Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft
File:                     C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json)
Hash identifier:          hvCYxOQYInS8hjG/ncUQ9nqqhcuV0tGJTEcjZM1uY6Y=
Subject key identifier:   2A:3A:1D:1C:97:F9:FE:F6:E4:5C:29:C9:A2:A1:B8:E9:DD:F1:1A:5C
Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D
Certificate issuer:       /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
Certificate serial:       3BD35379246DAC3C46C9B846C1363E0F2DFD8E91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft
Manifest number:          04CD
Signing time:             Wed 23 Apr 2025 22:21:34 +0000
Manifest this update:     Wed 23 Apr 2025 22:16:34 +0000
Manifest next update:     Sun 27 Apr 2025 07:17:34 +0000
Files and hashes:         1: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: L7xlQSMRW8992zD5GKgUVfmbm2CWCHA326rlGEHghKg=)
                          2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: FmFK0HCMSLt7SyGKtb9ztPHc3ssDI+Z3SQRwQMgog5Q=)
                          3: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: 8v6eEKvlDwPmzQC7v/YcBOvJYLlZBV9Ucyla0TRe7oY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl
                          rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d3:53:79:24:6d:ac:3c:46:c9:b8:46:c1:36:3e:0f:2d:fd:8e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D
        Validity
            Not Before: Apr 23 22:16:34 2025 GMT
            Not After : Apr 27 07:17:34 2025 GMT
        Subject: CN=2A3A1D1C97F9FEF6E45C29C9A2A1B8E9DDF11A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:1f:fe:46:62:b3:d1:09:7a:4c:e0:c5:04:
                    d7:5c:17:44:f5:17:ce:2c:52:fc:ec:70:22:7e:11:
                    d7:71:9a:00:04:7e:05:fc:35:a8:6c:dc:44:91:59:
                    90:b7:11:ca:0d:6d:75:2a:a1:ae:36:6e:ab:e1:d0:
                    27:da:6a:59:27:07:98:8f:9a:fe:04:5f:78:bb:63:
                    33:68:80:6f:b8:1a:b6:49:5a:36:f0:4c:9d:cd:62:
                    6d:80:2b:cc:f5:f3:32:44:e5:63:2b:b9:7f:bd:ff:
                    15:76:de:ba:5a:82:6b:0d:a7:8e:ac:09:7b:25:54:
                    f0:e1:27:8f:86:21:04:61:a0:54:4b:f2:81:16:25:
                    f9:dc:f2:c3:72:54:ad:0f:e3:67:8d:18:d5:83:04:
                    7a:77:79:6c:b2:f0:56:9f:8e:41:13:41:89:cb:94:
                    fe:3a:16:0a:e7:db:f9:45:a8:1c:04:54:ac:aa:e4:
                    be:20:73:98:48:b0:78:15:7a:dd:22:12:54:85:ba:
                    b9:43:b2:4c:1a:e5:81:d1:dc:e7:2e:09:05:1a:e6:
                    cd:5a:cb:02:7b:f1:f4:e8:1f:c2:fa:8a:e7:97:39:
                    c4:e1:d8:ef:44:ff:a2:15:e8:df:e1:1b:8c:db:5f:
                    2b:c7:ab:81:50:06:25:ee:c8:a7:cd:9c:2f:f5:b9:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3A:1D:1C:97:F9:FE:F6:E4:5C:29:C9:A2:A1:B8:E9:DD:F1:1A:5C
            X509v3 Authority Key Identifier:
                keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:b9:03:ac:ff:8b:55:c5:d7:84:ce:cf:50:8b:8c:13:65:
         cf:2f:d5:bc:54:7d:a7:55:b8:ad:33:71:73:c4:dc:ce:b5:aa:
         38:fd:17:e9:6b:4a:5d:b7:fb:24:2a:e0:7a:53:68:78:dc:75:
         9c:88:62:a0:2f:2d:0a:e8:3d:45:dd:6e:c3:98:b9:91:a5:ed:
         dd:09:26:9e:a4:43:8d:15:60:af:b9:8d:83:51:88:7f:87:bd:
         d2:56:c6:8d:ae:db:3b:09:e7:e4:37:d6:84:4c:ba:49:30:83:
         20:f3:a5:85:13:35:7e:35:dc:22:36:12:ab:11:98:97:6b:4b:
         b3:ea:58:8f:89:df:12:81:58:16:18:36:20:b3:07:cf:8b:a6:
         85:23:62:ab:32:fc:4b:5a:08:1a:48:4a:b9:85:e0:f3:9e:5f:
         c2:9c:a1:5a:75:05:63:98:8c:39:3d:84:d1:2c:db:a1:4a:fc:
         a0:19:45:5b:c6:df:d3:69:ed:54:ff:d5:ca:61:71:45:4f:8d:
         e1:97:29:0c:d0:11:15:82:47:73:20:b7:07:fa:5f:68:51:e6:
         34:5c:f8:0d:60:b2:67:fb:03:fd:42:c8:34:9b:d2:cb:f9:ad:
         e9:a7:70:01:9f:3a:75:0b:d0:d6:01:5c:14:72:a6:b8:8b:b5:
         94:93:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:23 2025 by rpki-client on console.sobornost.net