Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft
File:                     20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json)
Hash identifier:          CDnpXmUN69cUG3qQi0YgX1b1TpNv0l6F684AgJHPfkM=
Subject key identifier:   2F:3D:69:E3:9E:43:96:7E:83:02:7B:70:85:01:A4:06:63:CB:FB:C2
Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB
Certificate issuer:       /CN=20566897603B029812606C25ABC972BAC5BF4AFB
Certificate serial:       1E36FF69993D1F6762FB44A9C0CEEAEF6636A08C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft
Manifest number:          0213
Signing time:             Sun 27 Apr 2025 19:12:21 +0000
Manifest this update:     Sun 27 Apr 2025 19:07:21 +0000
Manifest next update:     Thu 01 May 2025 04:38:21 +0000
Files and hashes:         1: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: /EXeKzU1Ad6DuHV8qtDgsoCpXIHLKoTVOdUlzIGDL4k=)
                          2: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=)
                          3: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: kldNXZzmNsoivqrkHMal0RgQ/h1gthmy8ygRNFIDof8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl
                          rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 01:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:36:ff:69:99:3d:1f:67:62:fb:44:a9:c0:ce:ea:ef:66:36:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB
        Validity
            Not Before: Apr 27 19:07:21 2025 GMT
            Not After : May  1 04:38:21 2025 GMT
        Subject: CN=2F3D69E39E43967E83027B708501A40663CBFBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:e3:a3:64:e3:d0:36:17:3d:29:b1:9a:c9:
                    75:07:01:b2:75:d8:f9:df:cb:62:d8:57:0b:27:aa:
                    72:e9:a2:28:89:0c:6c:97:2c:ca:65:ff:51:21:b8:
                    4b:22:dd:9b:d9:cb:0d:8c:38:e1:9c:33:6d:53:47:
                    be:c4:53:78:1a:2a:64:61:80:cc:82:f2:3b:0f:2c:
                    8d:a0:c4:89:af:fb:a5:7a:a8:48:ce:7b:e9:09:7b:
                    1c:2d:d5:fc:76:e2:ed:12:2d:df:88:cf:8c:4e:d0:
                    ea:10:dc:c9:58:a4:86:ac:c7:e7:f9:06:4e:23:97:
                    a9:3f:8a:6e:1b:ab:58:21:e4:37:e4:60:9b:6c:2f:
                    28:ca:d3:2c:7d:43:3d:14:77:01:55:72:a8:02:f4:
                    54:71:17:91:70:3f:97:bc:40:60:ec:f3:0b:91:72:
                    1f:70:f7:32:09:3e:76:14:ea:a2:76:b6:a3:fd:7a:
                    49:1e:61:54:51:3f:a2:b7:2b:b7:6f:03:ee:42:6c:
                    81:1b:55:77:2f:81:75:f7:2c:80:75:63:8e:b2:57:
                    c8:c9:5a:47:f0:a5:f3:ec:71:ee:79:fd:e4:8a:b3:
                    43:7a:3b:e5:8b:e8:78:31:4b:6a:d8:0f:69:31:f2:
                    83:b2:38:ed:1d:81:55:9e:21:3d:ae:4b:7c:ae:34:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3D:69:E3:9E:43:96:7E:83:02:7B:70:85:01:A4:06:63:CB:FB:C2
            X509v3 Authority Key Identifier:
                keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:09:06:b8:5b:74:ac:83:ca:1a:8e:52:1c:da:88:d2:d0:e3:
         0f:4c:21:08:af:3b:8c:08:7b:ff:e6:07:e7:23:7a:8d:0a:ff:
         50:45:2e:58:7d:3c:f6:93:71:1f:a2:4b:41:6d:4b:8e:6a:c0:
         39:c6:33:90:e7:28:b9:6c:0b:87:8f:37:f0:c4:9e:93:a4:17:
         39:8e:58:83:d6:c9:7d:9c:f9:3b:1f:14:73:8b:a9:6d:88:c1:
         75:07:cd:de:0f:6a:d2:bc:60:99:9b:a6:62:cc:f5:2c:79:7a:
         83:ae:a2:72:79:3e:76:77:9d:0d:3b:a8:2a:a6:4a:5b:10:93:
         0d:79:2c:99:6c:73:90:42:30:01:9a:ea:5e:a2:4c:23:2b:3e:
         9d:68:84:52:3a:ef:d5:2b:20:12:75:20:50:eb:3a:65:75:70:
         2a:56:a8:a5:74:ae:58:3c:bb:d8:bf:2f:ef:1b:06:d5:9d:6a:
         d1:03:94:0a:42:fe:a3:a7:fd:b1:a1:dd:6e:21:96:05:d2:5b:
         ef:e4:66:16:53:b5:3c:52:eb:26:73:0e:c9:d3:21:37:ab:63:
         03:9b:41:33:46:14:f7:3a:cb:04:82:93:25:20:b1:3d:b9:52:
         28:cf:a9:14:dc:b3:cc:4e:d9:f7:28:4f:e3:73:79:b4:86:61:
         00:86:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:42:58 2025 by rpki-client on console.sobornost.net