0211
Signing time:             Sat 26 Apr 2025 09:41:38 +0000
Manifest this update:     Sat 26 Apr 2025 09:36:38 +0000
Manifest next update:     Tue 29 Apr 2025 18:15:38 +0000
Files and hashes:         1: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: xtD4NorzIKyUJeEfNgVo0ESCO/9jj+bjHUWQd0PWTDA=)
                          2: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: Y7lmNtoprlRJly9WgGsWn6qQ0ew2imeiy62+KuKF1lw=)
                          3: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: BLOc4k1k/6kYVTD4owYMmHx5OOK/8Y7LoDi9RBV5ZS8=)
                          4: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: N4ska4jT8GyC3wJ6UeRa470yDVKPeDBNuPa3uDDzMig=)
                          5: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: DFRzEWprrOiMSjx8SdHUt/uuD1K0oSG6/Rb0USOR/B8=)
                          6: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=)
                          7: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: GJY1uBn3hVszaq39dLLaSk2stRsKkoqme7WPjFA16js=)
                          8: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: Aybn7R6DKZgLNsyzOnIC5OzvxsaaE/Jkwzj5+uIo0ZA=)
                          9: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY=)
                          10: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: TGXfQuq1RmcYG5/rcQ5+kCiPWG3n75g2FUN2iHTafgE=)
                          11: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 01GhR87m6uISdoaVmw5/Uom42dMtA6W3HSfDP759MWE=)
                          12: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: UK4y8U5FoaH31XYzSF1KACuxC0U7L5WzRWdPY69Zp1w=)
                          13: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: XDEGp8lWijrl4t6mUpWpRG/6LTKurJQjMuROjmEiZ6Q=)
                          14: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: oldOLTzbZdnxuKb1GFFk/KT+RuyBaJzPj+vjKkTBhf4=)
                          15: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: cdNLmrn5LU1ZFNJXEQ0Kn33vtggbikkj3eG8DVpKtVg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f4:88:e9:69:ff:1f:75:be:fe:df:90:66:a2:48:60:d0:94:60:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Apr 26 09:36:38 2025 GMT
            Not After : Apr 29 18:15:38 2025 GMT
        Subject: CN=3D129317F88EFA85A08DB3B44002D97D3D2BEEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:d3:1c:74:41:18:3d:ea:f7:9f:4c:56:95:
                    f2:b2:c5:12:92:c1:79:d7:a0:27:a9:8a:cb:6a:d9:
                    04:06:4f:c5:cc:1a:52:ef:8f:53:38:9c:1f:48:8c:
                    95:88:6a:1a:1b:47:99:61:90:7b:14:ec:22:7c:ba:
                    b7:31:c4:52:82:b1:f8:57:69:4d:b4:85:0d:83:66:
                    15:52:c8:13:42:b8:70:df:1e:dd:09:9b:a1:86:7e:
                    33:35:37:16:e5:c5:7b:00:34:82:9b:03:0b:4e:9d:
                    09:23:63:79:f8:86:63:51:3f:a4:7a:9e:1e:02:7b:
                    11:8b:82:a4:73:2a:92:12:2a:2d:38:d4:fe:6b:d5:
                    87:15:8b:b8:ff:a9:37:da:86:13:76:a1:3a:0c:ae:
                    25:00:c3:b6:5b:db:1d:78:87:1e:c6:14:b1:50:6a:
                    ca:45:e5:cb:37:4f:10:39:e1:65:8e:0f:54:92:f9:
                    37:2b:a4:a3:a2:75:db:c2:59:c6:1e:d4:9e:c5:41:
                    2b:af:d8:3a:94:50:02:83:cf:ca:05:43:a0:ca:b1:
                    e5:44:df:f6:3b:f3:06:f1:44:c2:86:b3:45:5f:ea:
                    0f:de:ab:9d:3e:1c:35:1a:c4:03:f8:c3:75:23:2b:
                    6e:a5:b9:0e:55:bb:86:a2:d5:bc:3b:5f:01:1e:50:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:93:17:F8:8E:FA:85:A0:8D:B3:B4:40:02:D9:7D:3D:2B:EE:F7
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ab:c7:cf:de:62:36:4a:99:85:83:8a:ee:ed:e9:f4:a4:58:
         8c:10:33:7c:f7:c8:50:b8:e8:05:e8:cd:4f:a6:c3:08:bd:09:
         46:b5:a1:e9:65:0f:c3:c3:5f:e0:c9:5f:d4:df:16:38:14:73:
         a4:7e:cb:2d:d3:51:6a:a4:81:86:79:57:c2:6f:07:b6:a0:53:
         42:2f:53:41:1d:42:7d:0e:97:9a:3d:33:68:86:87:8a:07:51:
         fc:82:60:6f:31:44:2a:d5:43:48:55:af:01:86:f6:bf:8b:a5:
         fb:7e:b9:7d:cd:d2:81:3f:d3:68:04:2a:05:15:a7:40:e8:c0:
         f6:ae:4b:bf:26:f4:a8:84:40:95:46:a4:ee:3f:c9:b3:d5:fc:
         44:99:58:64:5e:89:b4:33:50:c1:13:5b:25:52:19:ae:55:84:
         46:a6:5c:ff:39:15:70:cc:56:24:27:a7:3e:c4:b9:91:80:17:
         8e:95:af:e2:d7:c4:a5:bf:02:ba:03:5d:97:40:2b:5c:bb:1f:
         44:ef:94:9b:1f:17:ee:5c:d7:4e:70:e4:0c:6a:b7:03:d7:3d:
         25:48:f3:bc:25:13:60:24:db:7e:c5:57:79:7f:21:fb:00:52:
         a2:3a:65:36:c4:a8:ad:b1:ab:d1:1b:2a:9a:61:fe:1d:cb:6e:
         b6:27:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:29 2025 by rpki-client on console.sobornost.net