Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          SgDT5I5+wnsQ/yQFjW7TzBvimGu80fy0tKRYj4szj4g=
Subject key identifier:   D8:9B:9F:37:4D:DC:E7:12:6C:12:1D:8E:A2:63:E2:61:B8:0B:AE:E7
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       5251F911094DDF875D99BAA33C65899055A180C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          AC
Signing time:             Sat 26 Apr 2025 06:41:34 +0000
Manifest this update:     Sat 26 Apr 2025 06:36:34 +0000
Manifest next update:     Tue 29 Apr 2025 15:20:34 +0000
Files and hashes:         1: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: 318Wt4cZG43YIkvFa85SQUqJ82Skw0ejmR8BbxvWtHs=)
                          2: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          3: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          4: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
                          5: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
                          6: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          7: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          8: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          9: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
                          10: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          11: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          12: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:51:f9:11:09:4d:df:87:5d:99:ba:a3:3c:65:89:90:55:a1:80:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Apr 26 06:36:34 2025 GMT
            Not After : Apr 29 15:20:34 2025 GMT
        Subject: CN=D89B9F374DDCE7126C121D8EA263E261B80BAEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:49:3d:f3:31:ad:42:bf:97:6f:45:58:5c:
                    c6:22:93:55:6a:37:ad:a9:22:ee:72:46:20:80:33:
                    21:79:87:0d:c3:86:be:8e:e9:d8:1d:44:74:8e:6f:
                    5a:65:23:73:bd:80:e0:31:60:c1:d1:e1:65:86:e5:
                    fc:38:e6:59:0d:b4:a3:c4:5d:37:6e:54:9f:ee:22:
                    a3:f6:47:ca:17:4e:15:ef:ae:60:6b:0c:99:01:05:
                    41:74:14:27:c5:0c:12:72:c2:fb:c9:1e:c3:b9:84:
                    f4:32:8d:24:ff:d6:c1:88:a3:2b:ea:78:85:6f:53:
                    a2:16:c8:6f:5d:6b:9f:d0:4e:0c:89:e8:a5:a5:48:
                    2e:70:c0:4d:0f:a2:4a:e9:d9:0b:f4:be:a2:52:88:
                    6f:51:25:b8:06:3e:28:8a:83:7c:42:92:7e:fd:34:
                    cc:1a:d8:23:16:c2:83:a7:ad:72:71:27:a8:07:9f:
                    de:29:ee:d1:18:2c:1c:49:bc:db:16:6f:c9:18:ab:
                    f9:32:d6:35:42:38:09:74:0d:d4:e9:34:45:ce:4a:
                    be:30:d7:ad:cd:13:15:68:ac:86:5d:e5:16:8b:72:
                    ef:86:40:f3:bc:2d:c3:c3:37:b2:2e:69:4c:6a:35:
                    03:7d:fb:ad:ed:76:5b:f8:5a:01:44:5e:04:65:0c:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9B:9F:37:4D:DC:E7:12:6C:12:1D:8E:A2:63:E2:61:B8:0B:AE:E7
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:74:6c:e2:93:3b:20:63:46:72:1a:c8:22:e5:b3:9a:20:6f:
         d7:f2:82:54:de:d5:4c:bc:65:47:e8:18:d0:bb:c0:8c:3a:2b:
         d7:c5:0b:32:52:96:d1:1a:2d:d6:34:8c:5e:c5:70:81:93:0e:
         2e:81:73:b5:aa:e2:64:d5:4c:95:5c:13:b7:d8:ed:29:2d:5d:
         56:69:3d:a1:78:61:8c:df:14:96:06:72:c5:c2:ad:e7:29:4a:
         24:14:58:4d:ee:a2:82:6e:41:8c:be:c1:a3:c3:84:37:a0:f7:
         58:17:36:d8:54:20:7f:b2:95:e0:ab:46:5c:c8:f7:c0:8c:6f:
         ef:d3:4d:34:07:6e:49:1c:7e:74:4c:98:9e:60:3e:bb:02:ee:
         24:45:ed:83:01:1e:8d:96:98:18:0e:99:cb:a6:42:e4:f0:aa:
         6f:08:e5:8e:f7:05:e8:97:70:c4:17:44:70:d1:1e:01:59:73:
         5a:cd:62:07:1f:cc:8d:e5:af:77:37:59:5d:1f:0a:a3:58:09:
         d3:94:9f:4e:8c:e8:49:d8:8a:3a:62:b2:b7:4e:08:2c:09:ce:
         fa:12:01:87:45:1b:19:45:86:8e:f1:e3:72:a9:42:4d:b9:dc:
         83:42:c1:92:f1:98:fe:7b:16:b5:ae:42:3b:1d:b5:9d:35:87:
         4b:9e:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net