Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
File:                     16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json)
Hash identifier:          yG1f9ce0LCZAWJOgCgc3XyrcJqgJaFgFrMXvCgFkXMc=
Subject key identifier:   FA:58:48:F4:66:11:3D:21:FC:C0:42:F5:77:46:FE:F1:97:D9:62:3B
Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
Certificate issuer:       /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Certificate serial:       5C752C02876BC681E9950B304D001EFAB9A700BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
Manifest number:          EE
Signing time:             Sat 26 Apr 2025 10:11:08 +0000
Manifest this update:     Sat 26 Apr 2025 10:06:08 +0000
Manifest next update:     Tue 29 Apr 2025 20:13:08 +0000
Files and hashes:         1: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: km/J3O6wA+/+giyqpUHqvd0x617eyhN+dq0ZwqMW8PA=)
                          2: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: TXYr7xlRPrA+TeYAqJjZMnvuwiJH7rnZwOtV2GWKbYo=)
                          3: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: dOd/WmcL1O2XqOSnpwsMSYP0+oN55Jz82rLt6CdY2eM=)
                          4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
                          rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:75:2c:02:87:6b:c6:81:e9:95:0b:30:4d:00:1e:fa:b9:a7:00:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
        Validity
            Not Before: Apr 26 10:06:08 2025 GMT
            Not After : Apr 29 20:13:08 2025 GMT
        Subject: CN=FA5848F466113D21FCC042F57746FEF197D9623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:3f:d9:03:fe:e0:8f:92:a3:3f:14:88:5c:
                    ab:12:8b:03:fe:08:b3:e4:a5:76:5b:e7:ba:d3:26:
                    3d:cf:73:0a:56:b6:3a:ed:03:0e:60:28:31:99:0d:
                    d9:1c:2d:78:7d:e9:73:8b:46:a9:56:1d:d5:54:84:
                    e0:ce:ed:d7:b9:ed:21:af:ed:62:1f:11:a0:b6:05:
                    97:2c:69:4b:9d:4d:6a:35:bd:c1:0e:d1:c8:cd:0f:
                    c7:f0:03:0b:5d:63:f7:fe:54:54:02:3f:11:1b:9d:
                    3b:22:06:79:02:6d:fa:e0:b9:1b:53:d6:7d:98:d4:
                    1d:33:f8:b6:ee:9c:73:d1:73:cc:63:ed:81:78:6d:
                    a7:33:69:4d:87:de:a4:b4:9f:c5:02:ea:5c:86:9c:
                    a6:41:e0:51:c7:a1:49:77:b2:4d:a0:c8:37:4a:de:
                    09:e9:d2:62:e9:5b:77:a9:7a:28:87:4d:7b:f8:45:
                    5c:5d:a4:96:48:e0:55:44:c7:d4:d7:8d:36:95:82:
                    64:cc:d6:12:94:28:1e:ac:e5:8f:0f:02:32:ac:1f:
                    bd:80:97:71:ce:ba:dd:b3:8c:27:20:9e:21:a3:99:
                    aa:ae:fc:ac:73:b3:f7:40:c0:e4:f3:23:ff:db:6c:
                    9c:08:27:a3:33:12:0a:bc:a0:82:0e:bc:63:2b:5c:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:58:48:F4:66:11:3D:21:FC:C0:42:F5:77:46:FE:F1:97:D9:62:3B
            X509v3 Authority Key Identifier:
                keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:76:5e:36:67:72:43:72:14:4e:fb:e3:4a:d9:f8:ce:b0:
         17:d0:0b:c2:14:e4:eb:c2:44:93:48:9e:cc:be:4b:a8:d5:ce:
         82:61:f3:b3:59:5d:bb:65:9e:57:da:00:c6:f9:d3:c1:08:29:
         a7:6a:7c:b6:83:ee:39:19:40:cc:02:da:c5:4e:4f:5f:24:2d:
         1e:49:ec:dd:e3:c4:1e:3f:ae:90:a5:35:70:80:9e:b6:ca:22:
         a6:87:54:bc:1a:b7:7b:93:89:58:f1:91:98:ae:80:c4:fb:7b:
         03:17:53:f8:f2:8c:9b:26:ed:61:6d:2b:af:20:6f:08:fb:32:
         7f:fa:c8:0d:d4:23:8f:9d:18:0e:bb:82:cc:b3:2f:9d:eb:0b:
         9a:51:3d:29:c1:aa:0a:85:6d:95:22:23:6c:3b:97:67:0f:1f:
         6d:41:53:82:57:94:6d:b2:a5:e6:50:b0:73:45:16:75:b2:79:
         94:3a:8f:8b:f2:7d:d6:03:3e:32:09:f5:78:bd:e8:3a:d4:a8:
         16:e5:33:43:ab:43:99:49:fc:a5:d2:00:5f:9b:ed:e6:0c:3b:
         5e:06:32:be:1a:b1:6d:c0:a5:94:60:6d:a5:ea:42:dd:13:f1:
         6b:78:39:69:94:a4:15:e3:7c:18:a8:6b:3d:1a:32:a8:64:1d:
         29:80:5b:6f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXHUsAodrxoHplQswTQAe+rmnAL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD
NjE4Rjk3RTAeFw0yNTA0MjYxMDA2MDhaFw0yNTA0MjkyMDEzMDhaMDMxMTAvBgNV
BAMTKEZBNTg0OEY0NjYxMTNEMjFGQ0MwNDJGNTc3NDZGRUYxOTdEOTYyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5T/ZA/7gj5KjPxSIXKsSiwP+
CLPkpXZb57rTJj3PcwpWtjrtAw5gKDGZDdkcLXh96XOLRqlWHdVUhODO7de57SGv
7WIfEaC2BZcsaUudTWo1vcEO0cjND8fwAwtdY/f+VFQCPxEbnTsiBnkCbfrguRtT
1n2Y1B0z+LbunHPRc8xj7YF4baczaU2H3qS0n8UC6lyGnKZB4FHHoUl3sk2gyDdK
3gnp0mLpW3epeiiHTXv4RVxdpJZI4FVEx9TXjTaVgmTM1hKUKB6s5Y8PAjKsH72A
l3HOut2zjCcgniGjmaqu/Kxzs/dAwOTzI//bbJwIJ6MzEgq8oIIOvGMrXBErAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+lhI9GYRPSH8wEL1d0b+8ZfZYjswHwYDVR0j
BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz
QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4
Rjk3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh
MWQtNTlkMDcxYTQxMmEyLzAvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcw
QTVDNjE4Rjk3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACHzdl42Z3JDchRO++NK2fjOsBfQC8IU5OvC
RJNInsy+S6jVzoJh87NZXbtlnlfaAMb508EIKadqfLaD7jkZQMwC2sVOT18kLR5J
7N3jxB4/rpClNXCAnrbKIqaHVLwat3uTiVjxkZiugMT7ewMXU/jyjJsm7WFtK68g
bwj7Mn/6yA3UI4+dGA67gsyzL53rC5pRPSnBqgqFbZUiI2w7l2cPH21BU4JXlG2y
peZQsHNFFnWyeZQ6j4vyfdYDPjIJ9Xi96DrUqBblM0OrQ5lJ/KXSAF+b7eYMO14G
Mr4asW3ApZRgbaXqQt0T8Wt4OWmUpBXjfBioaz0aMqhkHSmAW28=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:04 2025 by rpki-client on console.sobornost.net