Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
File:                     C00163880F235714759920507217F2A7D557C953.mft (raw, json)
Hash identifier:          SI+RObjVlL/iLaln3f+ThUwi1JhKxM4oJ0so6CdjK9U=
Subject key identifier:   6B:58:71:D5:35:2E:6B:3D:53:D8:66:72:59:7E:2D:43:2E:45:56:3E
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       41DF3796BC11069B3C8CB46657C3C00F71C2DB92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
Manifest number:          04DA
Signing time:             Thu 24 Apr 2025 23:01:06 +0000
Manifest this update:     Thu 24 Apr 2025 22:56:06 +0000
Manifest next update:     Mon 28 Apr 2025 04:38:06 +0000
Files and hashes:         1: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: peoi92UYki92OlMKYXE7q6FGXu3QDKL092I9QxG8hOk=)
                          2: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: vJEkgcLpU3cf/IfScJ12Mu6c2mkTNJRJxXf7tOrvqsU=)
                          3: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: bsRtn7HqcpQRX69WpTIALDf59zF0XM0taxugCPsZKAs=)
                          4: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: fv7w6z62outeFY04yktIZFxsP8pQo+LaBilVbns7Fng=)
                          5: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: V5/+oe0yc47TDeQuvZAPNLqrTj16mL6buLmaKxjOGog=)
                          6: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: IDWCZT4uAeHS9R8+qCUs6bMdQGmyEUG0b6ZQgSamVag=)
                          7: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: 8Pbf5fsxv/JzP6C1MTXqHphtIKSudWZyH6TaxId01SE=)
                          8: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: drDWXbS5Lt2BNjwhp2t9NFg/ubNQHhmV8ihSFb/W+xw=)
                          9: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: X1M4lkdlV+Ji88HiSy4MoehizuXPUPqhQ4nsudueXzM=)
                          10: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 4drbhys0k9nwMVhQ3qP8hx5pwYTiOzSCA3fRbQudv88=)
                          11: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: pVP8WNT6LU5nlRqRUxl8FgSkFnHlZF7d9Y3T2wIWbOI=)
                          12: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: J/qEk8PLS2L818NmmW0MNEe+BNloyc7SI+CudCB88po=)
                          13: 34332e3235322e3135362e302f32322d3234203d3e203535363636.roa (hash: RejeS3+iaS53ceAS6fuGs26b5emqFusVNb6sZtoMkNY=)
                          14: C00163880F235714759920507217F2A7D557C953.crl (hash: XA0UaeTiWg8lg/X40F1Ke0PMzKWD5NKMZJdUn2uj5uQ=)
                          15: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: vUUnROqus6D3mRY4HQAIFQ7ChbN3n89TAiS9dIrWGT8=)
                          16: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: Ewo+otbU3EuAz7CmopHziGOTbYOmapFScMdrRGG9Lcc=)
                          17: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: gu2eLJYOhzvMAWqCTll0Z1vHSzpodGweSdH5sGIIl3o=)
                          18: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: JYMDp6E4TEckql4p/4GjSNO2rr/124noQyLp4F0BuMo=)
                          19: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: M5MIXM9yrLqkivi97+1D94IkM8JBddI+ZQwKNBZcwPA=)
                          20: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: prxETRZ+UcJYInSy8kj+pHh+ePpdBSveL40hYMcOpu4=)
                          21: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: /9HEDitBud2JL5PjNF8lccXxuUn2nEtlKhSkIJ1OpE8=)
                          22: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: ojFdU43pMzAF8Kl2ss98Rrj2MseDcSjIaVkU6XMeYuI=)
                          23: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: /nevEPzljzS1GPlEHXnOO2d6UHLxx+c29+SvhwCD4hA=)
                          24: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: jLKCSwUB/7+RWWMUUnjb77Vl80z1WI/m0WnLZPBMhZg=)
                          25: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: /N+GbbnL1idqgDjtW6KvcgPSGuY52hOxy4FItcWTp7M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:df:37:96:bc:11:06:9b:3c:8c:b4:66:57:c3:c0:0f:71:c2:db:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Apr 24 22:56:06 2025 GMT
            Not After : Apr 28 04:38:06 2025 GMT
        Subject: CN=6B5871D5352E6B3D53D86672597E2D432E45563E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:4c:13:1c:a1:99:cf:ff:29:24:52:65:e7:
                    a6:d9:d7:04:84:3d:e4:ff:0d:e6:12:19:bb:fb:52:
                    e8:7b:a9:c2:e0:03:63:cf:2a:0a:79:e9:38:96:91:
                    12:90:b8:ac:21:b9:a2:4b:84:20:6f:24:76:ff:35:
                    0d:0e:ca:6d:e8:21:c9:6d:ac:76:03:b8:33:4e:51:
                    36:fa:91:c5:5c:c4:76:f5:b0:e3:56:94:60:e5:34:
                    6c:a5:94:6a:5d:cb:a2:9e:83:95:54:85:ed:92:0a:
                    bf:f3:33:30:4f:c2:4e:36:57:76:73:e5:ee:b5:dc:
                    29:18:cd:27:04:7b:8f:c4:24:6c:b9:65:94:13:12:
                    a0:f7:15:f1:d3:aa:da:f0:a1:34:08:d8:04:13:8d:
                    3e:bf:d1:ee:43:89:17:22:40:b7:29:99:7c:37:2e:
                    54:59:96:92:14:c5:ba:8d:2a:f6:6e:3f:d3:9a:08:
                    34:83:7f:b0:a8:b6:ad:89:f3:a9:76:a6:1d:4f:8a:
                    32:d4:0b:d9:94:b4:43:a5:90:67:3a:71:4c:c4:91:
                    25:ee:ba:dd:cf:d6:38:8a:89:66:e2:1b:d2:6a:72:
                    37:22:d7:d3:e0:e4:fd:34:2a:72:8b:68:e0:9a:da:
                    09:ff:67:dd:9a:34:9b:78:a3:7d:b7:ea:48:46:e0:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:71:D5:35:2E:6B:3D:53:D8:66:72:59:7E:2D:43:2E:45:56:3E
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:c2:86:58:2a:42:6e:46:15:8d:3d:74:4c:27:06:d4:df:
         39:72:b0:3d:a4:e7:ff:8c:a6:0e:03:ec:8e:fc:a7:3c:2d:0b:
         78:1f:48:81:31:f8:4a:bf:b9:3a:a9:06:7a:e2:2a:66:9d:cc:
         b8:6b:87:90:6f:98:19:20:bc:e6:7a:94:7b:2a:a9:3e:0b:da:
         4a:72:c2:cc:f3:d9:b0:fa:72:a2:e4:f6:22:68:ea:f7:72:90:
         3b:6d:df:b4:4f:8f:47:63:9d:9c:56:9e:fd:3c:65:55:c9:b7:
         c4:15:be:c4:13:db:13:85:26:96:9d:f3:9d:24:20:56:dd:b1:
         74:f6:77:15:36:65:a3:5b:62:47:92:48:09:41:1e:f6:7d:2e:
         91:62:f8:bd:cc:ff:28:55:f4:d2:6d:3b:f2:ee:c7:d0:e0:34:
         1d:66:26:e1:8b:84:0d:42:d6:9b:aa:ce:95:a5:07:88:bd:33:
         c1:bf:2e:82:37:76:dd:a1:65:da:63:f5:0e:ce:bf:b1:07:4b:
         62:cc:9e:8b:42:39:dd:1d:1e:41:eb:00:60:24:66:3b:4d:f7:
         b7:5e:94:a8:dc:0f:32:f2:fa:26:58:e9:75:79:48:d4:aa:6f:
         dc:02:8a:f2:0c:d7:84:d6:b5:d6:5b:29:5b:16:3a:44:a0:7e:
         bf:ea:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net