Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
File:                     C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json)
Hash identifier:          JiYxX6eHCGe6kmCS8euK3vdrkVzPgJqvXXNVrSwhO7E=
Subject key identifier:   F1:2B:50:B7:DA:EC:18:28:8B:87:83:FB:D4:50:F7:9B:5F:23:7A:0E
Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32
Certificate issuer:       /CN=C5247B1CF64591B1DB27280B439B507E56BF0232
Certificate serial:       4041752A26E27BAC31451C7F0DC87468FEB30919
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
Manifest number:          0412
Signing time:             Sun 27 Apr 2025 05:51:13 +0000
Manifest this update:     Sun 27 Apr 2025 05:46:13 +0000
Manifest next update:     Wed 30 Apr 2025 11:39:13 +0000
Files and hashes:         1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: Yf6hXshx0Ckjk9Twi+LguTl5Ut3I/ASoQRggRZxDklw=)
                          2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl
                          rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 05:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:41:75:2a:26:e2:7b:ac:31:45:1c:7f:0d:c8:74:68:fe:b3:09:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232
        Validity
            Not Before: Apr 27 05:46:13 2025 GMT
            Not After : Apr 30 11:39:13 2025 GMT
        Subject: CN=F12B50B7DAEC18288B8783FBD450F79B5F237A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:a8:cd:69:77:f8:4b:de:6e:0b:b4:1c:46:
                    b0:91:60:9b:04:37:e9:64:a1:ad:55:61:36:9f:0e:
                    ce:8e:00:7d:a8:74:57:96:20:45:0e:b5:bf:34:ea:
                    4c:8c:6a:b1:56:e4:b8:5b:26:5e:6a:52:c4:7a:1f:
                    6b:b8:b8:15:75:f1:be:24:9d:61:24:7f:72:00:7c:
                    a7:ac:5a:75:69:77:82:af:1e:32:27:12:78:f2:41:
                    1c:37:e0:9b:9c:81:cb:d3:5b:a7:50:8a:bd:ff:d4:
                    ad:c1:e2:c5:b4:2f:7c:e0:d0:34:5c:99:12:16:aa:
                    cc:a8:af:00:a3:b5:0c:b3:15:f6:8f:c3:30:18:f7:
                    58:9c:e1:76:10:36:b3:fd:46:ac:90:7f:c8:cd:cc:
                    29:bf:56:2d:7e:7c:de:ee:f4:04:e1:e3:84:d3:58:
                    87:81:de:cb:1f:e9:56:be:76:64:57:7d:49:59:95:
                    9a:4d:05:a2:f1:51:27:be:c8:d3:82:13:1b:65:0a:
                    86:46:28:94:c7:9c:79:63:fe:00:92:17:12:3f:62:
                    f5:10:b5:01:4b:ac:b9:62:21:1c:e8:9c:4c:94:ca:
                    e0:15:1e:d3:cf:3a:06:2b:28:49:e2:e5:66:64:0a:
                    4b:9b:45:40:e1:ca:0e:ba:94:f6:fa:de:87:7a:be:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:50:B7:DA:EC:18:28:8B:87:83:FB:D4:50:F7:9B:5F:23:7A:0E
            X509v3 Authority Key Identifier:
                keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c7:98:55:8c:b5:70:54:98:58:40:c0:ba:aa:1e:aa:f9:cf:
         6e:4b:9b:3d:3a:22:5e:14:7a:da:e0:22:52:ab:d2:f6:b1:52:
         99:84:9a:2a:53:b8:3b:25:93:4d:e9:f0:77:73:50:5b:f0:e0:
         28:e3:24:3b:07:72:e0:aa:30:67:22:96:b5:69:c2:cf:a5:5a:
         8b:18:9c:5f:39:f0:be:90:ad:32:51:55:b7:5f:dc:1b:a0:aa:
         5e:10:bd:bd:22:e8:0e:db:f7:17:c1:7f:67:96:7a:3b:dc:cd:
         ac:c6:36:ba:df:2f:7d:a7:54:67:4f:c2:0b:8d:22:b9:c8:49:
         15:22:86:c5:d1:e6:c8:fd:51:d5:66:b3:94:eb:ed:6b:ee:6a:
         ee:41:4f:2c:dc:41:6a:e2:0a:e1:5c:5d:72:a7:07:dc:3a:54:
         ca:de:99:9a:30:83:b6:05:8e:cf:54:78:26:ba:a4:c2:3a:39:
         43:ce:96:93:1b:b9:67:d7:45:a7:c1:16:f1:b7:a0:44:11:56:
         6c:3a:50:fa:e7:29:3d:5b:3a:10:b3:d0:cd:08:56:9a:7f:1f:
         d5:49:79:b8:0f:93:3c:7b:3a:65:5d:54:4b:18:f9:ec:17:41:
         93:bf:61:98:ed:f6:03:3e:65:9c:51:dc:79:b7:7a:33:a6:c9:
         14:0e:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:06:54 2025 by rpki-client on console.sobornost.net