Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft
File:                     989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json)
Hash identifier:          hhMXyIloikpwUzILjO5ypbN10Plk3k5dwGsD6c0GGDE=
Subject key identifier:   12:BF:A2:A2:54:96:03:5E:B9:C8:6E:18:3A:9F:17:6C:72:8A:EA:B2
Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48
Certificate issuer:       /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748
Certificate serial:       21141055D8ED59E955EF9B00A59C16D079F265F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft
Manifest number:          04CB
Signing time:             Sat 26 Apr 2025 05:41:00 +0000
Manifest this update:     Sat 26 Apr 2025 05:36:00 +0000
Manifest next update:     Tue 29 Apr 2025 10:24:00 +0000
Files and hashes:         1: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: nbKEGL9uJ3qGuVTDE0ObbKv9nput7AfSClAvBfwRqzQ=)
                          2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: ehfavKJYShgP2TV1M1uRS+C1vrvpl5VhW1fhvktvS38=)
                          3: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: eEx4NWwR1k9vkDQfEfkXnOdl3qvSuzaAej2N1OIEynI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl
                          rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:14:10:55:d8:ed:59:e9:55:ef:9b:00:a5:9c:16:d0:79:f2:65:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748
        Validity
            Not Before: Apr 26 05:36:00 2025 GMT
            Not After : Apr 29 10:24:00 2025 GMT
        Subject: CN=12BFA2A25496035EB9C86E183A9F176C728AEAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:68:b6:9f:59:2b:60:56:d2:55:e2:02:49:
                    8c:ef:43:77:b1:1a:60:9d:5f:f0:16:98:7b:13:6e:
                    c8:1a:4e:53:d7:dd:82:3e:2f:2a:37:20:4b:e0:90:
                    0d:3d:4b:b0:78:44:df:65:ab:56:7b:23:52:93:52:
                    b8:fd:ec:74:98:6e:5b:9b:32:8b:64:56:b4:5d:8d:
                    a7:34:a5:00:39:18:b6:ec:3c:cf:1e:98:08:6f:de:
                    c4:37:fa:76:e5:7a:61:28:60:e3:c0:94:df:13:23:
                    ad:39:be:58:56:f1:9f:62:21:52:81:a9:c3:43:6a:
                    f2:52:e6:ae:c8:0a:75:44:8c:c6:5a:69:09:3a:48:
                    2f:fa:2e:4d:aa:69:49:19:30:b5:ce:d3:12:3c:c4:
                    0a:e8:2b:f4:3c:69:b7:f7:7e:32:0c:7d:56:a3:56:
                    c0:22:d0:b4:8e:40:a5:07:3f:ff:5a:fd:ae:08:4e:
                    0a:76:92:9a:0b:43:66:d6:fd:1a:77:d4:2a:c2:f2:
                    c0:3f:55:0b:c2:58:cb:20:c4:76:f6:53:a9:d8:4a:
                    0b:48:73:4b:fa:b3:e0:0c:de:1f:3e:6f:00:d8:39:
                    20:47:f0:e4:8d:68:d5:e0:a2:1a:a3:b9:70:1a:2a:
                    53:58:bf:e8:6f:b6:0f:51:a7:9f:d7:06:af:f7:fd:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:A2:A2:54:96:03:5E:B9:C8:6E:18:3A:9F:17:6C:72:8A:EA:B2
            X509v3 Authority Key Identifier:
                keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:85:9b:ac:d9:a6:48:15:3f:af:fe:58:28:a1:bf:a6:b5:ac:
         ce:c8:93:31:4b:e1:ad:ae:4a:4e:f9:be:8b:11:c9:48:62:ce:
         a2:40:26:80:c3:0e:d5:ba:39:96:4b:bd:f0:83:09:a8:90:93:
         7b:72:bb:cb:e1:e6:fc:34:44:9b:8a:09:6d:e4:9b:df:06:3d:
         e1:fd:eb:08:57:84:b9:6c:94:91:db:3d:9b:f8:f9:72:71:d8:
         60:e6:57:8c:71:7c:a1:7c:db:48:1e:a6:e5:7c:dc:cd:71:38:
         0d:92:a1:19:66:b0:01:33:37:c0:50:c7:4b:23:a0:cf:e5:6a:
         24:c0:d5:42:6d:be:83:97:83:eb:7a:08:2d:27:a9:58:87:53:
         19:c3:94:1c:85:b9:d9:87:40:53:57:ee:52:14:db:4a:d4:7a:
         c9:fb:79:5c:14:85:6c:b9:d3:e1:34:4b:98:b0:20:bd:da:fc:
         5f:15:f5:d4:1f:66:b7:0d:a3:6d:3b:01:43:e5:41:a0:9d:fe:
         20:ca:ca:dd:f5:c1:3a:3b:c8:9d:f2:48:5a:83:ea:ed:ec:40:
         8c:51:12:24:dd:fb:c8:d2:10:8e:cb:a7:ad:a8:21:f0:2c:c9:
         47:9f:d8:c3:ac:fb:fe:d2:e1:2b:ab:fe:5c:be:cf:9d:71:76:
         40:a9:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net