Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
File:                     9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json)
Hash identifier:          1nqis6017pEQCyz9BtCRKYj1nBwG7nqRzhVVn6lhNjA=
Subject key identifier:   BB:D0:8D:DE:4A:E9:CD:8B:5E:83:48:20:ED:C2:73:A0:50:7B:3C:D6
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Certificate issuer:       /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial:       1577E18F5F20FBA6950DFDA0004F880C12548347
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
Manifest number:          04C8
Signing time:             Fri 25 Apr 2025 11:41:05 +0000
Manifest this update:     Fri 25 Apr 2025 11:36:05 +0000
Manifest next update:     Mon 28 Apr 2025 19:30:05 +0000
Files and hashes:         1: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: iRWCp++84riA7hqH9ibog2AOPCNStXaXS39jyEhnRVA=)
                          2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: F1X4boFtxn/EgnpkVQWCKt75oCjM/gmO/k75zwrcQVs=)
                          3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: YpXfCL82On8UTAObXpsp+TSzduNgz0G+wsNlyOIz0pA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
                          rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 19:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:77:e1:8f:5f:20:fb:a6:95:0d:fd:a0:00:4f:88:0c:12:54:83:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
        Validity
            Not Before: Apr 25 11:36:05 2025 GMT
            Not After : Apr 28 19:30:05 2025 GMT
        Subject: CN=BBD08DDE4AE9CD8B5E834820EDC273A0507B3CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:7b:e0:6e:b5:af:e7:98:a5:14:f3:f4:d2:
                    81:29:40:b7:92:2b:53:90:9d:dc:60:3d:1d:dc:65:
                    92:4b:97:a7:9f:e5:54:12:c6:3b:1c:8a:09:80:fc:
                    c7:ab:f7:29:e5:9c:6e:fa:a7:84:52:2b:01:f4:cb:
                    4a:37:8e:35:c1:af:45:0b:10:ac:8a:6d:f3:9a:df:
                    9c:8b:59:64:07:a4:5e:02:9d:e6:7d:4d:ee:d2:b3:
                    1b:ff:8c:24:e7:ba:d7:c2:b2:e1:e6:c6:fa:ea:cb:
                    a3:dc:53:51:1d:19:a7:8c:e2:c1:2d:03:1b:07:70:
                    e5:88:3e:e9:95:7f:fe:ca:a8:24:63:3b:79:b7:ea:
                    be:25:29:63:ef:ef:b7:76:77:6e:a7:b4:b6:86:cd:
                    4f:cd:67:e5:e7:47:fc:fe:05:ca:44:3e:28:75:1e:
                    49:53:3f:db:53:4c:76:66:65:54:6b:fb:e5:39:f7:
                    85:87:aa:ee:70:da:67:2a:70:f1:89:24:db:ba:6a:
                    c4:f7:ee:32:37:e7:46:e9:18:aa:b7:22:cf:11:97:
                    e0:22:5a:16:67:96:cc:ab:1c:ce:08:63:48:62:6e:
                    f8:b5:0d:29:8b:c5:63:da:c0:41:df:0c:3a:9f:3e:
                    c9:db:b3:1f:5f:90:94:e3:60:db:b3:4d:b1:4a:ef:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:8D:DE:4A:E9:CD:8B:5E:83:48:20:ED:C2:73:A0:50:7B:3C:D6
            X509v3 Authority Key Identifier:
                keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:e9:60:f5:41:58:26:a9:ea:1b:25:e3:ef:9b:2a:1a:46:
         fa:87:ab:9c:b9:98:f0:6d:39:8f:45:0d:40:46:5f:87:cc:5c:
         9a:32:4e:dd:2e:48:3f:f1:52:b9:00:97:d9:a6:e1:c4:97:71:
         7a:79:72:25:cc:d8:c3:e9:64:63:f2:98:78:e9:af:2a:51:e3:
         52:7f:bd:94:3a:32:8b:d7:67:44:d7:3c:3a:79:96:7f:84:93:
         7e:ad:d4:00:50:fb:39:ae:6b:39:d2:df:90:97:82:52:00:78:
         6d:8b:a0:a5:ec:52:3b:15:da:bf:df:af:b0:60:73:a7:e8:7f:
         e9:4e:e7:ac:e6:f3:2e:bc:7a:57:17:2a:68:29:66:52:df:a2:
         c2:90:4a:89:5b:9f:5a:8e:64:d2:43:28:e2:9c:3e:df:9c:cb:
         d8:13:94:59:87:4d:9d:7a:7f:a9:b1:fb:dc:3d:5b:41:0f:38:
         8f:3a:5c:35:07:4b:15:f3:14:bf:7b:84:c5:83:64:1b:f5:a7:
         09:e6:ca:01:7a:58:aa:10:19:29:36:1d:52:2f:9b:e2:b1:b3:
         b1:c3:9b:c0:52:9c:eb:76:05:14:ec:76:59:ce:e0:30:35:d2:
         9d:c6:b3:dd:1e:93:3f:18:f4:e6:1a:2e:a5:84:7d:5f:27:03:
         1b:e4:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net