Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
File:                     154EE03198467B96315FDB527FB3BBCCA0BFC441.mft (raw, json)
Hash identifier:          G34VstvYrLJYgvcpuqxla2+o0hYBrAx8XYRSA0e+ETE=
Subject key identifier:   6F:7D:0A:20:E1:EF:FA:1C:CF:75:40:D1:61:2F:EE:73:49:A9:65:84
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       44C1D6D6E1A4A948A5789465C979574400E7792E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
Manifest number:          04F0
Signing time:             Fri 25 Apr 2025 12:11:15 +0000
Manifest this update:     Fri 25 Apr 2025 12:06:15 +0000
Manifest next update:     Mon 28 Apr 2025 14:12:15 +0000
Files and hashes:         1: 3230322e38312e35322e302f32342d3234203d3e203435333132.roa (hash: /dy/QXe6kq6jehNtf50cRD4MnljK96Oz45Idtyr5p3Q=)
                          2: 34332e3234372e33322e302f32342d3234203d3e203435333132.roa (hash: mdC6rH17B3GNuDExndKQ+dbFkWFK+CqwTTm5sVpaMmc=)
                          3: 3230322e38312e36302e302f32342d3234203d3e203435333132.roa (hash: +YiXboX8IcAAou94cDo+USSMon0gcEwMRI5Fgbwfy7w=)
                          4: 154EE03198467B96315FDB527FB3BBCCA0BFC441.crl (hash: YjiLfJof/c8LhQBeHOPK+ZprIkGbExG6uVBC35RH8L0=)
                          5: 3130332e31342e34342e302f32332d3233203d3e203435333132.roa (hash: U3zclKF2+kgtSakf6EpsbawfPltqkGu4P9lGDBuSzME=)
                          6: 3130332e31382e33322e302f32342d3234203d3e203435333132.roa (hash: b8Jj02xTr+ArquZ0+ZlkJajOa7a7edeGP2ah1Fn0+Yc=)
                          7: 3230322e38312e35352e302f32342d3234203d3e203435333132.roa (hash: 4LVJmjObJnJKAgv9eynOi92N2rUzgOHw6n+oM801DK4=)
                          8: 3130332e31342e34352e302f32342d3234203d3e203435333132.roa (hash: 1kPDI4/MzGrvT5QjcdxT9Gy7/XfjZ6/DgFT07yiM3Js=)
                          9: 3230322e38312e35302e302f32342d3234203d3e203435333132.roa (hash: oHePA7aUhJX/ZSWqvWUmtiR6pLipsm4MtFPmXynkXL0=)
                          10: 3230322e38312e34382e302f32342d3234203d3e203435333132.roa (hash: M63uCrQMSSSHpHhdANXUpBnb9B4kuV7XblVg/KYa5S4=)
                          11: 3230322e38312e36332e302f32342d3234203d3e20313432343031.roa (hash: bLwap6tv0RDiI8/+IxcllflCCdmyQFUnkFFvRqZm/tw=)
                          12: 34332e3234372e33322e302f32322d3234203d3e203435333132.roa (hash: MUTaQ30dWDRTGv9wdgV387WQA0QyYeD1jmgJx6CAATE=)
                          13: 3230322e38312e35372e302f32342d3234203d3e203435333132.roa (hash: /Pz+lvmjrreEoN5O3O3l4iYKH60T1aclG96qf/GdciY=)
                          14: 3230322e38312e35332e302f32342d3234203d3e203435333132.roa (hash: WzGM4heJSmsbOW9KNHZi2BGFE4WXHQUEdZcFcAbTMlY=)
                          15: 3130332e31342e34342e302f32342d3234203d3e203435333132.roa (hash: uJE01qd/r5eFZspHoTfOBNs8cxX1yPIOaqod+sPD7gw=)
                          16: 3130332e31382e33332e302f32342d3234203d3e203435333132.roa (hash: BOZ/Ld7wEgHhQMUbroLMzpmRoDs/s3J+aCZfY7XULXY=)
                          17: 3230322e38312e36322e302f32342d3234203d3e203435333132.roa (hash: RZUkLU6LBMt9Y+svCpdhTrmyhJt4g2G1+5jcJkjA3hE=)
                          18: 3230322e38312e34392e302f32342d3234203d3e203435333132.roa (hash: wTMkz7JeAqhI8opsBHK7J9JnkXTw2HD85s630yiFXqA=)
                          19: 3230322e38312e35392e302f32342d3234203d3e203435333132.roa (hash: 4+nrvsMtTrOadPYq+zTDzq1xFyWspefPwPdKI6ZoM6I=)
                          20: 3230322e38312e35342e302f32342d3234203d3e203435333132.roa (hash: EnEsjagVtiwiZ0D39b7rmKktZN2dw/LhLdbA8IiiM30=)
                          21: 323430343a663863303a3a2f33322d3332203d3e203435333132.roa (hash: bUCoU/DwSihJSs80WPjHlvGZZx4Ih4jKUYuIblxY1vc=)
                          22: 34332e3234372e33352e302f32342d3234203d3e203435333132.roa (hash: vFx9tnrmiEVvqOlX7fiuBgdj4euIBRXjyJL9RIa9T/Q=)
                          23: 3230322e38312e35382e302f32342d3234203d3e203435333132.roa (hash: vN5n9PhqQpTM7HWXjcndl5RxHQWa7HzL5zU/2GxM5Dk=)
                          24: 34332e3234372e33332e302f32342d3234203d3e203435333132.roa (hash: UkcaLMCAOawcr/9xW8eUH0IQOjHxUCeAY5D/A3bZ6nM=)
                          25: 3230322e38312e35362e302f32342d3234203d3e203435333132.roa (hash: X0nB05exxPSMH7dqb3Y6ToKIF9Twp/BdFq2esUvcmDU=)
                          26: 34332e3234372e33342e302f32342d3234203d3e203435333132.roa (hash: 8PmYxKPs3/oP9TlJ8HxkBR25CtA/9kpFfyfNgUk5gZw=)
                          27: 323430343a663863303a3a2f34382d3438203d3e203435333132.roa (hash: EZ5R/pGx/aq53PhKyY/Pb8gWMwjrSB2+xtva+OYLXDI=)
                          28: 3230322e38312e35312e302f32342d3234203d3e203435333132.roa (hash: pP7gm1kvtd2NCgUfcAxRcq6GNQ6lQDaLd5nX18H5Zig=)
                          29: 3230322e38312e36312e302f32342d3234203d3e203435333132.roa (hash: dsLGBjwD67TiLUfkM7p5B4kAE5WI4zq1Pt7cOFKZ7wE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c1:d6:d6:e1:a4:a9:48:a5:78:94:65:c9:79:57:44:00:e7:79:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Apr 25 12:06:15 2025 GMT
            Not After : Apr 28 14:12:15 2025 GMT
        Subject: CN=6F7D0A20E1EFFA1CCF7540D1612FEE7349A96584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3a:d1:d7:31:d1:ba:e2:81:39:47:ff:54:aa:
                    c2:75:6b:4d:b0:56:3b:39:5e:45:fd:13:7b:0c:3b:
                    77:ed:15:e2:de:f5:b7:61:33:41:56:56:87:46:04:
                    f7:85:e3:85:a0:20:85:d5:50:02:c9:a7:87:17:d2:
                    0b:69:9c:c2:30:b6:08:53:85:f4:f9:79:4d:5f:8a:
                    b0:3c:04:d5:69:ae:6a:6f:de:bc:fe:1f:c6:90:0c:
                    c3:dd:9c:15:43:c7:45:f1:44:c3:a3:67:f0:bf:b2:
                    d0:03:5b:c4:b2:bf:89:5b:05:d7:da:8f:dd:19:ae:
                    1b:7d:5a:61:d1:08:c6:88:a0:ef:53:7e:42:ce:85:
                    6c:00:64:b0:28:1b:cd:9a:81:fa:33:04:8a:04:3f:
                    63:57:3d:74:51:8b:df:63:fd:1d:42:e7:aa:0e:57:
                    7a:49:21:98:79:82:7b:34:e2:7a:76:48:20:3d:c1:
                    18:26:43:55:1c:31:b6:63:dc:9a:56:6e:14:b3:7c:
                    bd:6f:25:36:16:37:a8:44:7c:42:c3:2e:ac:42:6d:
                    68:30:0f:1c:8b:db:8f:1b:5d:3f:02:62:20:3d:c7:
                    09:a1:61:44:82:87:df:7a:9c:b2:0b:89:07:d0:21:
                    c7:07:9f:72:1f:0c:ac:b4:05:79:e7:54:1a:ac:78:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7D:0A:20:E1:EF:FA:1C:CF:75:40:D1:61:2F:EE:73:49:A9:65:84
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1b:55:7b:82:03:dc:85:0e:af:a4:7c:bf:3a:81:83:bd:2e:
         55:d6:cc:8a:2a:9e:99:d0:1d:dd:3e:d9:2f:64:08:84:17:53:
         c0:e7:14:9c:45:4a:c1:37:9a:13:0b:05:de:6a:76:cb:cd:d5:
         9d:1a:46:7e:2b:c4:c8:e7:28:dc:33:e9:c3:7b:26:6f:2c:10:
         08:e3:31:a1:5f:a5:ca:c7:03:35:c2:12:17:2b:9d:ec:67:24:
         58:90:c5:ac:6f:f7:b5:c8:fb:d8:6c:27:a0:82:24:d6:aa:61:
         1b:08:41:75:dc:12:6c:1a:36:5e:a1:eb:53:0b:31:36:12:59:
         a5:fd:bb:8a:f0:06:a6:e3:f9:67:b3:d6:2f:1c:d1:07:d9:64:
         5d:04:20:20:46:bb:f0:8b:7c:3d:12:b7:dd:58:98:51:71:02:
         af:05:2d:85:ff:50:c5:e5:d3:5b:f8:a1:1b:59:8a:e8:bd:5e:
         e4:00:5a:f4:e7:2f:1b:b1:b2:f2:25:51:28:36:36:e0:61:6f:
         93:c4:7f:b0:bc:f2:0a:49:26:9e:eb:e1:5d:c9:ea:1c:09:5e:
         99:72:98:c2:9d:78:f8:7e:f8:c7:89:62:1b:8f:83:2e:34:5d:
         fe:fc:98:4a:9b:50:4c:af:bc:5c:1c:3d:4f:27:21:c1:42:d6:
         b8:44:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net