Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
File:                     BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json)
Hash identifier:          t6Gft5MfPSqCLITpbBkf4AVfE99UWX8jEalGelhhxOo=
Subject key identifier:   8A:3C:9C:91:47:B9:43:47:18:67:7D:AE:D2:E1:B6:E8:1B:7C:20:C4
Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19
Certificate issuer:       /CN=BA3C6E8206951343A970BD80B8DC3351252A9719
Certificate serial:       3CE07C99E50556B6C741B76E8651375B38559C4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
Manifest number:          63
Signing time:             Wed 23 Apr 2025 15:21:19 +0000
Manifest this update:     Wed 23 Apr 2025 15:16:19 +0000
Manifest next update:     Sat 26 Apr 2025 18:05:19 +0000
Files and hashes:         1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: bRxB1/XYWBuRDsFTyowa+aqFQkf4scGUR4oQ2TVJrXQ=)
                          2: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: BNmtAQna6Keyyp8uaL0JmpAzXcKuvPhuFekoW8Pfu3s=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl
                          rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 18:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e0:7c:99:e5:05:56:b6:c7:41:b7:6e:86:51:37:5b:38:55:9c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719
        Validity
            Not Before: Apr 23 15:16:19 2025 GMT
            Not After : Apr 26 18:05:19 2025 GMT
        Subject: CN=8A3C9C9147B9434718677DAED2E1B6E81B7C20C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:cc:19:ef:64:34:31:81:14:f2:1c:06:8c:
                    a3:67:a8:35:5e:ec:0b:60:5a:e5:ff:f9:03:0c:27:
                    bd:fc:73:6a:4b:f1:fb:bc:62:81:94:12:08:11:da:
                    c3:46:0e:a2:ad:40:92:1a:50:21:28:d2:7e:4b:cc:
                    ae:64:7f:c1:64:4d:89:f2:bc:a8:29:0c:69:76:93:
                    79:7e:10:36:e7:f6:6c:de:15:b4:22:f8:61:c3:f2:
                    37:fd:e1:4c:38:67:e2:a9:c3:c1:89:b8:6a:e7:4b:
                    3b:32:6a:2e:fb:ac:9a:77:2b:fd:a4:7c:cb:44:75:
                    7a:3a:18:23:74:71:22:07:08:a7:85:2b:63:01:a0:
                    05:eb:ca:66:d2:22:ff:6b:f4:5b:bf:b2:4a:19:d0:
                    3d:5e:18:c1:22:c5:ad:54:48:9a:7a:8d:30:1d:d4:
                    f7:a5:1b:ff:8c:a8:64:77:b5:6b:88:7a:aa:49:ad:
                    a7:42:17:de:a1:b2:68:8c:fe:71:54:aa:42:d3:69:
                    96:cb:75:88:98:f9:e5:5d:62:f6:80:31:84:d6:6c:
                    5c:d8:b3:b6:79:2f:c4:31:7a:4f:a3:a6:f8:b4:d0:
                    f6:70:be:77:ae:72:82:a6:3a:19:31:83:af:13:a3:
                    82:f8:0e:2d:6c:65:94:9a:f8:05:d7:ee:17:66:a1:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:9C:91:47:B9:43:47:18:67:7D:AE:D2:E1:B6:E8:1B:7C:20:C4
            X509v3 Authority Key Identifier:
                keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:89:dd:05:cd:d2:93:82:6f:5d:d2:47:c7:ca:6f:1f:eb:
         03:bc:d2:b1:37:67:1f:f4:4f:7b:39:ee:2c:28:87:ae:ac:07:
         d4:a8:2c:86:76:f9:d8:81:b6:5d:7d:2a:e4:d0:2e:75:f1:90:
         13:d9:ef:5b:28:12:65:bf:ba:93:c1:41:f3:05:57:4b:21:b2:
         31:f6:69:2a:3e:1f:33:27:9f:39:24:2b:5b:24:cb:1e:94:14:
         31:30:61:33:33:80:cc:26:df:15:99:3e:af:37:74:9a:ae:96:
         da:3e:11:e9:51:86:68:43:1b:db:d5:9d:a6:df:70:8c:4e:f8:
         85:d8:57:d5:d4:39:6d:54:47:f3:04:63:f6:cb:f5:e8:8a:66:
         e0:84:68:d3:07:24:fb:bb:30:92:82:0b:98:bf:d7:5e:ad:26:
         27:1f:9b:39:b5:44:49:1d:e5:b9:a5:28:4c:c8:6f:d9:94:97:
         6c:1c:f9:02:10:da:85:6e:15:a3:1e:76:ad:a5:92:0c:c6:68:
         f9:f1:da:e9:2f:06:48:fc:28:58:8c:ed:58:65:39:ee:ac:24:
         1e:f9:04:03:e6:e2:83:b5:f0:58:5e:a5:73:81:5e:07:f7:d5:
         96:48:80:bc:f1:68:74:34:61:44:22:8a:2d:f1:d9:66:39:ce:
         54:d1:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net