Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
File:                     14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json)
Hash identifier:          jI7UsR518Yp3bwsdGSlq+p2AN1k3gtZJXJrb0P2xYys=
Subject key identifier:   EE:25:07:79:F1:89:02:CC:7C:BE:22:21:1F:BD:D4:45:30:B0:2B:D9
Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61
Certificate issuer:       /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
Certificate serial:       2CAFD8FBA96974DFBBC891BCC31588B547ED5A6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
Manifest number:          0136
Signing time:             Thu 24 Apr 2025 09:31:43 +0000
Manifest this update:     Thu 24 Apr 2025 09:26:43 +0000
Manifest next update:     Sun 27 Apr 2025 09:43:43 +0000
Files and hashes:         1: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: Ra4kBxyKq0eMRR5T+q214TFxoVWgjk/J53dcHzjeFD8=)
                          2: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: mP8WVmTKYNzFEkZRKu4nVtuMU5BEkaKR+7/E/WoIiBc=)
                          3: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: u880hi+D7DiVMZTtM0R2zluDGsZisp33kG58HiXq4yE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl
                          rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 09:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:af:d8:fb:a9:69:74:df:bb:c8:91:bc:c3:15:88:b5:47:ed:5a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61
        Validity
            Not Before: Apr 24 09:26:43 2025 GMT
            Not After : Apr 27 09:43:43 2025 GMT
        Subject: CN=EE250779F18902CC7CBE22211FBDD44530B02BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:01:d2:d5:91:af:d7:74:fc:22:3c:94:4a:
                    31:86:95:e1:02:ac:ef:5c:da:14:a0:2e:36:86:eb:
                    53:29:07:ae:68:86:f3:08:c2:90:b0:b6:7c:6d:dd:
                    d3:94:ed:da:c9:3f:01:1a:33:f6:54:ea:03:51:23:
                    fe:74:16:b4:89:06:fb:68:b8:7c:0c:07:c9:b2:12:
                    c6:57:de:97:9d:66:ae:2e:81:cb:2c:0a:2b:83:af:
                    5c:71:2c:df:64:07:b0:1c:eb:31:58:60:cd:e3:16:
                    4f:33:df:0e:ac:1d:be:e4:35:2c:2f:81:58:ee:c3:
                    65:95:2e:3f:b8:4e:1f:3f:b4:2e:cc:7e:1c:43:49:
                    ab:cd:0e:58:e1:4f:a7:15:21:b3:86:a2:ee:00:38:
                    34:12:09:20:85:ce:c0:dd:da:69:78:8b:3c:82:c5:
                    26:d4:00:13:35:b1:29:e7:5c:dd:fd:09:c6:f6:e2:
                    c9:79:a4:8c:22:37:ee:8c:45:55:9b:21:f0:79:58:
                    42:0c:f8:d5:af:19:47:73:e3:72:50:4c:67:6a:e7:
                    15:e3:19:81:54:39:66:75:62:54:4a:57:a0:4b:89:
                    ab:dc:41:f1:71:44:b1:e7:e7:cd:e2:43:35:03:86:
                    51:2c:54:ba:f6:5d:02:79:41:1b:1c:d5:f9:77:09:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:25:07:79:F1:89:02:CC:7C:BE:22:21:1F:BD:D4:45:30:B0:2B:D9
            X509v3 Authority Key Identifier:
                keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:35:dc:1b:7d:82:17:f8:bc:c1:70:d2:6c:b6:b5:ad:db:
         48:94:e6:4e:ac:8f:64:44:6b:48:7f:19:2f:ca:71:5d:4b:7d:
         12:15:09:95:33:48:80:20:b5:f3:25:e1:49:bf:00:ad:9c:52:
         a8:5b:7d:35:d2:c1:ca:ae:e3:1e:77:14:20:86:3d:1d:9c:20:
         83:ab:1e:ff:34:7d:b8:cd:b5:d2:d2:ec:f1:6d:dd:16:0e:a5:
         bd:08:e4:5a:f0:89:35:ef:99:54:16:de:1c:96:37:be:0e:6d:
         30:93:e1:1f:ca:a2:de:02:16:f6:aa:58:ee:b4:5f:f0:fa:77:
         ec:53:21:cd:45:98:fa:8a:c9:61:be:61:08:65:37:58:c1:9e:
         7f:c0:74:89:d6:35:c4:96:e8:30:a1:e6:f1:e4:d8:d3:4d:98:
         9e:d9:69:2e:c5:ae:35:25:55:77:0f:b0:d8:ac:64:f4:d5:c0:
         39:08:d8:c7:fa:cd:35:3a:7a:a7:98:ac:aa:65:85:95:fc:6a:
         9c:9e:fb:89:b2:66:61:1b:c0:9b:5d:7d:86:ae:15:fa:c4:69:
         bc:94:c1:b0:39:1e:d7:f8:28:09:7b:37:fc:09:0a:ee:39:e6:
         ee:9e:ce:53:5b:bf:ec:73:4b:a5:2d:0e:10:df:75:90:86:da:
         32:e7:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net