Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
File:                     1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json)
Hash identifier:          4LymS4U8u99Uhsm/ltuZiqv3r6b0gocvaXv/MzZM6OQ=
Subject key identifier:   3C:CE:F9:F3:4E:00:3B:F2:9E:BA:63:8B:FD:55:60:11:71:5A:B4:D4
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Certificate issuer:       /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial:       23FB332AD0AAAD7B7201F5BC9BAA093E2A067638
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
Manifest number:          04E5
Signing time:             Wed 23 Apr 2025 22:40:39 +0000
Manifest this update:     Wed 23 Apr 2025 22:35:39 +0000
Manifest next update:     Sun 27 Apr 2025 03:59:39 +0000
Files and hashes:         1: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: N575Rd04sdWuljy+/gWPBi8EMbVoyPyHMDMfsQ5bHKg=)
                          2: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: VXfTBNe4Auo1wriEcmLQFMkbf+s99+tgFChszodG2qY=)
                          3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: 0aRFrXTSbHUOy2mZwEH0txx1Tk9Q/AHJdIJdOAn4gUw=)
                          4: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
                          rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fb:33:2a:d0:aa:ad:7b:72:01:f5:bc:9b:aa:09:3e:2a:06:76:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
        Validity
            Not Before: Apr 23 22:35:39 2025 GMT
            Not After : Apr 27 03:59:39 2025 GMT
        Subject: CN=3CCEF9F34E003BF29EBA638BFD556011715AB4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:99:2a:b6:e0:67:86:12:a8:46:68:8b:1e:
                    02:22:91:e5:e9:fa:45:57:84:cc:d1:f3:6e:e2:e8:
                    4a:64:12:22:7a:90:10:2e:90:f1:0c:89:0e:ef:93:
                    4d:0e:46:29:9d:29:71:fc:19:11:22:65:a4:94:10:
                    f8:8f:ea:c3:fe:64:85:d8:dc:f9:6e:86:1e:82:1f:
                    45:c3:82:93:b2:f7:a9:92:7e:0f:a1:25:1f:21:14:
                    bc:df:93:bf:6c:6b:cc:e7:fc:8e:80:aa:4c:4c:a4:
                    2d:13:07:30:7a:05:aa:04:b7:13:64:4d:64:e3:e1:
                    52:aa:11:f6:60:d0:83:ce:f1:6a:c3:bf:6c:8b:27:
                    76:88:d0:7b:37:9c:ce:40:94:9b:d2:64:e5:20:12:
                    cd:ab:49:31:6e:ff:b1:e0:08:80:46:db:f6:32:75:
                    7c:b0:17:b7:a5:16:fb:f2:dc:54:23:aa:24:49:b3:
                    86:24:05:4e:d1:db:1f:1c:ef:07:9b:b8:16:a5:65:
                    f4:fc:48:7f:f9:31:e7:3f:41:4d:43:64:d4:eb:e7:
                    d1:44:a4:e8:78:89:6d:46:8a:6c:e6:df:13:3f:8d:
                    0e:56:a0:d9:06:06:8b:b0:f0:1f:5c:cb:8d:48:0a:
                    2e:76:16:cb:a0:32:6b:2f:5e:e8:dc:3b:82:54:83:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CE:F9:F3:4E:00:3B:F2:9E:BA:63:8B:FD:55:60:11:71:5A:B4:D4
            X509v3 Authority Key Identifier:
                keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:24:fb:70:9d:45:b8:b2:f7:4c:1d:1f:74:23:c4:bd:c3:
         be:fd:b1:92:1b:f4:c8:4e:be:0e:21:76:ef:e3:b9:16:32:d8:
         73:86:85:dc:a3:90:34:98:06:d0:cc:49:9c:df:8c:54:cb:0b:
         bb:69:24:88:1b:f3:13:70:21:a6:51:7b:44:83:c6:87:72:a5:
         85:89:e5:2e:2f:80:09:69:df:6e:dd:ca:ce:bd:7e:16:c9:6c:
         44:7e:b7:ae:3c:d0:d4:c1:87:cc:35:54:a6:b0:74:27:c6:f8:
         b8:6c:7f:2d:7d:06:aa:30:6d:2e:db:20:5d:cc:47:fc:59:5a:
         88:be:d6:cd:ae:02:44:e3:0d:ad:4f:de:6d:90:b5:4b:c2:57:
         5b:ad:ed:f9:31:c5:19:a1:f1:59:f9:6b:cf:33:7d:8f:2f:e7:
         8e:91:fa:9e:12:f7:ab:42:fd:5d:29:0c:95:6f:3f:90:6e:a0:
         c7:c3:aa:76:e1:45:2d:f2:96:c6:60:96:b2:b4:0a:68:48:8f:
         19:00:d5:a2:da:20:dc:66:ed:46:b5:47:25:08:89:88:ff:35:
         d2:8d:05:4e:35:1d:ca:c6:52:06:cf:ea:f6:13:7e:83:d3:aa:
         a9:24:ee:22:b3:b8:30:72:38:cd:e9:36:8c:c9:7e:8f:d4:33:
         f6:41:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:22 2025 by rpki-client on console.sobornost.net