Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
File:                     EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json)
Hash identifier:          oPI7g3eyTtNnsa0Pq8pqVidHZT4nhwS66XRp0zXNSQY=
Subject key identifier:   BA:8C:38:2A:6B:B1:90:1A:72:6D:16:38:F2:DF:67:F2:BC:F9:65:2A
Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75
Certificate issuer:       /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675
Certificate serial:       0BC4AD5F0AFA8C251087AC38E6BDAFBF6E90FF1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
Manifest number:          013C
Signing time:             Thu 24 Apr 2025 14:11:10 +0000
Manifest this update:     Thu 24 Apr 2025 14:06:10 +0000
Manifest next update:     Mon 28 Apr 2025 01:16:10 +0000
Files and hashes:         1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=)
                          2: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: QrogalOysk8eQrwrxNQWPuLPl+PgJN5CUZU4MXO1hy8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl
                          rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c4:ad:5f:0a:fa:8c:25:10:87:ac:38:e6:bd:af:bf:6e:90:ff:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675
        Validity
            Not Before: Apr 24 14:06:10 2025 GMT
            Not After : Apr 28 01:16:10 2025 GMT
        Subject: CN=BA8C382A6BB1901A726D1638F2DF67F2BCF9652A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:75:7e:0a:e5:cd:e6:53:c2:1f:78:d3:a6:0f:
                    3a:5f:da:d2:cf:87:d6:e8:10:d6:ab:cb:f6:79:36:
                    8a:d6:2e:90:30:f8:8d:87:f7:b7:f9:ec:a7:f2:75:
                    02:fe:4d:e4:d3:9f:15:ae:b1:19:4c:b7:c5:0d:ba:
                    62:fd:a9:bd:b0:22:f2:a5:ba:99:a1:bc:da:a5:12:
                    10:d3:00:51:ae:09:9c:9a:6d:e5:23:26:c0:be:78:
                    62:1a:df:ea:63:bd:2e:e9:6f:5a:c0:fe:a8:ac:9b:
                    d0:c5:8f:d7:3a:dd:30:61:68:ef:0e:bf:3b:96:88:
                    91:5f:a3:d6:47:95:02:87:de:44:8f:f2:0d:f6:2b:
                    77:fa:ab:00:0d:b2:25:25:f4:0a:f3:29:69:a1:a7:
                    11:55:5a:45:26:96:d9:7e:c6:17:97:c7:62:c2:57:
                    a8:14:df:06:4b:3c:31:9e:cd:ef:7d:55:f5:d2:3c:
                    2c:5b:de:d8:ed:f0:26:ee:a8:98:01:ec:f0:38:3c:
                    bc:5c:b1:3b:8e:49:21:48:ae:93:43:0b:94:b2:86:
                    9d:8d:ac:97:cc:00:fc:49:96:c7:d5:53:1d:c1:15:
                    07:55:1e:9f:c5:38:87:de:e4:4b:98:7b:e9:8d:19:
                    14:75:03:77:4c:c4:1f:a8:13:41:53:3c:66:15:b6:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:38:2A:6B:B1:90:1A:72:6D:16:38:F2:DF:67:F2:BC:F9:65:2A
            X509v3 Authority Key Identifier:
                keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:82:35:47:d9:b6:c4:d9:00:44:cf:51:c8:8a:b4:0f:2c:30:
         57:dd:32:b6:be:52:95:c1:1c:e4:38:a5:62:7e:4f:3f:9e:e5:
         c3:ec:04:41:b5:ef:20:91:7f:d1:04:5d:71:28:3e:a0:16:af:
         96:4e:60:d7:f4:92:37:d0:8e:71:71:e3:57:82:ab:77:a2:cf:
         eb:7b:14:d8:08:c6:ca:eb:46:0c:9d:54:76:e1:a0:99:24:3b:
         05:71:b0:54:40:8a:6e:26:7b:33:92:88:1c:05:70:ee:c4:f8:
         fe:72:ec:ba:4d:e4:87:bb:ad:c0:00:6f:bd:1f:6b:7d:42:7b:
         0b:db:bf:f0:64:1e:41:54:53:ba:49:e1:00:fa:9c:e0:c5:ec:
         80:ba:10:c6:7d:db:d9:21:d2:89:ae:f1:89:28:66:25:01:72:
         5d:4e:56:7d:cc:81:92:94:cd:8e:a1:6f:9a:b0:38:43:05:96:
         56:d1:b8:9a:d5:ff:e6:ce:7e:17:4f:fc:e6:95:fa:1c:9e:18:
         67:56:34:88:a5:04:f4:7a:aa:25:0a:68:2e:d7:fe:7d:53:2a:
         e9:6e:8f:b6:94:0d:18:f3:5c:b5:47:a3:e7:95:2c:2e:05:a0:
         a8:7b:d0:7d:50:7b:2c:5a:93:96:90:47:eb:42:05:07:d9:19:
         60:2d:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net