Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
File:                     03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json)
Hash identifier:          GrsbmaQpf5C3HYRNjPomFzQgYeFEKxioTpkQunFx4Ow=
Subject key identifier:   DF:24:EE:B1:2E:01:77:E9:D9:A7:0E:CB:F7:63:B9:A8:B0:1E:B2:8C
Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE
Certificate issuer:       /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
Certificate serial:       189E41E46587FB6E61FFF561525E003C01D3010E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
Manifest number:          0347
Signing time:             Wed 23 Apr 2025 11:00:58 +0000
Manifest this update:     Wed 23 Apr 2025 10:55:58 +0000
Manifest next update:     Sat 26 Apr 2025 18:03:58 +0000
Files and hashes:         1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: MFF6chyH84EQVye9YX1AcmXTQPzh13vBchXzUrHacE0=)
                          2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: D1oTnNhgCKhlyJ3cW8vY+L+pUIeYkyHgdFvyp1x9BkU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl
                          rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9e:41:e4:65:87:fb:6e:61:ff:f5:61:52:5e:00:3c:01:d3:01:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
        Validity
            Not Before: Apr 23 10:55:58 2025 GMT
            Not After : Apr 26 18:03:58 2025 GMT
        Subject: CN=DF24EEB12E0177E9D9A70ECBF763B9A8B01EB28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:69:26:68:b8:3a:fe:5b:01:50:e5:c1:36:
                    a7:85:2b:96:85:76:93:b4:65:d3:19:82:d8:49:53:
                    00:1a:06:de:37:f1:fc:61:80:51:c5:5f:0e:75:7b:
                    e2:49:25:08:d6:10:20:19:17:6b:74:ea:84:2c:d2:
                    57:ab:c4:78:8d:1c:5b:74:78:4c:a9:c6:f2:a1:ba:
                    12:47:b1:e5:f2:11:45:db:f2:40:c0:9c:1f:f6:bd:
                    ee:43:a1:ee:b1:f1:60:73:fa:f5:fb:b8:11:ea:b3:
                    3f:f2:a6:2e:db:57:28:47:95:b6:53:10:a6:b4:dd:
                    40:99:7a:f8:a8:0b:76:e0:61:b8:7f:8e:09:55:ff:
                    2c:2a:28:3e:e0:c8:be:e7:3a:76:3a:39:b2:96:72:
                    ba:75:da:cf:18:ac:98:25:89:04:17:d5:2f:86:83:
                    53:26:fe:fd:40:f1:ab:e0:c8:a7:1b:e4:da:09:f2:
                    69:4c:99:49:0d:e1:81:60:44:c8:3d:80:a3:3d:71:
                    be:ca:92:f3:65:10:33:fa:37:db:ec:82:a6:cc:36:
                    c5:cd:a3:49:24:86:e7:f6:9b:06:1a:be:c1:1f:72:
                    f4:9b:71:02:f8:af:c9:ef:2e:8a:d0:6a:7b:f9:60:
                    5e:df:2b:c9:66:85:2d:70:44:f5:e2:44:c0:22:57:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:24:EE:B1:2E:01:77:E9:D9:A7:0E:CB:F7:63:B9:A8:B0:1E:B2:8C
            X509v3 Authority Key Identifier:
                keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e4:6f:7f:69:79:8a:80:99:4f:22:f7:e2:95:f2:03:fe:91:
         74:8e:75:04:e7:df:b5:2f:96:e0:a6:4e:93:83:28:32:b0:7f:
         1f:8e:c0:3f:5a:2c:14:3b:88:07:b4:6c:4f:75:17:6a:a8:e3:
         33:e0:cb:95:9f:c7:52:2a:41:53:20:46:16:63:75:f8:09:f7:
         a0:0b:26:61:5e:86:c6:5d:54:12:40:1e:53:91:88:91:a7:60:
         25:f6:38:25:bb:55:68:39:65:1e:42:ae:11:81:4f:2f:65:d5:
         d8:45:0f:f5:c5:20:cd:6a:7f:8b:8c:3a:49:49:58:79:e9:4d:
         e9:aa:79:4b:8b:23:cf:22:a4:d9:d7:e5:81:8b:61:87:2b:66:
         31:d4:c4:bd:42:4a:52:ab:13:da:9f:a6:d2:e4:23:9f:81:92:
         9b:06:18:b5:7e:72:5c:5e:52:bc:72:9b:4e:ff:a4:13:92:8f:
         9e:9b:c0:23:e4:fc:1f:9e:9c:c0:52:f0:f5:aa:5f:82:c0:4c:
         4d:17:d4:7f:95:e3:e4:8d:b9:7a:ca:46:8e:33:03:97:22:20:
         a4:06:d8:2e:ad:36:f0:de:b7:b0:f7:80:44:b5:f1:67:7f:42:
         80:64:9c:40:c4:ab:c1:4a:e3:4d:78:13:1a:f0:44:31:03:1c:
         2b:90:7b:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGJ5B5GWH+25h//VhUl4APAHTAQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5
NzE0MjZGRTAeFw0yNTA0MjMxMDU1NThaFw0yNTA0MjYxODAzNThaMDMxMTAvBgNV
BAMTKERGMjRFRUIxMkUwMTc3RTlEOUE3MEVDQkY3NjNCOUE4QjAxRUIyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC162kmaLg6/lsBUOXBNqeFK5aF
dpO0ZdMZgthJUwAaBt438fxhgFHFXw51e+JJJQjWECAZF2t06oQs0lerxHiNHFt0
eEypxvKhuhJHseXyEUXb8kDAnB/2ve5Doe6x8WBz+vX7uBHqsz/ypi7bVyhHlbZT
EKa03UCZevioC3bgYbh/jglV/ywqKD7gyL7nOnY6ObKWcrp12s8YrJgliQQX1S+G
g1Mm/v1A8avgyKcb5NoJ8mlMmUkN4YFgRMg9gKM9cb7KkvNlEDP6N9vsgqbMNsXN
o0kkhuf2mwYavsEfcvSbcQL4r8nvLorQanv5YF7fK8lmhS1wRPXiRMAiV5ptAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3yTusS4Bd+nZpw7L92O5qLAesowwHwYDVR0j
BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1
REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0
MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw
NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE
REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD7kb39peYqAmU8i9+KV8gP+kXSOdQTn37Uv
luCmTpODKDKwfx+OwD9aLBQ7iAe0bE91F2qo4zPgy5Wfx1IqQVMgRhZjdfgJ96AL
JmFehsZdVBJAHlORiJGnYCX2OCW7VWg5ZR5CrhGBTy9l1dhFD/XFIM1qf4uMOklJ
WHnpTemqeUuLI88ipNnX5YGLYYcrZjHUxL1CSlKrE9qfptLkI5+BkpsGGLV+clxe
Urxym07/pBOSj56bwCPk/B+enMBS8PWqX4LATE0X1H+V4+SNuXrKRo4zA5ciIKQG
2C6tNvDet7D3gES18Wd/QoBknEDEq8FK4014ExrwRDEDHCuQe+g=
-----END CERTIFICATE-----
Generated at Wed Apr 23 13:25:44 2025 by rpki-client on console.sobornost.net