Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
File:                     9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json)
Hash identifier:          /Wb0r4rl1EmjgZJhUfDpMsSXI+7O/T6Xww/9CiKTCIg=
Subject key identifier:   D5:BA:F7:28:86:6F:5A:7F:0A:53:78:4D:D7:0E:7D:A1:68:F4:9F:01
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       3618BE9A326CC4D0DC8EFD48C9AC455AB8F4DBB8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
Manifest number:          01CA
Signing time:             Fri 25 Apr 2025 04:01:02 +0000
Manifest this update:     Fri 25 Apr 2025 03:56:02 +0000
Manifest next update:     Mon 28 Apr 2025 07:26:02 +0000
Files and hashes:         1: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: ea794U0mB9D7yt1RLUOewhCL7ZzhCbLteGL9jlKUQmM=)
                          2: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: gKKJk7HQuK+ONKXoaPidzNFpfrELPeLEIef5HUItiMs=)
                          3: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: 0p8J1uUqepwRyvnKGYdZJZ+VKIbHRsXq/69mcxzrCBY=)
                          4: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=)
                          5: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: UlL9nZ2AzeP6x1X4AhAfMVeGISQ1hsgOKeYRU0cAD5c=)
                          6: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: ubfkcwoP+EJOky16d2lhV2rF6G2jtCAE2sDJk1UP4io=)
                          7: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: DDhB1UWaDE6P24QJZxUdnx+M6AZP5VTGOQm7w6ZXYXs=)
                          8: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: 76HgHjTj2qx3bKF+rx+QL1oKIpW6ZcXUIoHYdoNTV+U=)
                          9: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: 8mxCgLVTTXr9uMhOXDuMPKDKiJwHLUA2DMdve6SEZ9A=)
                          10: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: /9/xdwcs+kCWsTXH6/SBJuUINEh3WMXFFR2lTGVloS4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:18:be:9a:32:6c:c4:d0:dc:8e:fd:48:c9:ac:45:5a:b8:f4:db:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Apr 25 03:56:02 2025 GMT
            Not After : Apr 28 07:26:02 2025 GMT
        Subject: CN=D5BAF728866F5A7F0A53784DD70E7DA168F49F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:a9:cd:b0:fc:a7:c2:cf:39:9b:90:91:e4:
                    41:6f:90:3d:23:22:f2:60:47:d8:86:fd:f2:52:df:
                    dc:34:27:bc:07:11:93:0a:b2:bd:67:81:cf:f2:33:
                    b3:40:ad:e6:05:91:f8:a2:fb:e8:7c:b6:7d:c4:e2:
                    7b:9b:d0:a4:33:a6:76:bc:c2:8a:92:7d:5a:ce:92:
                    81:1e:c5:ee:99:9d:a0:38:ad:05:1f:88:a7:e0:65:
                    7c:77:da:6f:ef:f7:c8:0d:2f:8d:b2:17:10:1b:b0:
                    f9:fa:85:7d:2b:b7:a5:fb:41:45:0b:0a:c0:23:e9:
                    1d:19:d5:60:01:b7:20:07:d9:e2:47:00:4d:31:d6:
                    23:b2:0d:29:08:44:da:99:66:2b:ad:9b:28:78:e0:
                    f4:a2:e9:ba:79:c8:fa:34:f1:48:ed:b3:cf:36:b3:
                    18:58:98:25:c6:72:8d:6b:41:7b:79:95:19:51:93:
                    06:f2:14:68:65:98:52:4c:e1:b4:93:2c:44:a5:44:
                    70:3f:6a:b0:24:2f:fd:8e:45:0f:7c:30:4d:69:e0:
                    9d:fe:f6:97:06:1b:e2:7c:09:b6:49:6a:99:2f:25:
                    8e:ac:ca:bf:69:fa:bb:92:65:96:37:d5:ea:e8:d2:
                    5f:42:7e:f2:e0:44:74:19:ed:58:f0:a9:37:5b:43:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BA:F7:28:86:6F:5A:7F:0A:53:78:4D:D7:0E:7D:A1:68:F4:9F:01
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:39:99:84:5b:bc:8d:5a:cc:b3:b4:d9:f5:d8:21:8c:c9:
         81:7c:5c:7d:4c:5f:6c:e6:f8:fe:97:76:68:6b:b0:d5:de:c1:
         20:ba:50:32:a4:97:2d:f5:09:ea:81:18:83:e2:6e:ab:5e:b4:
         43:d8:1b:1e:3d:26:c7:48:83:85:b6:7f:69:33:5c:c8:20:1e:
         a9:a1:54:a6:c0:27:10:d3:da:97:53:16:48:ee:09:e2:86:80:
         3e:c8:e4:a8:3e:24:04:d6:45:4f:8c:00:21:9c:62:b8:18:6c:
         94:32:44:d2:be:aa:67:38:ee:dd:13:fe:34:77:46:2e:2f:5d:
         d9:fd:97:e5:be:e1:c6:44:29:5e:5a:3b:3e:e0:6d:a8:aa:b9:
         66:40:e2:b2:c8:0c:8d:61:0c:ba:27:c9:ba:5a:0c:db:83:3d:
         1c:be:f6:2a:b2:de:2e:38:b9:b2:95:65:d8:f5:b3:f5:05:fc:
         52:01:d6:ea:93:f5:98:e2:c8:28:d7:5f:cb:bf:98:90:97:9d:
         eb:c9:e4:bd:90:9a:a7:c1:cc:68:7c:2f:a4:d9:fe:51:4e:68:
         45:09:54:b0:92:64:5e:81:13:2a:19:ce:a7:c9:73:d8:84:c4:
         0a:13:33:9f:da:38:68:44:99:75:08:b1:ed:51:c1:19:96:b7:
         7f:b3:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net