Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
File:                     B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json)
Hash identifier:          +W+2Mi0cMjFl1rmZIacKOaTvfmHKojMpPMnEgstqPZk=
Subject key identifier:   91:60:67:5E:19:96:85:21:20:8F:50:69:36:C5:E8:FE:E4:8B:15:4B
Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
Certificate issuer:       /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
Certificate serial:       5F095C9A8CCED5E88C4F5C66859508D6BC41C9AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
Manifest number:          0144
Signing time:             Thu 24 Apr 2025 21:32:12 +0000
Manifest this update:     Thu 24 Apr 2025 21:27:12 +0000
Manifest next update:     Mon 28 Apr 2025 04:56:12 +0000
Files and hashes:         1: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: OXNX1WpnGEvTtG2QVsXYBr1o3UirT2JM9Lg+MbGiddU=)
                          2: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=)
                          3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=)
                          4: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: NlTsaI1TjxaGZT5LLK81P3HGB2rSIXmok+Oj2714nmE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl
                          rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:09:5c:9a:8c:ce:d5:e8:8c:4f:5c:66:85:95:08:d6:bc:41:c9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
        Validity
            Not Before: Apr 24 21:27:12 2025 GMT
            Not After : Apr 28 04:56:12 2025 GMT
        Subject: CN=9160675E19968521208F506936C5E8FEE48B154B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:7a:61:c3:62:3d:0e:2e:3f:32:93:73:e1:
                    05:fa:a0:7b:48:b9:5a:75:69:ce:23:6e:dd:cc:ba:
                    14:45:73:00:1f:2f:d3:21:9a:d6:17:35:e7:c5:72:
                    8b:a2:36:07:57:96:e9:74:3f:09:03:4c:6b:3d:93:
                    bd:4f:e5:f5:5b:ee:a0:18:12:16:7b:e5:b5:66:45:
                    cd:db:02:6a:11:6d:d3:5a:b7:44:44:d4:32:a9:7c:
                    da:5a:41:5e:b6:2a:8f:c8:55:46:a0:3a:67:cc:2d:
                    2d:48:be:07:ca:22:8f:88:c4:fd:5c:4d:cc:9d:fd:
                    4f:d9:d1:d5:4a:44:b1:fc:fb:f3:d6:d9:bc:7b:ec:
                    2b:7d:b1:ac:48:92:06:83:dc:01:86:c0:b2:4a:3b:
                    3c:e6:cc:64:e4:e9:3c:78:25:ce:bd:85:d6:6b:dd:
                    67:d7:99:f8:46:fa:49:25:5c:13:c4:f1:0b:18:b2:
                    a1:95:ee:4c:82:25:67:b1:e3:70:5c:25:30:e3:21:
                    94:98:98:e3:46:99:b3:c1:8a:8a:7a:41:8f:b5:1d:
                    1f:3d:ee:f2:e6:11:68:1c:f7:6f:6a:6b:1f:a4:04:
                    94:a8:34:ba:bc:09:9b:30:b5:7a:47:84:fe:30:10:
                    3f:1d:f0:d2:0c:84:59:41:37:57:62:6b:5b:ca:2e:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:60:67:5E:19:96:85:21:20:8F:50:69:36:C5:E8:FE:E4:8B:15:4B
            X509v3 Authority Key Identifier:
                keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:ae:2c:85:df:6f:68:b4:78:0e:8f:e0:e9:17:cf:9f:02:
         d0:13:c4:b1:af:25:ef:30:a0:17:ea:bb:1e:82:fd:ec:7d:a4:
         72:29:59:31:0c:37:3d:4d:df:7a:b8:48:1a:20:74:9c:c0:ad:
         be:e7:2f:45:6f:cf:52:ca:b8:8b:bd:16:54:02:2e:8f:b0:12:
         b6:ff:63:18:c1:06:60:13:02:12:53:95:8f:a4:ab:5a:17:1d:
         fd:57:3a:79:22:91:06:bb:1a:aa:5c:f4:bf:ad:68:b5:73:b9:
         64:6f:5a:7a:f9:a8:77:81:97:3d:b7:91:3d:49:6c:bd:5e:91:
         a2:b8:4e:46:a4:c4:c1:25:23:ea:70:c3:e6:5a:ae:59:f0:b1:
         46:8a:d0:22:65:fa:46:2c:48:15:f0:7d:e8:e2:9d:cb:c4:be:
         cd:4b:08:9b:cb:55:50:9a:bc:2a:ae:1b:40:23:15:f6:f9:ef:
         90:3f:49:5f:36:5a:0b:a2:c9:a6:2d:53:c3:be:c8:95:f6:38:
         43:35:65:62:b5:9c:e7:00:92:8d:78:45:97:cb:b5:48:34:23:
         3a:11:5b:a6:5c:bd:0a:10:f2:0e:66:cf:de:dd:93:b2:a3:17:
         06:97:55:75:84:08:20:4f:4c:b1:71:2e:61:26:3e:6a:d8:f9:
         13:ed:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net