Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
File:                     12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json)
Hash identifier:          jKtsuZH1m8PuSROvUxJlzNVz4G5R1ku3lER4pIdRoe8=
Subject key identifier:   2F:70:91:6C:B3:AB:57:F7:9E:E7:89:3F:48:F3:1B:C4:08:43:CD:E3
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Certificate issuer:       /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial:       1C0F1D9BDC6D6116A6EC08EB9238AE28017B3091
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
Manifest number:          04CC
Signing time:             Thu 24 Apr 2025 22:30:33 +0000
Manifest this update:     Thu 24 Apr 2025 22:25:33 +0000
Manifest next update:     Sun 27 Apr 2025 23:16:33 +0000
Files and hashes:         1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: zsesejcFFyP62LeF02Um0DzzHwP7S2tFrMVRRgxJ++Q=)
                          2: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: IXZfKHMV4wT0A8jOT+57BXARnt3uvIYFTIfQPko6Vms=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 23:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0f:1d:9b:dc:6d:61:16:a6:ec:08:eb:92:38:ae:28:01:7b:30:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
        Validity
            Not Before: Apr 24 22:25:33 2025 GMT
            Not After : Apr 27 23:16:33 2025 GMT
        Subject: CN=2F70916CB3AB57F79EE7893F48F31BC40843CDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:3e:4d:30:49:21:7d:15:4b:2e:75:00:58:
                    31:bd:95:82:4b:e0:7e:18:f0:4d:65:dd:b3:c4:4d:
                    8c:ba:24:41:f9:df:aa:e6:fb:10:1f:b2:88:2a:ec:
                    35:66:0b:1f:b1:f6:8a:e9:c3:fe:5c:1f:aa:23:aa:
                    3f:7f:f0:54:bc:3a:4c:f6:0b:10:9a:5f:35:22:d6:
                    4f:60:aa:4e:f5:80:f4:a5:92:aa:ff:23:69:e7:0e:
                    18:fe:55:ff:71:7a:44:c9:8e:bd:80:dc:e6:43:71:
                    b2:ec:59:d6:6a:81:a8:45:86:a2:44:f5:26:da:6d:
                    ec:ae:aa:85:f7:41:10:8d:0c:2c:39:a5:48:bf:be:
                    7d:d8:b6:86:ac:ec:e7:dd:76:d5:a9:84:4f:05:79:
                    3c:4a:9a:0f:f6:41:93:bf:44:9f:d1:d3:ad:15:56:
                    84:02:63:af:5d:c9:37:9d:aa:8f:76:a8:94:4b:2e:
                    a0:3c:8b:2a:85:c5:1b:43:a8:12:7b:af:0d:97:af:
                    97:4c:00:b4:f4:e6:93:5c:eb:e4:49:be:e2:2c:80:
                    d5:c3:71:ca:85:97:68:c7:40:f0:36:20:c0:c8:b8:
                    2c:1f:02:ab:fa:9f:a3:12:37:2c:84:4c:b6:da:1c:
                    c2:91:3c:d2:55:4c:7e:6b:49:11:d9:7e:fd:a1:13:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:70:91:6C:B3:AB:57:F7:9E:E7:89:3F:48:F3:1B:C4:08:43:CD:E3
            X509v3 Authority Key Identifier:
                keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:31:39:5f:ee:f3:ec:36:57:1b:e4:c0:cc:96:18:52:7d:73:
         09:f0:d6:9a:80:d9:ce:66:f0:21:b5:30:f8:9a:b3:fd:92:e9:
         b7:56:e6:e2:da:7e:fb:50:17:f8:66:75:08:c9:30:ac:d7:1f:
         cd:d1:60:43:a8:fb:7f:dc:c6:58:8b:46:55:e9:f7:d4:5f:ae:
         26:07:1c:69:d7:17:7d:06:2f:f1:a3:7d:f3:57:d5:74:f1:dc:
         e9:54:08:80:21:33:0d:81:d1:3f:3b:00:b2:b3:2f:25:24:d1:
         bc:a0:76:d9:54:65:62:68:fd:77:c3:de:2e:8e:9d:fe:92:d3:
         56:4f:e1:6a:bf:0f:f5:ab:61:c6:56:30:8f:7e:74:cc:8a:28:
         5f:7b:4b:f9:72:31:a1:08:f7:2e:0e:0a:65:57:c8:95:c1:74:
         87:80:1c:e1:c0:40:cd:aa:f1:1d:a3:74:31:9c:7c:cc:77:29:
         6c:4b:d4:7f:9f:b7:03:4f:a0:bd:42:50:2f:e7:bd:d3:fc:18:
         ff:ba:db:37:4d:09:fa:83:5e:2e:21:a1:94:6a:46:dd:8e:c4:
         ac:4f:2f:7f:dc:12:bf:b4:87:fc:08:77:eb:ae:c6:b8:1d:44:
         f7:62:40:f7:66:c4:24:3c:0a:e1:5d:82:e7:03:05:eb:90:71:
         53:ea:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net