Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
File:                     31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json)
Hash identifier:          O4hUmLVxCa4qVYmXKPSiqn62DAVbvBsWe2ENC0GOS98=
Subject key identifier:   63:FA:11:53:95:44:A3:4B:56:D6:6A:87:57:65:F4:AF:52:DF:36:88
Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
Certificate issuer:       /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Certificate serial:       15D6E18CF49EB68F67BF954DA4D16C171E44720D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
Manifest number:          5A
Signing time:             Sun 27 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 27 Apr 2025 08:56:22 +0000
Manifest next update:     Wed 30 Apr 2025 14:23:22 +0000
Files and hashes:         1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: 8cpZRLcXNHFvvAf6WrBM5p6OFYb6mHW8pjKDPZzt8aQ=)
                          2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl
                          rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 03:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d6:e1:8c:f4:9e:b6:8f:67:bf:95:4d:a4:d1:6c:17:1e:44:72:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
        Validity
            Not Before: Apr 27 08:56:22 2025 GMT
            Not After : Apr 30 14:23:22 2025 GMT
        Subject: CN=63FA11539544A34B56D66A875765F4AF52DF3688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:5e:27:0c:3d:56:9d:9a:38:c0:9a:c3:5f:
                    96:53:90:35:0e:bc:2c:f1:04:d7:33:0a:e2:5d:fc:
                    28:e6:95:ba:1d:7f:4c:73:e8:d9:f3:6b:5a:c1:a6:
                    37:cb:30:39:1b:75:af:c7:65:26:68:94:7c:53:50:
                    a8:1c:58:c6:72:17:d7:93:99:00:e8:cc:54:ac:76:
                    06:53:61:e1:0a:f0:bc:4b:f7:63:c8:a8:ea:7a:d1:
                    82:5a:9a:4c:76:5d:2e:eb:05:93:8f:88:1c:57:b7:
                    46:84:66:cb:74:ee:90:7f:60:62:d0:91:5d:9d:66:
                    88:3c:da:e0:bd:11:4c:28:c3:d7:30:cb:78:4a:8c:
                    df:d2:ad:5f:d2:12:c4:51:5f:bd:36:5f:69:33:0f:
                    24:f9:58:4e:b5:76:b2:5b:37:3d:8d:64:65:d2:b2:
                    32:8f:d3:58:02:9e:4e:c6:41:27:41:70:0c:82:2c:
                    19:46:e9:9a:26:f9:f6:fe:ad:18:03:21:81:8b:06:
                    36:4a:5b:14:cf:fc:94:0a:aa:f3:c3:3e:2f:5e:df:
                    ce:1b:5a:3f:08:e7:01:e2:4a:d1:3a:d8:f6:9d:42:
                    e5:90:a9:b3:9a:a7:b9:dd:74:0a:f4:42:cd:a1:5f:
                    35:1d:e3:bc:29:cf:29:ae:21:ee:f4:dd:38:44:d5:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FA:11:53:95:44:A3:4B:56:D6:6A:87:57:65:F4:AF:52:DF:36:88
            X509v3 Authority Key Identifier:
                keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:50:49:a8:05:73:74:d7:f1:a3:8c:2c:22:b2:15:a0:8b:9b:
         7c:ab:b8:0a:08:93:58:73:b9:e9:39:df:f8:ae:ab:f6:d7:ed:
         75:2f:aa:1b:1a:23:24:db:c6:37:b2:dd:dc:ff:f3:f3:9c:67:
         97:41:db:e1:32:5b:64:9a:f2:96:52:76:ff:e2:79:15:16:c5:
         88:ce:5b:64:ff:09:6e:9e:c9:1f:cc:55:46:b8:15:35:87:b0:
         9c:c2:88:0d:b5:41:84:10:7c:6d:5b:39:b5:f4:fd:e1:67:8d:
         a7:72:b1:23:9f:a7:02:74:d3:bb:ca:6e:0a:b4:7b:dc:83:20:
         83:b8:6f:ce:72:eb:46:38:d3:4c:97:fe:36:4c:87:b2:0c:d1:
         61:65:0b:b4:cb:8d:bf:8e:4b:f0:90:ab:23:bd:19:a6:3a:e9:
         a9:be:df:f6:22:49:24:66:9c:ce:ed:76:f7:1f:fd:f0:78:a5:
         4a:99:30:f8:51:1f:f4:58:46:88:7e:df:ee:a1:1d:bb:5c:c1:
         8e:8c:ee:2d:23:da:6a:27:0a:19:f5:83:33:78:9f:40:6d:16:
         8a:94:42:7f:59:a8:ca:1a:4a:0f:cf:db:9f:11:14:7e:0a:4b:
         d6:c8:b7:56:45:c7:3f:01:25:d1:dd:57:e7:ba:fb:c5:07:07:
         e0:3a:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:21 2025 by rpki-client on console.sobornost.net