Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
File:                     F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json)
Hash identifier:          pVWXdE2gdXRX+ZjkNOuClFAQKWNZ9u5PrEuJ56bxSy4=
Subject key identifier:   EC:0E:DC:4F:EA:1D:9C:FA:B7:CD:39:2A:5F:42:90:39:8A:4D:3B:ED
Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
Certificate issuer:       /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Certificate serial:       05C65A766072577A6C6BCD729A204D882DCC1AA6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
Manifest number:          0347
Signing time:             Wed 23 Apr 2025 07:21:15 +0000
Manifest this update:     Wed 23 Apr 2025 07:16:15 +0000
Manifest next update:     Sat 26 Apr 2025 17:12:15 +0000
Files and hashes:         1: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=)
                          2: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: jh4dnDLKTV12l9WSxNqXxUf5Ympn1rRQwtvKY+GGFS4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl
                          rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c6:5a:76:60:72:57:7a:6c:6b:cd:72:9a:20:4d:88:2d:cc:1a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
        Validity
            Not Before: Apr 23 07:16:15 2025 GMT
            Not After : Apr 26 17:12:15 2025 GMT
        Subject: CN=EC0EDC4FEA1D9CFAB7CD392A5F4290398A4D3BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:fa:3b:00:d2:5d:04:d9:de:d8:da:dd:97:
                    8d:99:92:82:4a:ad:66:5a:d6:a1:57:2c:9b:b8:2a:
                    7d:ed:35:16:ce:f8:bc:c6:3a:91:3b:46:2f:31:b5:
                    f7:c1:a0:13:9e:69:ca:69:0e:83:6e:a1:36:01:b7:
                    11:d6:21:ec:b3:26:e2:3e:b1:80:04:22:ee:ac:19:
                    17:05:f4:1b:66:11:30:44:60:00:6b:4a:cf:d8:44:
                    26:af:15:06:1b:db:5a:c5:c2:b2:34:29:5e:65:10:
                    56:cc:0a:e6:b5:a3:3d:e0:65:d1:6a:89:dc:ec:cc:
                    df:3c:8b:95:01:a4:bd:1c:b5:44:81:89:7b:38:8d:
                    ee:6d:e3:1c:d3:89:12:c4:e1:4d:5c:0d:9b:74:e2:
                    52:51:56:90:90:d8:38:34:49:d2:9a:45:ec:89:2a:
                    fe:57:9f:f6:74:bb:f0:72:41:c7:84:79:da:90:cb:
                    bc:96:c7:13:0d:63:6c:28:42:2a:9d:97:d2:85:d1:
                    1f:89:fd:f7:0a:27:ef:fe:c1:0a:6b:fd:5c:ff:45:
                    da:5c:86:40:1c:e0:43:c7:89:df:58:cf:62:7a:46:
                    8a:7e:fe:55:db:2e:6f:14:a1:3d:22:bb:88:3a:df:
                    3a:45:8b:cf:c9:5e:65:da:be:c1:3a:32:6c:cd:26:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0E:DC:4F:EA:1D:9C:FA:B7:CD:39:2A:5F:42:90:39:8A:4D:3B:ED
            X509v3 Authority Key Identifier:
                keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:54:24:40:25:f5:ec:bc:a9:c9:a3:24:ad:69:d9:d9:91:ee:
         9a:92:ae:7a:88:d6:96:7e:63:13:e7:80:eb:24:a1:cc:30:cc:
         18:0d:99:0a:d2:3e:eb:7d:82:9b:1c:0d:36:de:94:43:17:90:
         62:96:1c:12:ba:2b:ac:fa:9e:6e:5c:36:0d:f4:96:f8:d6:ac:
         69:ad:e6:c0:82:1c:bf:11:26:27:51:61:be:5e:52:d7:2c:3d:
         0d:94:30:c5:d3:30:a0:ad:e4:60:b4:c0:04:90:bb:3a:2d:00:
         51:34:7e:c1:a4:35:0a:73:74:48:7d:3e:57:16:58:4a:9a:4b:
         b0:df:c0:8d:4c:3d:82:ec:28:39:b3:2f:74:1a:39:bd:f3:12:
         31:0d:d2:0b:df:b9:73:c9:60:fa:af:e0:97:04:01:3e:96:03:
         eb:83:e6:aa:ea:7c:ae:96:85:74:c3:66:0e:1e:90:fa:1f:81:
         22:db:47:c4:3f:80:bc:ae:e4:b3:a8:11:76:90:e4:47:ce:59:
         9d:f3:c8:7b:1b:ca:be:d5:83:7d:32:9e:9d:77:5a:50:f4:0b:
         62:23:82:d4:5c:a3:0d:cd:b5:61:cd:76:a8:2c:e2:89:1d:7f:
         84:57:8b:95:5f:a3:e4:f3:41:c9:9d:cd:70:5a:5a:80:93:dc:
         73:84:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net