Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
File:                     8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json)
Hash identifier:          YszFRDFPyAic40n8MIBVMIVLnrAPJJCUApVZsgyWs/Q=
Subject key identifier:   2E:A8:D4:3E:66:8C:82:32:2A:D8:50:F9:0E:A9:A4:78:79:B1:AB:0C
Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6
Certificate issuer:       /CN=8F52E72816B856335390C4F4AFBAF207C21522F6
Certificate serial:       658A7FE76BC88393CDA79E56CE8D9E282BDBB013
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
Manifest number:          01C9
Signing time:             Fri 25 Apr 2025 17:42:11 +0000
Manifest this update:     Fri 25 Apr 2025 17:37:11 +0000
Manifest next update:     Tue 29 Apr 2025 04:47:11 +0000
Files and hashes:         1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: 80RK7JnZAofQqrxKrDK/y3a0tb6NRSLUcI+afJGU+dU=)
                          2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl
                          rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8a:7f:e7:6b:c8:83:93:cd:a7:9e:56:ce:8d:9e:28:2b:db:b0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6
        Validity
            Not Before: Apr 25 17:37:11 2025 GMT
            Not After : Apr 29 04:47:11 2025 GMT
        Subject: CN=2EA8D43E668C82322AD850F90EA9A47879B1AB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:48:97:ee:75:fb:25:dc:75:db:a6:a4:38:
                    61:50:59:32:a6:34:7a:4d:69:e5:7a:84:1f:92:c9:
                    ef:31:b1:8e:9c:d8:fc:5f:2e:44:f9:76:c5:31:6f:
                    93:80:d7:4a:44:ac:31:2b:56:28:dc:de:80:74:13:
                    d5:a4:91:52:8f:7f:89:36:94:d0:89:2b:97:61:fb:
                    e2:00:d3:68:ee:2e:74:29:76:2c:6b:99:ab:ae:66:
                    e7:58:18:6c:f6:2f:ca:00:4e:c2:9b:44:8d:99:8e:
                    1e:dd:ed:85:7c:49:42:4c:80:15:25:d6:60:9b:8f:
                    46:4f:34:c5:17:4e:5d:c5:9c:0e:2b:ec:8a:ae:2c:
                    6f:06:ba:f4:95:c4:a2:c5:5a:c9:83:f0:9d:b3:b4:
                    b3:fd:13:9b:8b:8f:43:17:d8:fb:7c:7e:06:43:2f:
                    b5:cd:fb:c5:ee:98:a8:58:ae:f4:cf:ac:a4:a2:de:
                    ee:ae:34:46:b6:21:57:3c:25:e8:d9:18:a5:06:21:
                    d5:04:5c:04:29:2f:44:de:a1:cb:3b:b5:ff:df:c5:
                    72:92:b6:4e:60:5b:b7:65:c2:a3:8f:11:91:0a:b4:
                    f7:96:5a:f8:9a:b4:8a:68:d9:fd:50:5a:17:cd:eb:
                    e8:b7:43:51:f3:45:7b:10:71:36:1a:6d:5d:a4:1b:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A8:D4:3E:66:8C:82:32:2A:D8:50:F9:0E:A9:A4:78:79:B1:AB:0C
            X509v3 Authority Key Identifier:
                keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:42:59:ee:4d:e8:90:6e:0f:b2:e9:45:78:92:8b:a2:18:
         c2:1d:b1:fc:59:e0:1b:da:55:a8:54:4c:87:4f:69:a8:7f:12:
         6d:73:56:8b:78:d7:89:d4:f2:68:db:c7:24:38:8b:53:a8:a5:
         97:3b:f5:7c:8e:61:15:9f:4c:bc:72:bf:2b:e8:a3:34:0f:8b:
         b2:18:e8:1e:43:2c:18:bb:e4:ef:eb:e8:10:06:7b:59:c9:f8:
         28:66:1c:c2:25:40:2c:30:c9:b1:1f:99:41:20:38:8c:e7:5d:
         75:cc:bb:3e:40:b5:c6:f5:4d:28:ab:18:87:67:57:5e:89:0d:
         df:28:2e:ba:1f:b9:91:88:95:2c:f3:99:60:90:ea:81:30:2e:
         3f:62:de:44:ed:81:2e:0d:5e:8f:09:17:39:97:34:d7:5b:7a:
         c9:33:88:e8:94:61:96:48:f6:ed:54:63:a5:7f:60:b0:59:6b:
         db:50:3d:35:c9:8c:57:1a:37:30:f5:72:15:e6:ca:c8:23:8a:
         8e:45:b3:82:97:6e:d4:83:34:0e:0c:50:23:e5:14:b7:7d:3b:
         c2:51:f7:0f:ad:ff:65:0e:bd:ec:56:4a:9a:a9:7e:3f:de:cb:
         f3:8d:9c:99:d3:3c:de:ae:fa:fa:c3:19:a4:e1:30:fe:03:d4:
         9d:17:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net