Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
File:                     A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json)
Hash identifier:          icDs/UXMMjQI+d8r5HFa2BT3qQ9XQEv7zqMIspDXM7s=
Subject key identifier:   77:A6:EC:AA:9B:42:0F:49:CE:04:61:77:80:C7:3F:B2:E3:84:09:4C
Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34
Certificate issuer:       /CN=A708865394D992A01D1736F0AB500E24889B7F34
Certificate serial:       1C5889D5F9EAA545E689E744C108D5BB088EFF14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
Manifest number:          011D
Signing time:             Wed 23 Apr 2025 09:40:45 +0000
Manifest this update:     Wed 23 Apr 2025 09:35:45 +0000
Manifest next update:     Sat 26 Apr 2025 17:11:45 +0000
Files and hashes:         1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: uxEuYlBZO44Re541eCrZ4tCyIjrG/6nUYvqNHi1ORYI=)
                          2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: rgZhMMMnE/8X/ajx3/StMU1scrnbaZrzmmCgG9/im6M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl
                          rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 09:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:58:89:d5:f9:ea:a5:45:e6:89:e7:44:c1:08:d5:bb:08:8e:ff:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34
        Validity
            Not Before: Apr 23 09:35:45 2025 GMT
            Not After : Apr 26 17:11:45 2025 GMT
        Subject: CN=77A6ECAA9B420F49CE04617780C73FB2E384094C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:95:23:de:89:3c:2d:05:e7:40:a1:5f:e0:
                    a7:49:7e:0c:39:41:b6:62:52:07:af:0a:71:54:f8:
                    af:e3:72:f1:2d:b9:fc:ae:56:e9:76:c3:f8:1e:8b:
                    be:78:11:fc:64:e2:2e:86:72:de:a1:e0:08:97:53:
                    13:09:8b:b7:94:11:d2:23:d6:3a:75:d7:a7:55:4f:
                    8e:e9:e0:50:70:47:5f:98:bf:b3:4b:8b:26:86:81:
                    7d:ca:6a:ae:42:3d:da:5d:e6:04:8b:c9:41:07:0c:
                    d5:77:41:79:29:f4:03:bb:4f:5f:8a:70:1f:d0:66:
                    2c:27:d1:b6:09:ec:d6:4a:18:48:78:ea:73:21:f1:
                    26:8a:e4:8c:32:69:96:85:dc:3a:83:f9:75:e0:b6:
                    b5:a3:85:cf:2e:a3:5a:92:d9:40:2d:96:29:63:29:
                    13:c8:98:11:f6:7a:b9:46:10:aa:08:15:86:d9:8a:
                    e2:c9:ff:a1:15:56:82:c9:08:44:fe:37:d3:51:d6:
                    62:60:b9:18:83:57:d9:b8:30:44:6a:bb:e0:6a:43:
                    a4:8c:ae:e4:69:f9:f9:6c:d0:3f:59:2c:e0:72:11:
                    ec:98:88:c7:60:83:25:87:4b:89:3c:d2:b1:ba:4e:
                    9f:0d:d2:20:48:18:b8:48:c9:4d:8f:f1:a6:73:01:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:EC:AA:9B:42:0F:49:CE:04:61:77:80:C7:3F:B2:E3:84:09:4C
            X509v3 Authority Key Identifier:
                keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:38:20:6c:03:da:e6:4c:c6:69:f1:aa:c7:e9:b8:af:c8:e6:
         47:9c:26:da:b6:05:fb:16:61:09:29:9f:86:6d:3e:e1:04:a6:
         b2:8f:27:a6:21:81:a0:63:fa:10:f2:95:d6:9b:85:e4:40:8f:
         12:2a:f5:a8:75:e6:10:c6:7a:c6:9e:f2:d1:93:52:84:c0:85:
         b5:9f:79:a8:27:3b:4b:fd:32:fb:3c:03:c7:89:3d:9f:c2:22:
         80:73:50:d7:c7:b3:91:85:22:22:93:44:1a:a4:7c:74:c4:9b:
         76:43:9f:11:b1:0c:9b:ca:5c:33:65:89:69:67:65:65:35:40:
         0d:5d:d9:88:67:10:db:3f:1a:68:b1:25:fe:51:09:cb:01:5f:
         c8:b0:5d:7f:e6:57:e3:14:17:b2:3a:d2:19:b1:ed:38:4d:be:
         5c:5c:1c:fe:98:0f:1b:f7:31:a0:06:ad:3a:7f:70:fe:72:fa:
         83:84:ae:e0:50:63:8b:0a:9d:9c:26:73:ec:93:91:23:a7:dd:
         c0:6e:1d:00:4b:0a:e6:5a:44:b2:e8:ea:65:55:c9:38:ac:75:
         c8:f9:b4:48:e7:41:f3:94:4f:6d:c8:ba:ee:b0:a9:e9:fe:c5:
         18:c7:5e:04:60:51:b3:77:b9:38:e4:dc:0a:4e:85:93:59:fd:
         f8:2a:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:12:23 2025 by rpki-client on console.sobornost.net