Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
File:                     967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json)
Hash identifier:          +U3/VFnGFUk1Jh7u+ZBD8354kftIh4jyqiHX97l2kOE=
Subject key identifier:   04:2B:92:17:1F:25:8F:D9:F8:78:6E:5C:BF:B1:24:E6:0B:18:5E:68
Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
Certificate issuer:       /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Certificate serial:       0927674A386CC2C5BA53D2235DBD496130D6FA62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
Manifest number:          6C
Signing time:             Thu 24 Apr 2025 03:54:12 +0000
Manifest this update:     Thu 24 Apr 2025 03:49:12 +0000
Manifest next update:     Sun 27 Apr 2025 04:43:12 +0000
Files and hashes:         1: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=)
                          2: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: jcF2wc5gpLkZbMX7Tjh4QC+33wiMN/KWI+BbXZTEbaU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl
                          rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 04:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:27:67:4a:38:6c:c2:c5:ba:53:d2:23:5d:bd:49:61:30:d6:fa:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
        Validity
            Not Before: Apr 24 03:49:12 2025 GMT
            Not After : Apr 27 04:43:12 2025 GMT
        Subject: CN=042B92171F258FD9F8786E5CBFB124E60B185E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:70:57:31:13:3d:54:36:58:e5:4b:05:91:
                    5e:19:69:ec:c0:71:40:ec:54:93:ce:f7:cb:d7:f7:
                    a6:ce:2e:32:a7:71:4c:26:f6:3d:98:64:a7:5b:5a:
                    1a:0f:e6:e4:3c:1d:97:1b:97:e1:23:08:2d:d0:e2:
                    be:25:82:77:65:ec:9d:00:96:e3:39:93:ac:24:95:
                    af:d3:6b:dd:3a:08:e7:f7:d9:3d:a5:c4:37:10:a2:
                    3d:3b:65:07:66:95:9e:68:e8:d9:05:96:af:08:41:
                    60:7d:b3:41:da:98:1b:16:39:2f:f6:3d:2c:d0:d4:
                    65:fe:90:e7:be:51:bc:0b:78:24:5b:fd:ad:9c:f7:
                    ea:2f:25:22:d0:7f:5a:ae:59:77:36:89:92:cd:34:
                    a2:ba:22:33:52:2f:ba:1c:b3:e1:82:6e:3b:39:32:
                    c7:43:85:ad:fd:26:03:b2:1c:c3:2f:bc:ba:64:7a:
                    6d:6d:d8:fc:82:fa:d3:50:8b:38:17:5b:45:9c:90:
                    9a:3c:e7:68:b1:4d:a6:9e:bb:53:c9:41:81:1f:ac:
                    99:30:21:66:0f:ec:0e:f7:e2:db:c1:a6:74:b5:79:
                    9c:a3:46:2c:6d:a3:91:b7:f0:58:b2:f5:3d:70:cd:
                    c0:5e:5f:fb:8f:69:1c:d4:3a:f8:f5:1b:48:9c:17:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:92:17:1F:25:8F:D9:F8:78:6E:5C:BF:B1:24:E6:0B:18:5E:68
            X509v3 Authority Key Identifier:
                keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:36:74:8e:df:2e:34:63:fa:c9:b6:fe:94:1a:32:30:50:
         3a:09:4b:c2:ca:c4:db:0a:0b:1d:0d:2f:e1:3d:ad:f2:f8:8c:
         46:1c:b3:49:c3:65:92:3b:ad:77:58:9b:7e:ed:42:dc:20:64:
         4b:e3:b2:b6:f9:88:50:44:b5:3f:b4:b9:c0:82:43:14:35:73:
         5b:a2:dc:2e:7d:c7:df:6a:37:90:01:a6:78:e4:e1:8b:d5:44:
         ba:c9:c2:b6:5e:23:ef:ec:1d:89:ef:62:8a:cd:c9:04:12:da:
         74:37:1d:f5:fb:da:3c:67:cd:4f:16:7b:a1:c8:0d:84:61:3d:
         d3:4a:47:31:50:4f:c9:3e:e3:d3:c0:a4:0d:87:41:34:a1:4e:
         af:97:1d:34:08:89:18:ac:dc:4f:1f:f9:72:b8:a7:3d:b5:2e:
         ac:a4:db:45:02:4c:6e:44:df:2e:f8:5a:37:3c:87:fa:29:92:
         e2:63:ec:91:29:6d:39:13:d9:dd:cf:fa:9b:ca:2d:c8:95:c5:
         20:5c:3b:5c:09:44:86:86:39:5d:cb:1d:b1:21:fe:c3:be:d7:
         0b:bb:7a:ee:d3:25:f1:42:13:c6:48:8c:72:55:0a:bd:7f:31:
         f8:ba:50:ca:09:7b:3e:7e:f1:e5:f7:a5:43:75:aa:37:73:bc:
         09:af:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net