Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          /qHZDDyXU7F0DC8yHFTzHexxfLbHpwnEzmRLPbC00mc=
Subject key identifier:   4D:76:BB:51:83:4F:5F:61:21:4A:9D:01:3F:E6:6A:1B:44:34:7D:C6
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       7F048F0C0E1569C40CB18AE381F52BB12773960F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          04C7
Signing time:             Fri 25 Apr 2025 12:31:59 +0000
Manifest this update:     Fri 25 Apr 2025 12:26:59 +0000
Manifest next update:     Mon 28 Apr 2025 13:48:59 +0000
Files and hashes:         1: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: sJb8leavmPnYQkhyoTizATUpn0Qf48YJaugxYyG/DSE=)
                          2: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: 8cxq4akCGJ81dJz8KZQ+lulo4euF3KsbwP7C2f/xkUE=)
                          3: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: w3Ks91mwkS7NztUtNLKYf1Zt3ODkRQznfK1tF6ldT8k=)
                          4: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: zFwcJRk1pIStXgYvOW6EJ+sh6WfmyVgLQT18K9kq+Sw=)
                          5: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: Rb28NXlYt2i42cKjjOk5iENFCUNoEfsw3NtDJbjO8H8=)
                          6: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: JZOCGNrXopoaPI4jZi8eXqzn2wPKF8AfdVx1G95vRF4=)
                          7: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: /cpzswwTNxt4PA+y5NQBd3j9f6qF16C52KUQtHtdF0o=)
                          8: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: xpET03ZY7J+readhaJ1QYHRYS1mjCgsf+hUmxPF8BxA=)
                          9: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: XT+BpWNDktvWNwFTQkLNNS/w5oWhizouaSiWM8/abUU=)
                          10: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: rpd32ZUdwQpFXx4Nv2RhdtnfkJHyyuemJCQ3vprxsb0=)
                          11: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: ax01vkbIK29IQaPMOtL4UaEdAFFntCppP1NSNhQX5iY=)
                          12: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: NOw/zlirvTqoOX6sm1/vix2ODTXn4yeECfZvuo38lBs=)
                          13: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: tJ8ZvI46pqkm8zQNc8mw5mnCsJpq72czgdRpZYAABAU=)
                          14: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: y6nyZ4wEj4h4my4pTHsmLYPMQpLcieoKxLYPlH4EY2A=)
                          15: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: Xew1w+gXgylH740u1c4Z60dTjHU8+UmrHSS0NUpHOoU=)
                          16: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: +orAdsz6eB8/rfzFzwo7jDI03fKrjW+cdaqzhCiMpmg=)
                          17: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: uQXGM2cnzjEJ+e+qYTRcu8Q2bkfF87zDJZZFwMyns1U=)
                          18: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: 5OLfvTl6gcSwQBrapeYjNQFXfGFP7wdrUnoFQhbTuyE=)
                          19: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: e+Om61XELdd62RuYWQyB46Ok2HY1yu4g+v0tQE3Vs9M=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 13:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:04:8f:0c:0e:15:69:c4:0c:b1:8a:e3:81:f5:2b:b1:27:73:96:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Apr 25 12:26:59 2025 GMT
            Not After : Apr 28 13:48:59 2025 GMT
        Subject: CN=4D76BB51834F5F61214A9D013FE66A1B44347DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:b9:54:b5:6c:31:06:3d:2f:c6:70:ce:e7:
                    1f:5d:8f:fa:b8:8f:34:cb:ae:78:3f:62:dd:3f:c0:
                    b3:e1:5e:c0:93:60:3f:e6:58:56:9f:d3:f2:f9:41:
                    fe:9b:57:e8:21:b1:c5:bf:59:62:fb:d5:ef:39:da:
                    70:33:ec:5f:86:64:64:f0:88:94:7a:cb:d2:61:a4:
                    8c:a8:03:a6:b9:e7:7a:89:38:66:ae:f3:39:33:38:
                    3a:99:1b:28:25:36:16:35:08:1e:eb:61:8d:90:30:
                    7a:de:ad:45:3a:6e:d2:62:8c:f1:db:54:f9:67:c0:
                    f0:67:09:b2:ef:65:a0:d4:f6:54:5f:32:a9:b1:fa:
                    f9:0b:b9:5c:fd:87:d7:43:d4:af:9d:49:5b:e9:c9:
                    b1:51:ad:3f:c0:34:32:1c:21:a5:c8:12:b4:f8:2b:
                    23:e2:88:19:0c:f4:59:96:de:d0:f0:d0:4c:03:07:
                    a6:62:40:89:4a:ba:3b:af:1c:2c:3f:16:00:e0:82:
                    4b:58:89:5b:db:17:02:b8:f6:72:1b:30:3e:d1:0d:
                    67:8c:97:2c:6a:3c:8a:33:ad:30:88:6f:cb:95:50:
                    ae:a5:60:91:ac:a6:3b:68:b8:b6:5c:72:82:6a:fc:
                    8a:29:eb:a5:d6:06:b1:4c:2a:20:65:28:fb:6e:cd:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:76:BB:51:83:4F:5F:61:21:4A:9D:01:3F:E6:6A:1B:44:34:7D:C6
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:ba:a8:b5:4d:57:58:a3:a6:40:1d:1d:cd:21:27:60:37:
         81:23:89:c8:b5:42:3a:51:2b:0a:69:56:07:38:75:1d:42:59:
         08:40:31:7d:bb:9a:bb:dd:cb:16:71:eb:b9:1d:a5:18:22:a8:
         b6:cf:25:11:f0:5a:8b:7a:80:7b:2b:75:08:a0:4f:e5:45:f4:
         a6:4e:47:92:47:79:3e:97:7f:af:34:17:06:24:23:b7:7f:ed:
         60:f4:9c:08:ae:ef:32:6a:68:c4:69:fa:0b:d8:49:e6:87:0b:
         d6:75:73:6a:f7:25:b0:35:d8:08:d7:82:a9:53:9d:56:b5:c3:
         c5:40:58:56:69:1e:87:67:a7:58:ff:96:6b:99:ab:d2:9d:84:
         4b:2f:88:15:4e:55:e5:9e:d0:ba:03:34:01:1d:83:76:a8:65:
         71:21:df:4e:eb:fd:85:b8:46:10:63:74:55:fa:93:93:0a:67:
         b5:fb:ce:86:94:e2:24:96:cc:c9:8f:4c:94:6e:2c:eb:50:0b:
         1f:d7:b4:d6:74:1a:ce:92:c2:51:21:3b:77:2b:55:9b:44:f1:
         67:c6:a4:64:23:11:c5:9b:64:00:82:a7:88:65:ac:7a:4c:35:
         ec:e8:77:d7:f9:86:36:e3:04:bb:ac:53:4e:44:b3:71:b2:c0:
         a0:2d:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net