Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
File:                     30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json)
Hash identifier:          PU4Q9SLCMsSwSj806yWg0VGe10vlM/Re4fmIZlT5daI=
Subject key identifier:   09:84:49:4B:06:3A:C4:83:02:76:1E:EC:CF:BB:57:B6:2F:37:DD:84
Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF
Certificate issuer:       /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
Certificate serial:       50C623291B896498B97E2BDAE73050981C3A1966
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
Manifest number:          E3
Signing time:             Wed 23 Apr 2025 17:01:39 +0000
Manifest this update:     Wed 23 Apr 2025 16:56:39 +0000
Manifest next update:     Sat 26 Apr 2025 19:01:39 +0000
Files and hashes:         1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=)
                          2: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=)
                          3: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: DY1GEkKGIfiug5esoJ735nNYaWebK18gnLogPNgzhW0=)
                          4: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl
                          rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 19:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c6:23:29:1b:89:64:98:b9:7e:2b:da:e7:30:50:98:1c:3a:19:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF
        Validity
            Not Before: Apr 23 16:56:39 2025 GMT
            Not After : Apr 26 19:01:39 2025 GMT
        Subject: CN=0984494B063AC48302761EECCFBB57B62F37DD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:40:b8:3c:ef:20:f8:bf:73:d9:cb:9c:d7:
                    d0:af:da:2e:e1:a5:fb:d0:40:1e:00:df:87:da:99:
                    02:30:6d:56:cc:b3:2e:16:63:da:85:80:9d:db:40:
                    aa:49:7b:0f:0b:e0:82:33:f2:2a:03:e0:ca:21:ca:
                    99:62:93:2a:29:bb:af:fa:5c:c1:25:50:06:06:21:
                    4e:7e:fe:70:8f:a0:5a:eb:e9:12:7a:d4:45:62:f7:
                    56:75:e1:77:1f:d6:f5:ca:62:8b:5a:e3:90:8f:f7:
                    6a:52:3b:e7:22:51:98:96:7e:d4:0f:28:53:04:bb:
                    49:c6:33:b5:12:10:60:26:93:96:e9:8b:9d:6b:ed:
                    44:90:30:6f:58:66:6c:53:10:b3:ad:1f:f2:fd:11:
                    89:20:a9:9e:1f:1a:d4:53:96:d0:6f:4e:91:79:6b:
                    dc:07:d5:1e:eb:d7:c9:34:c1:a5:cc:e0:24:4f:d5:
                    13:ad:12:6f:e9:f1:9d:ba:1f:4a:30:55:07:02:f4:
                    35:35:2d:63:5c:54:e8:f7:64:bc:3b:48:a8:8a:a3:
                    e3:1e:b7:a0:fd:72:c9:1e:97:1b:55:a5:22:e8:87:
                    d3:5b:04:07:fd:8b:94:12:5c:46:3b:1f:d2:a6:ca:
                    b5:dd:e6:e3:6e:9e:fc:e2:f3:61:ed:3e:07:d0:14:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:84:49:4B:06:3A:C4:83:02:76:1E:EC:CF:BB:57:B6:2F:37:DD:84
            X509v3 Authority Key Identifier:
                keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:12:e1:60:33:24:ba:55:b8:c0:ae:e1:c9:26:75:5b:ce:
         49:85:e8:05:d0:6f:ab:61:07:f5:b0:fe:2d:4d:b2:fc:f7:b8:
         7d:db:34:d5:7b:59:36:65:4c:99:8a:c3:93:5a:08:64:61:a1:
         32:41:8c:ba:20:70:1d:99:e2:a4:46:49:d0:0f:71:83:72:20:
         10:f2:2b:22:78:dd:22:8a:cc:39:e2:66:85:e3:b6:ce:69:f4:
         f3:18:9b:59:4f:94:96:08:80:03:e0:9b:ab:d8:8c:dc:0d:f5:
         fd:cc:2a:ff:83:e0:e5:b5:66:f7:fa:8c:a8:1e:b0:82:60:86:
         31:7d:e1:6c:95:72:d6:82:3d:f1:61:1d:6e:b4:bc:eb:b6:b3:
         af:d4:96:a4:12:9a:9d:9f:ab:e0:8c:74:41:c8:1d:d0:84:64:
         36:88:20:a0:d4:cc:c8:c7:92:3f:87:05:c3:7c:d0:f7:14:8a:
         6b:45:b8:b4:62:be:76:b7:9d:6e:e3:f7:c2:b3:2d:14:ff:97:
         1e:f7:a0:3c:ec:9c:a5:69:7f:33:82:78:ff:9b:cf:c7:8f:6e:
         c0:7f:96:df:26:89:ba:90:8e:be:3d:58:6f:46:c5:4f:c0:92:
         cd:f5:a2:c2:05:f4:67:fd:c7:88:8c:20:5b:4a:e6:47:5c:ab:
         8e:40:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net