Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft
File:                     D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json)
Hash identifier:          6MPTF+tfmdvbO9wFROTSMcqpE1fuKH26Cat+Ms05vsE=
Subject key identifier:   4E:4B:DA:B5:82:50:82:2D:0B:77:14:78:00:66:F9:84:95:BF:F9:7E
Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86
Certificate issuer:       /CN=D1C35136280415655DEC1D442C7C982FD36A5B86
Certificate serial:       6713760C28F322DFF78496E07B47F3B4A8048745
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft
Manifest number:          3A
Signing time:             Thu 24 Apr 2025 20:52:17 +0000
Manifest this update:     Thu 24 Apr 2025 20:47:17 +0000
Manifest next update:     Mon 28 Apr 2025 06:53:17 +0000
Files and hashes:         1: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: 2Sz7w2rYONcGr/YBr3aTMaopUEnX79f1BvciQocD3XA=)
                          2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE=)
                          3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: enj3SoRMhX6a8NQDCBELu61h3RYzLEaRVwkwNREoJPY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl
                          rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:13:76:0c:28:f3:22:df:f7:84:96:e0:7b:47:f3:b4:a8:04:87:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86
        Validity
            Not Before: Apr 24 20:47:17 2025 GMT
            Not After : Apr 28 06:53:17 2025 GMT
        Subject: CN=4E4BDAB58250822D0B7714780066F98495BFF97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:65:1d:ae:83:e8:02:eb:88:4b:e1:4d:ef:
                    c4:f8:a9:8b:8c:5f:50:3c:a3:4a:d3:96:43:63:08:
                    6e:4b:4e:b5:a1:e9:b5:a0:26:c7:15:46:78:03:73:
                    9a:80:41:dd:31:78:9a:2e:30:54:ff:fd:26:56:8a:
                    0f:53:03:d3:02:6a:a5:0c:c5:fa:60:b7:f6:6e:44:
                    fa:55:35:25:2e:0a:40:12:76:cc:df:69:96:b0:cd:
                    00:bb:f8:bb:12:67:18:85:e0:e8:4b:05:c7:62:01:
                    6c:0e:34:70:20:eb:7b:4c:53:8b:d7:c0:03:96:94:
                    a5:24:fc:f1:be:9b:1f:ed:88:f4:68:f9:54:ad:45:
                    cc:38:94:11:a9:7c:08:c6:d2:8f:c0:cb:3d:8e:02:
                    c0:52:6d:54:d1:e5:f4:15:18:63:60:de:da:3a:56:
                    48:1f:9c:77:47:a4:5f:a8:d6:16:ae:c1:ee:fb:44:
                    31:9b:a9:77:ad:4b:fa:1d:dc:65:81:1a:eb:ef:23:
                    ea:05:40:89:fe:07:11:b9:0f:f0:d8:5e:30:c8:b5:
                    8a:24:4d:55:4b:cd:2a:b9:4d:20:5c:5c:b7:39:2a:
                    a6:0d:14:62:ec:78:f9:32:21:85:08:d8:ed:d8:1c:
                    b3:05:84:b4:43:e5:2a:45:09:7c:76:11:e1:2a:42:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4B:DA:B5:82:50:82:2D:0B:77:14:78:00:66:F9:84:95:BF:F9:7E
            X509v3 Authority Key Identifier:
                keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:84:65:20:01:c1:ec:23:50:f7:69:bd:73:ad:2f:1f:51:
         4c:88:1d:21:ab:70:31:56:b4:29:38:ff:0d:11:3b:cf:e8:cf:
         71:cc:db:55:e2:d8:f7:a1:f4:6c:6a:1c:6e:2c:3f:02:ac:4b:
         e4:40:12:1c:98:df:c3:54:30:b6:f5:df:1f:a2:d0:77:78:7d:
         6d:79:01:3b:a9:60:71:d4:37:06:3a:b8:5e:31:1c:e7:19:07:
         0b:e1:0c:df:e6:90:07:bd:f8:28:2a:b6:11:f3:7d:f3:65:1c:
         75:2b:3f:83:02:d8:a0:ee:7c:49:a1:09:89:88:dc:9f:a5:fc:
         38:01:b3:39:e0:d1:9d:9a:38:1b:e6:60:c2:da:b3:93:52:8a:
         55:e5:1a:c6:4e:8f:a8:00:96:d9:fc:0e:80:24:db:06:7c:7c:
         9e:6d:91:f1:87:7c:01:a8:d3:ad:04:db:85:19:ef:ff:27:29:
         ee:79:3d:4e:89:63:f7:ca:d9:30:ca:d0:95:05:6f:09:9a:2f:
         2a:b5:04:2c:1c:44:2d:9a:77:fb:12:9a:86:44:9d:68:a6:82:
         f0:96:7b:14:2e:d4:d9:a2:48:4f:57:0a:35:ab:f5:83:00:2f:
         db:72:89:c6:69:0d:a7:c8:b7:1b:15:02:3d:ec:ce:2c:d7:41:
         70:0a:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net