Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft
File:                     45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json)
Hash identifier:          SUrXesJT3LheR9g+HDwVAyGwK3PngCWa0Lwrw8c28VU=
Subject key identifier:   1D:2F:21:06:93:69:92:AC:41:E4:82:45:E2:66:2B:FB:B9:19:AA:05
Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C
Certificate issuer:       /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C
Certificate serial:       405F5282AF1915E83A98FDE32941D7310F015191
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft
Manifest number:          0271
Signing time:             Fri 25 Apr 2025 19:10:41 +0000
Manifest this update:     Fri 25 Apr 2025 19:05:41 +0000
Manifest next update:     Tue 29 Apr 2025 00:28:41 +0000
Files and hashes:         1: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: JFfYLZOLHSzfoKrYh1sJ6Zv50azsbaT1zZYPRVWCEj8=)
                          2: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: DFA3qBFACki/karT3fIlYISlkq7/i7wKwlvN+BCd6A4=)
                          3: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: XtJZn7ljJSfP6iL/MDjtfpVkviYKx4Xboir3grsNMCo=)
                          4: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: IpAhfyBk6UVvHL1CrMEsCPgMXpI9vxk9SZkiJxXgvQk=)
                          5: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: uUzFxXX9+YSqNUoc9f/VNA2O72vd2Y345REzg4qr7bE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl
                          rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5f:52:82:af:19:15:e8:3a:98:fd:e3:29:41:d7:31:0f:01:51:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C
        Validity
            Not Before: Apr 25 19:05:41 2025 GMT
            Not After : Apr 29 00:28:41 2025 GMT
        Subject: CN=1D2F2106936992AC41E48245E2662BFBB919AA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:51:57:24:a1:eb:9f:b1:90:c5:e7:11:0a:
                    bc:1c:3f:8e:67:1e:24:ae:14:12:a5:63:ea:34:9e:
                    15:45:89:40:d3:4c:1e:b9:0b:22:29:95:62:2b:c9:
                    f1:8c:20:46:4a:79:69:37:79:e9:d5:87:57:58:e0:
                    43:ff:ed:7f:8c:d2:e2:c8:76:79:68:a0:40:18:34:
                    76:a9:75:57:a1:e1:e3:d4:17:1e:02:d9:00:d4:16:
                    58:9e:f4:85:d1:26:bf:85:25:a7:a3:ad:57:1f:b0:
                    10:bb:96:af:87:d2:47:b2:e6:a1:aa:cd:01:db:aa:
                    ac:c9:ff:e0:04:8d:6c:c2:39:03:81:b5:cf:e0:98:
                    57:bd:c5:85:19:a1:84:d4:2a:52:75:46:23:8c:d9:
                    27:b8:b3:06:d4:c7:06:c5:d9:aa:7e:79:ba:a8:ef:
                    67:3e:32:ee:fe:8c:95:fa:dc:44:c8:6b:b9:bf:4e:
                    60:16:2e:14:c8:f8:39:12:68:d7:98:46:bd:ef:32:
                    36:c8:2e:f2:57:dd:88:3b:b9:18:73:c7:3f:ba:c9:
                    cf:ec:96:26:ef:0d:a0:b4:df:b1:55:6e:71:c3:ea:
                    5d:87:a4:b7:b1:6c:7b:5b:96:fe:b7:06:7e:53:f0:
                    98:dc:75:7f:1e:a4:53:f6:15:ed:0d:21:94:8d:dd:
                    56:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:21:06:93:69:92:AC:41:E4:82:45:E2:66:2B:FB:B9:19:AA:05
            X509v3 Authority Key Identifier:
                keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ae:9d:32:01:56:b6:2c:f7:6c:dd:d0:ce:fe:67:15:44:8c:
         67:7b:64:72:da:77:12:54:0b:6a:14:35:af:7b:f3:3e:60:c2:
         e1:ec:a4:09:4e:eb:dc:eb:a6:8c:c7:37:49:23:85:05:19:55:
         f8:d4:b9:f3:e6:45:14:5d:61:72:da:28:04:18:d4:80:9a:5c:
         09:55:28:37:d1:90:90:07:16:05:a0:c1:7f:a1:7e:69:f6:a8:
         1b:11:1e:e3:5f:88:a5:04:c8:92:50:af:82:3a:c9:f6:e4:af:
         cf:38:31:f7:c8:9c:18:fe:22:ca:b6:dd:d3:91:bd:ae:0c:77:
         02:0b:2d:5a:6c:48:af:24:df:e3:d0:7a:ab:c0:89:c9:84:55:
         69:dc:13:80:17:de:d6:03:e9:55:d9:72:3d:a0:24:b7:b1:d1:
         bd:d6:ee:13:9a:88:ca:b5:91:85:cb:52:f2:46:48:1d:d6:e5:
         89:79:2d:b5:51:d7:2f:f5:85:01:19:8b:ea:f0:9f:46:d0:92:
         5b:57:0e:ae:e1:c3:c7:c8:97:b8:74:79:d1:dd:8e:4f:a2:d0:
         4e:06:68:a8:89:22:1a:aa:82:4e:a3:12:6e:e5:31:61:ff:c1:
         ab:e1:7e:76:69:d6:f8:97:d7:ee:ba:b6:41:ed:7f:f5:5a:ee:
         d9:67:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net