Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File:                     42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier:          1xzsiOO30TEVaXBSOpxfFxnlzI6twDMAGFEJq3E/y0M=
Subject key identifier:   79:0E:58:F2:CF:E6:BA:2F:87:88:A4:FC:65:20:9F:44:66:27:26:7C
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       0E70860CF36F29E9D5E4298D4508C6928710EB94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number:          02E8
Signing time:             Thu 24 Apr 2025 22:50:41 +0000
Manifest this update:     Thu 24 Apr 2025 22:45:41 +0000
Manifest next update:     Mon 28 Apr 2025 01:22:41 +0000
Files and hashes:         1: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: By1dWAPEg46DXVByabCVytyBi07eAG8jEBvCh+FGMCE=)
                          2: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: QrpNEb5PRm1Jpg26cGbSFaXMRcE+4W0Mz6xgeDqvQoQ=)
                          3: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: fxDjeBY0/BEHMtQ6bL8ti3t9/pWCK6/hA9xvN9w3BGQ=)
                          4: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: qenZ7hej3sLS1vY58+4t3Rt4+88XfTNSKQnd32cXHbk=)
                          5: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: c+jQs0ElIWSpEW/65Zb1JJymOpSsqz3QthadpLqsPEw=)
                          6: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: cQcs51oIH/qBT9LzGohp+beoJ2Lt/+q2Z6ImGL0wSDI=)
                          7: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: euuIBeIdUT8lgSpCE7TrdJvmyGVkzTEq7+WYT3qs0gs=)
                          8: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: oi7ul2eHrpJm6nKOP1YTFPaOySaj28haxt3SYYHzFYk=)
                          9: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: eWJNrd7oOSiXTA9n1wU9sNOkZqpaejw7YWXovGeNvp0=)
                          10: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: GC2XCJMI5v5mCoLtw49+VhrJ6pQtmY4PlIeJRLvKDDg=)
                          11: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: bXRD5DYpUOHeCiXubU6nJTSoa02/Z8k3WnCQ8nyGZyc=)
                          12: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: i3mVHxINJY1wBocmEZCE7W5aPr3/40jKREEXnt4p3Fs=)
                          13: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: fHTsVCG7K78xsYdQYrXe0iF193572ZNYm2zJxFOLSIo=)
                          14: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: fnQpNPynGuCKS8FnFu7qzmtG5in3paL7Kssdk35/qNE=)
                          15: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: BVmkRiww9s2iXGLUik9+KRKIjYQtkiMniXRMBaIOF5I=)
                          16: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: xT7ihnYBd4rPeXcE6bxebb3PZ9+Wox5KB2ZBowr8kH4=)
                          17: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: Bcr2gJkRvvkdTqMf2vLF/rNqMWBoYpR0xUN/hf52EWg=)
                          18: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 5IwAvBGpI+/LKg0jES5bmNJP2+g1hJrlMzWxKjmGjok=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:70:86:0c:f3:6f:29:e9:d5:e4:29:8d:45:08:c6:92:87:10:eb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Apr 24 22:45:41 2025 GMT
            Not After : Apr 28 01:22:41 2025 GMT
        Subject: CN=790E58F2CFE6BA2F8788A4FC65209F446627267C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:fb:88:46:f0:e1:ec:43:1d:57:6b:a5:ea:
                    d0:b0:c4:69:0f:c0:e3:21:33:1d:1c:f7:98:6d:ad:
                    bf:e1:7b:a4:91:8d:df:1e:63:a3:15:5c:0e:89:55:
                    87:c0:5e:7f:7a:f6:33:42:67:06:7a:5c:94:76:c4:
                    e0:00:f4:c8:ed:e5:3d:69:48:e0:29:85:68:81:29:
                    2c:29:10:80:8a:0a:71:02:a4:3a:f9:0e:e2:f0:c3:
                    3d:14:37:65:30:97:58:b3:ee:27:22:9a:b4:b2:a4:
                    d6:80:f0:be:7d:f9:ec:c1:a3:db:a1:48:9c:6a:52:
                    79:10:2c:29:66:a5:93:1f:ae:b0:e2:36:d3:de:1f:
                    3f:11:f4:06:31:c4:df:66:c5:ed:46:c7:b6:44:a3:
                    7a:0b:5d:68:4c:84:48:7e:16:78:13:3f:c1:25:36:
                    0e:df:3e:53:e6:09:65:f3:4b:4e:28:a8:ee:10:1b:
                    47:4b:2d:e9:9c:00:21:c0:5e:1b:1a:a6:0f:7f:22:
                    21:91:6b:5f:5a:d6:b9:e9:56:f1:c7:54:c4:e3:95:
                    76:3d:68:88:3d:ce:00:f7:8f:f0:de:f0:f6:9b:f0:
                    e3:be:f5:36:25:7c:22:72:d7:05:d7:3a:17:37:48:
                    50:60:ef:53:ba:50:3f:35:70:38:3d:20:a5:91:2b:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:58:F2:CF:E6:BA:2F:87:88:A4:FC:65:20:9F:44:66:27:26:7C
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:91:0a:e2:d3:23:e9:2e:f3:d2:94:45:72:63:e2:3e:9b:
         78:d9:ac:4f:a3:6a:83:b1:0c:bf:20:cf:6a:e9:49:d3:ac:0d:
         94:6e:45:57:5c:03:bd:f4:7b:50:d9:82:97:a5:fb:e8:31:8a:
         ab:8e:ab:d6:6f:48:c6:42:bd:42:bb:66:c2:5d:fc:ce:67:94:
         22:d3:3a:9f:48:74:f8:6b:fc:f5:34:06:f8:6c:33:35:45:81:
         db:b9:ab:3a:68:04:aa:17:8e:fd:b8:b9:46:a5:80:99:3b:13:
         c4:1f:6a:3c:06:04:62:7d:d1:76:a9:82:8e:a0:c7:f5:76:7b:
         91:e6:76:db:0a:ff:50:e9:45:2f:4d:d3:95:93:84:c4:0b:9e:
         92:19:ec:f9:dd:f7:74:75:d9:d4:de:d6:88:06:bf:10:cb:92:
         02:55:5b:77:eb:b2:b4:cf:61:8d:a3:46:b6:84:15:4f:d8:b9:
         c3:f6:36:d6:c8:6a:a8:4d:c9:6c:31:ff:ed:59:68:cb:20:ba:
         89:1f:9a:12:f4:f5:ac:14:ff:f9:76:64:90:2a:a8:b6:2f:df:
         39:22:8c:1f:53:46:9b:16:f6:56:71:5e:2d:a0:02:c3:77:99:
         43:cb:ee:a3:3a:9a:d1:f5:0a:70:90:88:08:e2:14:e5:dc:46:
         0e:c9:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net