Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft
File:                     71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json)
Hash identifier:          Wr/ZcPLPn1w2+7eGrax9oqgYLouxg+F1O6nc/2lNevk=
Subject key identifier:   49:70:DE:61:63:D1:1A:0C:66:A9:9D:79:9D:E3:5E:DD:8F:FE:BD:F2
Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95
Certificate issuer:       /CN=71876CD3DD087E9543A347F614A4D24A87A40F95
Certificate serial:       70D39D12F7ED96120046BA087A53D75EC08D4683
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft
Manifest number:          0174
Signing time:             Wed 23 Apr 2025 23:40:45 +0000
Manifest this update:     Wed 23 Apr 2025 23:35:45 +0000
Manifest next update:     Sun 27 Apr 2025 06:16:45 +0000
Files and hashes:         1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs=)
                          2: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: ci5I/MxrgoJ1rfjV0dWp5xS5P0hJgjy6xXmWTHTwpMQ=)
                          3: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: Z784b1MoLbRbUFumD7EBYAw+chmN+4N0hbse7u47tco=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl
                          rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 06:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d3:9d:12:f7:ed:96:12:00:46:ba:08:7a:53:d7:5e:c0:8d:46:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95
        Validity
            Not Before: Apr 23 23:35:45 2025 GMT
            Not After : Apr 27 06:16:45 2025 GMT
        Subject: CN=4970DE6163D11A0C66A99D799DE35EDD8FFEBDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:f6:ff:cd:8e:cf:04:a3:df:5a:e0:5f:fe:
                    26:97:53:0b:99:e1:e7:63:37:90:9a:60:9a:e6:42:
                    4f:98:99:53:8b:8d:99:07:05:c5:30:f4:31:92:71:
                    ea:f3:a1:42:95:d2:7d:88:c5:b3:67:0e:67:f4:60:
                    ea:2b:2d:64:ee:85:0a:ef:59:f6:6f:22:29:d6:60:
                    67:e6:2f:be:c0:b9:80:0b:a7:46:ac:bc:1a:7f:45:
                    1b:88:e2:f6:d4:d5:b3:06:c3:2e:d8:b1:dd:b2:0d:
                    b5:42:7d:54:24:e3:5f:66:7c:07:8c:03:a0:f4:23:
                    4c:f3:f3:2a:5e:c0:c8:de:da:97:96:f2:a6:2a:6a:
                    c0:50:3a:be:da:94:28:d9:54:4b:10:cf:6b:96:00:
                    15:b6:69:48:9b:32:e3:4b:7e:10:08:09:7e:34:02:
                    04:9e:03:e7:de:33:10:5b:5c:5a:42:54:9d:7e:b2:
                    67:8d:42:02:58:b6:ef:ad:86:f6:a5:08:8b:9e:07:
                    8d:43:dc:c3:6a:de:cc:60:83:46:2b:f6:8e:40:c8:
                    ef:d1:56:fc:92:81:9b:9d:75:54:4c:e0:9d:82:0e:
                    07:af:a2:48:4c:d0:b4:b9:32:f7:5d:c5:05:3e:20:
                    3e:93:67:b9:91:89:9f:f4:7e:01:43:f8:73:e7:e2:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:70:DE:61:63:D1:1A:0C:66:A9:9D:79:9D:E3:5E:DD:8F:FE:BD:F2
            X509v3 Authority Key Identifier:
                keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d8:aa:b7:36:40:47:74:67:9f:b5:71:85:e9:b4:42:75:98:
         44:8d:0d:4a:f4:d7:ff:91:6c:fc:07:f1:5d:8a:33:04:d9:36:
         87:00:4b:33:48:0f:08:d0:00:0f:83:37:ae:75:99:e6:3e:47:
         98:97:14:73:a5:c5:a2:7d:7b:1f:9f:6c:b7:be:ed:a8:6e:4d:
         33:08:4e:0e:61:b2:91:c5:db:ad:09:6c:3f:19:f5:2f:55:fe:
         36:83:c9:d6:bb:3b:ec:e0:95:dc:01:77:18:6c:d0:da:98:97:
         26:b0:80:e4:9c:ff:a6:0c:54:b6:17:52:05:26:bd:4b:cd:a6:
         61:20:39:22:ea:93:dd:d1:d8:2b:c1:d4:70:5b:b4:ed:60:59:
         fe:1e:45:0a:e8:08:3c:e2:3b:01:73:50:e0:8c:93:aa:0d:e0:
         f1:58:16:ae:bf:f9:99:a9:fe:77:ff:d7:a9:1a:4c:06:ff:c0:
         63:5e:fd:e5:eb:e4:e0:99:15:59:44:5e:90:71:0f:19:59:8d:
         c1:87:94:74:62:92:ff:8c:98:d8:d9:1e:94:04:68:41:f8:80:
         ce:a5:66:56:31:7f:c2:18:d3:fe:8b:8f:c9:30:fa:6b:b3:d8:
         d7:28:7a:7a:f8:fb:1b:7a:da:f6:a6:83:ea:c8:cf:58:c5:7a:
         83:9c:e3:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcNOdEvftlhIARroIelPXXsCNRoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4
N0E0MEY5NTAeFw0yNTA0MjMyMzM1NDVaFw0yNTA0MjcwNjE2NDVaMDMxMTAvBgNV
BAMTKDQ5NzBERTYxNjNEMTFBMEM2NkE5OUQ3OTlERTM1RUREOEZGRUJERjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzX/b/zY7PBKPfWuBf/iaXUwuZ
4edjN5CaYJrmQk+YmVOLjZkHBcUw9DGScerzoUKV0n2IxbNnDmf0YOorLWTuhQrv
WfZvIinWYGfmL77AuYALp0asvBp/RRuI4vbU1bMGwy7Ysd2yDbVCfVQk419mfAeM
A6D0I0zz8ypewMje2peW8qYqasBQOr7alCjZVEsQz2uWABW2aUibMuNLfhAICX40
AgSeA+feMxBbXFpCVJ1+smeNQgJYtu+thvalCIueB41D3MNq3sxgg0Yr9o5AyO/R
VvySgZuddVRM4J2CDgevokhM0LS5MvddxQU+ID6TZ7mRiZ/0fgFD+HPn4vF/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSXDeYWPRGgxmqZ15neNe3Y/+vfIwHwYDVR0j
BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE
MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0
MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl
ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy
NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA3Yqrc2QEd0Z5+1cYXptEJ1mESNDUr01/+R
bPwH8V2KMwTZNocASzNIDwjQAA+DN651meY+R5iXFHOlxaJ9ex+fbLe+7ahuTTMI
Tg5hspHF260JbD8Z9S9V/jaDyda7O+zgldwBdxhs0NqYlyawgOSc/6YMVLYXUgUm
vUvNpmEgOSLqk93R2CvB1HBbtO1gWf4eRQroCDziOwFzUOCMk6oN4PFYFq6/+Zmp
/nf/16kaTAb/wGNe/eXr5OCZFVlEXpBxDxlZjcGHlHRikv+MmNjZHpQEaEH4gM6l
ZlYxf8IY0/6Lj8kw+muz2Ncoenr4+xt62vamg+rIz1jFeoOc4/o=
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:49 2025 by rpki-client on console.sobornost.net