Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
File:                     4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json)
Hash identifier:          1hyfSbrGa2KKOZwkIo4m0gur3FoN/cP2Bp2kRhgk4sg=
Subject key identifier:   1D:E1:D7:98:EB:E0:FA:CE:2E:94:C3:25:12:C8:21:00:47:FA:97:6E
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Certificate issuer:       /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial:       6B1D4DD257DA22FC3F34848B165625A7E4008465
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
Manifest number:          01BA
Signing time:             Sat 26 Apr 2025 15:21:06 +0000
Manifest this update:     Sat 26 Apr 2025 15:16:06 +0000
Manifest next update:     Tue 29 Apr 2025 20:14:06 +0000
Files and hashes:         1: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: lyPJ/C+1JK+1dR/6gTQapGLErt730rsAiDoa70v9rd0=)
                          2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: bUeRMlPqkwApg7Vb4bvig1i36cI8bzbJodoDN6nlTb0=)
                          3: 3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (hash: 8gYVBvfPaAS+dDq/ck+SYq8jSqJeSZctfFM5ZSDT6o0=)
                          4: 3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (hash: 01jHh+FfyPAbJeYQk+m56wOnb+AW1a+9NjO91/TsYUM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
                          rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1d:4d:d2:57:da:22:fc:3f:34:84:8b:16:56:25:a7:e4:00:84:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
        Validity
            Not Before: Apr 26 15:16:06 2025 GMT
            Not After : Apr 29 20:14:06 2025 GMT
        Subject: CN=1DE1D798EBE0FACE2E94C32512C8210047FA976E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:b1:13:b0:d8:22:0d:09:a2:ec:53:bb:ea:
                    ef:c8:a7:19:54:ba:19:54:6e:11:37:d8:8c:0d:01:
                    81:e2:1b:23:57:a5:4e:42:dd:ec:b0:7d:53:69:91:
                    57:ba:c9:15:e8:00:cc:e1:43:89:5f:55:aa:bd:a5:
                    d2:31:1c:6a:44:46:94:33:c5:4e:b0:e7:e4:0d:ca:
                    a8:d2:56:40:d3:db:1c:eb:5e:2d:63:93:9c:66:19:
                    f6:a6:66:fa:27:ac:bc:62:b7:a9:24:a1:3d:4b:c4:
                    71:ee:62:7f:a4:e3:c5:ce:88:64:d2:bc:e5:ef:8a:
                    54:6b:3d:07:c6:d3:5a:e7:64:3e:98:de:40:55:7f:
                    ef:bf:14:ba:50:d2:19:7b:0e:a6:b2:d6:92:fe:f5:
                    40:a7:28:83:71:7c:1f:1c:c1:4a:a2:7c:bf:96:57:
                    39:e7:61:5d:7c:f4:34:17:ef:01:32:89:5c:c0:52:
                    89:d8:14:7a:63:c0:ab:60:3b:49:14:cd:86:27:ec:
                    85:1f:d3:37:f1:4d:fa:ad:b8:cb:2e:3f:5b:91:37:
                    a1:da:63:71:ca:0a:cd:79:d8:75:98:7f:46:57:96:
                    aa:91:a9:19:02:b0:62:1d:7e:a8:2a:92:d7:b2:09:
                    f9:b6:96:31:81:5f:92:eb:35:56:6c:bf:58:06:53:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E1:D7:98:EB:E0:FA:CE:2E:94:C3:25:12:C8:21:00:47:FA:97:6E
            X509v3 Authority Key Identifier:
                keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:19:85:b6:b8:3a:e1:ca:cb:28:24:63:af:5c:29:05:60:8a:
         6f:a2:31:99:d6:c2:15:8e:99:a9:05:c6:bc:1e:8d:28:26:bc:
         52:77:4c:23:d3:9c:90:97:d0:fc:9b:5f:77:77:2f:95:76:8d:
         51:08:c0:ed:15:8d:eb:5e:03:6f:a4:f5:c7:83:9b:6d:5d:06:
         09:af:cd:0b:b4:2b:22:0a:e9:e5:49:90:2d:63:0f:04:25:1b:
         b0:23:52:fe:0a:28:0b:7e:81:5d:32:cd:62:7d:1f:c9:3a:9a:
         0f:f0:36:4a:6c:9a:44:bc:71:46:04:0e:86:5b:02:68:f7:3f:
         dd:4f:60:78:0f:86:bf:1d:5f:ca:9f:24:36:ff:86:53:4a:16:
         5c:b9:d8:05:de:cc:92:57:55:f4:09:f1:06:8f:47:9c:d6:c3:
         4b:5d:85:71:cf:fe:94:a0:90:87:40:9a:3c:fd:14:37:fa:43:
         7e:df:1a:9d:f0:e2:77:68:ce:9c:42:79:d3:2b:8f:99:97:a6:
         32:e0:61:1f:c2:bc:31:a9:39:f3:dd:b0:fa:d4:c4:39:e2:54:
         1f:5a:3c:64:61:4e:57:6a:a1:ab:71:23:48:dd:56:60:40:ec:
         54:7f:70:62:a3:de:87:79:94:11:6f:57:d5:6e:62:d9:ff:54:
         27:ea:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:17:59 2025 by rpki-client on console.sobornost.net