Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
File:                     08435803278DC5796EE67697996454D656195D4C.mft (raw, json)
Hash identifier:          EGzonUtcpfLD/WZ5Wzlztqo1l7sz/TA1r8wM3s0QrN8=
Subject key identifier:   13:CF:C3:46:09:DB:D3:0F:E0:D9:97:18:F5:9D:13:AB:EA:9D:F2:5D
Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C
Certificate issuer:       /CN=08435803278DC5796EE67697996454D656195D4C
Certificate serial:       06155D74F0DE8834D97B9C5C6C8E0D4AD03B16EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
Manifest number:          B7
Signing time:             Sat 26 Apr 2025 23:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 22:55:42 +0000
Manifest next update:     Wed 30 Apr 2025 03:07:42 +0000
Files and hashes:         1: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=)
                          2: 08435803278DC5796EE67697996454D656195D4C.crl (hash: m4MHrQfV03Tpxd35Os8JfAiZqZv0ud+ultqIgrDhLSo=)
                          3: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl
                          rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 03:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:15:5d:74:f0:de:88:34:d9:7b:9c:5c:6c:8e:0d:4a:d0:3b:16:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08435803278DC5796EE67697996454D656195D4C
        Validity
            Not Before: Apr 26 22:55:42 2025 GMT
            Not After : Apr 30 03:07:42 2025 GMT
        Subject: CN=13CFC34609DBD30FE0D99718F59D13ABEA9DF25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:0b:b5:29:d7:71:d6:1d:a3:f8:b8:4f:df:
                    01:7d:2f:dd:bc:a3:67:76:ba:af:3f:ed:bd:59:5d:
                    de:79:49:7d:c8:f8:be:af:d3:4a:0c:17:c0:aa:bc:
                    34:6a:86:e8:08:6b:bf:67:95:45:ac:96:6f:65:93:
                    1a:60:77:1b:48:0b:3c:5d:f1:61:32:ca:d2:c2:a1:
                    8e:78:da:dd:f2:52:4f:60:b7:be:c4:18:b4:de:76:
                    ce:8d:ff:54:42:e8:b3:57:db:02:ae:95:70:64:da:
                    ec:dd:84:a4:ac:83:81:1f:01:fa:f4:08:d6:e4:00:
                    bb:18:57:2a:60:ee:81:30:75:85:ed:04:10:96:29:
                    2f:90:fa:57:6b:e5:e6:25:a4:25:83:49:21:a2:8c:
                    18:25:a1:31:cb:70:9e:9e:d1:91:27:18:b9:fd:10:
                    0a:e2:4a:8d:33:55:48:a6:cc:90:bb:8e:50:02:55:
                    6c:1c:c7:9f:16:5c:04:7a:03:fd:f6:a1:3e:51:e9:
                    73:74:32:c3:71:2d:b2:40:ef:79:4b:c6:90:4a:d2:
                    cd:77:4d:c0:e7:70:e0:7c:42:99:0a:ac:27:0f:4e:
                    e0:b9:0e:ac:bc:aa:3f:c4:59:d4:97:d3:f9:2d:0a:
                    64:4c:a4:46:45:b1:fc:81:cd:83:d0:cd:cf:eb:91:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:C3:46:09:DB:D3:0F:E0:D9:97:18:F5:9D:13:AB:EA:9D:F2:5D
            X509v3 Authority Key Identifier:
                keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:90:71:ae:fd:4c:e5:a4:e8:a7:5d:f2:81:aa:fb:bb:91:db:
         e7:0f:03:c1:18:37:8b:2a:ad:5c:92:04:2b:7d:b5:35:b5:23:
         44:bf:74:0b:b4:dd:13:51:31:9f:49:a1:92:06:57:4d:ef:41:
         24:4b:ec:b2:cb:a8:8d:53:c1:c6:0c:04:26:ec:0e:42:64:78:
         84:ba:c5:c5:58:11:63:e5:9a:ba:30:ab:c6:6a:45:07:29:90:
         27:06:b9:cd:86:3f:48:a1:f2:9d:c7:6c:4d:9b:fe:ce:89:8d:
         f0:9b:33:1c:07:19:19:53:a3:0b:26:0e:af:d6:36:a8:2e:cf:
         61:fc:8b:d4:99:dd:3f:23:f3:9f:a3:ef:ed:93:10:a6:52:74:
         a8:cc:52:fe:3d:74:03:ee:e7:18:f1:af:71:5d:d9:a8:96:25:
         c3:69:cd:3c:43:e0:e7:91:14:91:1a:e5:28:58:24:fa:86:6f:
         f6:e3:12:72:2a:1a:a4:ea:b9:b7:10:ba:cc:54:1c:17:c0:1b:
         72:19:9e:fd:17:ef:44:92:1e:4b:a1:7e:e1:ed:c4:64:c4:4c:
         e6:c2:79:b1:e8:53:7d:ed:2b:52:34:34:55:fd:66:d1:80:e5:
         e0:83:77:1b:65:0f:12:cb:37:88:b7:ad:c8:cf:f5:3c:a2:26:
         8b:f4:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:09 2025 by rpki-client on console.sobornost.net