Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          DpqT+CWp+2jy+BZVZjS0HPJw6081+QtNbp8W1kFBbmY=
Subject key identifier:   84:9B:8C:76:CF:5B:B9:05:D4:EE:24:2A:43:04:60:A8:CC:94:E7:3C
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       0C9A2F3A39C9AF674C7E232CF8654DA900C7ED88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          04CD
Signing time:             Thu 24 Apr 2025 02:41:54 +0000
Manifest this update:     Thu 24 Apr 2025 02:36:54 +0000
Manifest next update:     Sun 27 Apr 2025 13:44:54 +0000
Files and hashes:         1: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: acQbJQpWqGWIfvq9W6fl9QpMJKA8AlxG/taJBCqg2AI=)
                          2: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: S14Z6UvQgxm3zvnB7IqJQnjifft19IGaxbuliv63HPA=)
                          3: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: ehMw7XipDXtku35OIScfEFa1n231s20Vh+1JJFGZJOg=)
                          4: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: qLMqaWG01btU4DjLVKlNjSmJQeLYWY8XvQDF/McekDU=)
                          5: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: 2Xzrd99gfWjLyXPyVFPR6/hDG8K/iUOh9y8qCTgaWaM=)
                          6: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: Xt7X2bDgMkDTBBHqsSxamiZR8k2GuMHWvJZy4/PpiEE=)
                          7: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: AkhktkyJIyCLLreKUWD/ZxrgDzrbrWRbyI+iKLWwlw0=)
                          8: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: EhyW+TG7ocqGrvuKCtgNK0GpHTD2n0QhllwsHyh/FGI=)
                          9: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: n0idqAAuE50Cj/bGGCbY0uwiIVXsU1cdHPDhEeqJtd0=)
                          10: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: y1d0G8T+Y3oi/U7zYsXxsMEdHM9mWNptYCytl+n7OUQ=)
                          11: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: x+/p3Q5ADGqhUvhLNv+geBcsDnQ0jyijDiW56RBXbO4=)
                          12: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: +QbrV6etFGpBQNbf+3ULQNDoI74EGacs/J66k/55qRA=)
                          13: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: VUWhftZCz6t5WvzC4+/sPlF0zMj6ttLXWdYMj0+uIE4=)
                          14: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: QKJnBYsa48aeQstLVfndf8/+iYcSarM3RMNHB08BXNY=)
                          15: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: M04lbY81cSgReu/x5nMfcW4XL5j03JobsQGzMj/Vmmw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:2f:3a:39:c9:af:67:4c:7e:23:2c:f8:65:4d:a9:00:c7:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Apr 24 02:36:54 2025 GMT
            Not After : Apr 27 13:44:54 2025 GMT
        Subject: CN=849B8C76CF5BB905D4EE242A430460A8CC94E73C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:22:7d:1f:38:d3:1e:0d:dd:6e:6e:de:ac:
                    c6:9a:45:70:6e:fa:1c:30:3f:c7:f3:e2:1c:1a:e5:
                    be:a6:3f:07:9f:d5:5a:8c:27:90:53:b1:9f:8c:26:
                    46:5a:dd:e0:1c:c8:73:10:db:37:31:2d:e8:e7:f8:
                    7b:ce:5e:fb:2e:cc:36:9d:60:64:0d:5e:f9:70:34:
                    e6:62:26:7f:b0:2e:6f:bb:63:68:40:b6:6f:e6:2f:
                    8e:6a:3a:39:7e:66:ea:fd:59:e7:86:5a:2a:21:0c:
                    c6:6a:04:bc:2f:6a:3e:3a:a3:64:70:6f:e7:ed:e9:
                    10:c0:c0:0e:f4:9d:78:99:68:fe:37:7e:f0:0f:06:
                    4d:5b:ce:c4:8d:45:98:bc:7f:62:cc:3d:e0:14:2b:
                    fe:95:2e:4a:a9:13:e9:e7:11:59:65:8f:e4:cc:db:
                    13:8b:7e:68:ef:45:37:59:29:7a:8b:8a:1a:d1:e3:
                    57:98:2d:61:b3:6f:07:1a:bc:3e:ac:ba:7e:df:43:
                    5e:82:3a:aa:7e:c1:3e:3e:06:e0:c0:44:8b:95:2e:
                    87:8a:79:d1:19:c5:7b:79:3e:f6:c5:61:75:80:33:
                    1b:f7:50:a0:ef:66:56:85:d4:ba:d2:35:16:10:aa:
                    14:bb:70:c8:9e:c9:64:6c:b6:ab:e4:2c:47:8a:bb:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9B:8C:76:CF:5B:B9:05:D4:EE:24:2A:43:04:60:A8:CC:94:E7:3C
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:ea:c9:78:ab:bd:3a:ef:f0:b7:7f:23:d2:9d:79:b3:eb:
         59:17:93:ca:72:37:c6:4b:9d:73:40:5e:15:d0:ce:ad:68:34:
         36:bd:ba:04:40:55:de:c0:dd:0a:10:7b:0a:4e:4a:77:55:fc:
         5d:81:d3:0d:fb:b6:3e:15:19:01:25:a3:54:46:3a:d3:18:f7:
         e6:31:b0:cc:33:14:2f:69:eb:42:12:fb:28:32:b4:6a:d0:b1:
         86:4b:d4:dc:38:d5:fb:e6:4b:e3:bd:1a:1b:50:22:cd:22:e0:
         7c:04:0b:f2:45:4c:63:a5:c6:fc:62:c0:76:1e:de:0c:cf:47:
         98:70:9e:d8:e2:c5:67:9e:1f:ea:9f:03:35:fe:f2:51:57:80:
         de:f2:73:1a:50:a7:0a:f9:25:f5:a0:3e:97:5b:d1:55:89:fc:
         a7:c6:02:0c:53:70:de:ef:9a:18:58:9d:91:76:48:85:ee:6a:
         14:7e:fd:8f:53:f7:ac:f4:f5:66:12:bd:0d:7c:34:40:a3:84:
         44:bb:ed:fb:21:8a:67:0c:93:be:03:bf:13:fd:c0:d9:5c:f5:
         09:da:02:6d:b3:8a:8e:91:3d:3f:28:d8:61:a0:d6:51:ca:61:
         84:1b:f4:86:90:c0:89:e4:eb:3d:10:45:7c:38:99:70:e3:99:
         78:d2:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:49 2025 by rpki-client on console.sobornost.net