Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
File:                     285218D0288125F1010B5469F03888B08A661969.mft (raw, json)
Hash identifier:          pcmGIkv2fJIe8jpVPFyTzb7gaLmmCbOEVTtvPGCleds=
Subject key identifier:   8B:08:EF:A9:12:8F:50:F3:0A:17:A0:3F:11:07:9A:B3:D1:86:01:16
Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69
Certificate issuer:       /CN=285218D0288125F1010B5469F03888B08A661969
Certificate serial:       3FC69525D9FE8227D9CE284B8F22C824288B1DAD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
Manifest number:          04C5
Signing time:             Wed 23 Apr 2025 16:31:23 +0000
Manifest this update:     Wed 23 Apr 2025 16:26:23 +0000
Manifest next update:     Sun 27 Apr 2025 02:32:23 +0000
Files and hashes:         1: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: k8P5AhT4s12SuVIrOLY9OUPcVfTVNiJQc/ut89s+Rrw=)
                          2: 285218D0288125F1010B5469F03888B08A661969.crl (hash: GGuC0fPCAzG9MjEroXU1Tn886RoH+UdS+HHiV44LEe0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl
                          rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c6:95:25:d9:fe:82:27:d9:ce:28:4b:8f:22:c8:24:28:8b:1d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285218D0288125F1010B5469F03888B08A661969
        Validity
            Not Before: Apr 23 16:26:23 2025 GMT
            Not After : Apr 27 02:32:23 2025 GMT
        Subject: CN=8B08EFA9128F50F30A17A03F11079AB3D1860116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:a0:50:07:cc:07:be:79:73:ca:a3:ca:4a:
                    d5:34:c4:f8:c6:ed:16:76:18:a2:ca:82:73:f4:0f:
                    94:1d:ea:8a:e3:3a:7d:b7:8c:2f:db:4f:bc:22:58:
                    0c:ec:67:24:61:71:97:78:60:c7:a0:9e:00:24:1c:
                    10:01:b7:7e:54:31:dc:cb:dd:c7:f1:c5:b4:11:8f:
                    1f:eb:3d:1b:f2:51:24:d6:58:4f:9f:ff:e0:e7:7b:
                    7a:37:3e:40:dc:94:5d:c2:de:4b:55:e9:ad:d2:91:
                    a1:6d:6e:71:75:37:45:8f:42:29:f9:48:69:db:15:
                    c2:0c:ae:75:26:76:27:cc:c4:c8:3c:51:ac:29:ee:
                    c7:85:39:60:b4:55:5d:28:80:a5:f2:aa:98:2b:0b:
                    08:7b:3b:83:ee:b4:a5:d3:ee:d2:3a:52:87:28:a9:
                    4d:3d:a0:b1:8b:3b:ad:df:03:36:a9:b4:81:48:53:
                    0b:32:74:52:30:8e:35:73:39:3a:a7:1b:b6:28:25:
                    71:88:bb:e2:a2:f4:9e:ca:fb:24:30:7a:10:41:d6:
                    ee:b6:66:d0:c9:53:06:7b:25:25:6d:1a:ef:f2:c9:
                    ac:b2:24:88:30:ac:62:68:9c:12:f8:71:98:fb:5b:
                    a3:89:78:89:30:3b:71:e9:51:e8:20:54:10:f5:4d:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:08:EF:A9:12:8F:50:F3:0A:17:A0:3F:11:07:9A:B3:D1:86:01:16
            X509v3 Authority Key Identifier:
                keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:76:0c:4e:4f:7e:68:04:16:98:85:fd:43:a5:ae:c2:84:
         cf:ff:38:be:6a:2d:ff:e1:9d:9e:ab:af:df:c3:fa:95:27:61:
         1b:7f:60:1b:9b:d5:90:5c:f0:f4:17:51:0c:91:bf:73:d0:2c:
         10:19:ee:0c:1b:2e:e3:03:30:39:bc:c6:bc:88:46:84:e4:50:
         04:1c:36:e9:c1:68:d5:43:db:c1:55:43:94:97:fb:7b:40:cd:
         ac:d8:56:b0:62:5d:00:6f:5a:04:52:0a:24:0d:2a:49:cb:1d:
         bc:d3:29:bb:ea:6a:52:07:77:36:9f:a6:09:8e:19:b8:a0:54:
         d0:3e:f8:86:5d:6a:3d:54:fc:3e:6b:71:eb:a2:00:22:e8:c8:
         4d:b2:16:39:83:3e:a5:56:30:8e:57:67:ce:48:94:5c:be:0e:
         5c:cc:df:95:6a:11:ac:28:2c:d8:ad:11:66:0a:67:36:f5:bb:
         03:16:f8:03:63:49:6e:a0:78:5e:12:2e:95:bb:40:b6:91:ea:
         cd:30:f2:06:c2:80:e7:1e:a3:f5:a0:6e:d5:a6:0d:76:9e:c1:
         eb:f1:a9:10:23:4f:8e:05:93:c8:40:68:b9:22:73:51:cd:1f:
         51:69:dc:cf:b9:3f:3f:04:76:9e:3b:38:0a:bd:e9:7d:56:43:
         d5:58:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net