Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
File:                     B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json)
Hash identifier:          pGis9sggqIdlOknygoDaG+u5qeKS82py/mT/0NEXkxw=
Subject key identifier:   28:FE:C3:8E:60:4B:A4:20:29:DD:2E:54:38:AA:34:8B:FF:7F:39:CF
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       6ECD0D110B62AD51E4198858D5B11EBA78EFDE83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
Manifest number:          04D0
Signing time:             Thu 24 Apr 2025 18:20:05 +0000
Manifest this update:     Thu 24 Apr 2025 18:15:05 +0000
Manifest next update:     Mon 28 Apr 2025 05:16:05 +0000
Files and hashes:         1: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: AfAE6Sq3DQxMPZ3iNsBxgnE3MeI91A5NdzSsH6qy25c=)
                          2: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: ns9PXtaKxgZQCJ0YDRzg3/HGZ6g5Dvk9tgk4KVeFibk=)
                          3: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: b93+pZQmU5PXevCIV8/I+UyyjNhwLNY58iZkuI8/DZY=)
                          4: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: aZaId4noTFIvWMm6/SPvkXDF9+xijyvzfl6ZzMpVrdM=)
                          5: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: jKlwcNnnsnial+/jneL8P/DEDv++vIkR3WSchUhE9yQ=)
                          6: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: FpCRPN3/sh87yKc8VhdJ2zd+tYzqklLo+UKit0tTGBI=)
                          7: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: QNOScV9kvLXfJ4ZvrZSU6WwTkajrzvaS7q6+eyoaI+A=)
                          8: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: s2Z9bMWQLiKwFbH9doRdyOIOSB0aQByVuaUp9ml9odE=)
                          9: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: MSzljIuYQfz1eIyPrxVgE2dh+zA9wOeElTFbm36ZtIg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cd:0d:11:0b:62:ad:51:e4:19:88:58:d5:b1:1e:ba:78:ef:de:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Apr 24 18:15:05 2025 GMT
            Not After : Apr 28 05:16:05 2025 GMT
        Subject: CN=28FEC38E604BA42029DD2E5438AA348BFF7F39CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:07:80:12:49:38:19:aa:b4:b7:9f:42:cb:
                    11:d2:32:3d:b3:1a:45:24:34:53:60:d0:73:0f:1d:
                    24:a4:08:05:1b:f7:49:f8:25:18:a9:94:61:53:4f:
                    c8:bd:24:40:3d:c4:86:75:9d:b7:43:39:93:77:b2:
                    8c:d2:5c:6b:0e:3b:6e:fe:1f:31:cf:5c:7c:1b:4e:
                    da:dc:7b:22:0b:a8:1f:79:d0:67:1f:bb:d8:74:11:
                    54:cb:0b:df:9f:59:f7:c2:36:e9:c4:18:5c:f8:95:
                    8f:44:8b:78:b5:0b:93:11:1d:8b:af:96:5c:96:cf:
                    1e:8f:eb:e1:38:2d:17:f8:52:71:5a:2e:89:6c:ca:
                    fd:19:9a:93:55:2f:5a:75:9b:33:b7:61:69:93:9e:
                    d3:5b:11:c2:dd:e5:64:93:f3:cd:92:d3:5d:22:16:
                    c0:ab:21:a1:ae:f6:b1:92:23:db:af:cb:71:5e:2c:
                    6a:82:e4:3f:d9:15:7a:c6:cc:bc:ed:87:41:7a:60:
                    eb:18:16:92:b6:7b:19:b6:33:43:c4:dc:fe:37:14:
                    13:76:38:7e:0d:3e:37:16:6a:60:b1:37:2e:6f:7e:
                    9b:02:b8:a8:8b:be:43:59:c0:2d:04:36:a5:67:10:
                    81:35:05:5c:a5:7f:c6:8a:e7:54:03:87:39:a9:ac:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:C3:8E:60:4B:A4:20:29:DD:2E:54:38:AA:34:8B:FF:7F:39:CF
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:72:81:d0:83:6f:8c:87:8a:1b:d7:f6:09:a7:d6:3f:ea:24:
         b4:6a:81:51:2e:22:d7:4c:00:11:29:97:38:5e:8b:94:b2:28:
         5a:78:5d:8c:23:68:fc:42:e9:c4:ec:98:9b:15:df:4c:b7:a5:
         08:66:57:88:be:8a:04:6b:1b:85:a7:0f:a2:da:68:7e:9b:6a:
         35:00:b3:e1:6d:ba:1d:4c:52:74:13:96:6c:73:8f:27:19:79:
         19:6d:bf:cd:46:08:96:9c:c7:11:bf:5c:67:43:9c:21:ff:be:
         41:7e:82:33:01:92:8c:1b:c5:f3:5d:b9:7b:79:51:c3:87:1b:
         d8:e9:06:15:29:dd:f4:22:bd:4e:a2:2b:ef:b6:cb:2b:03:7c:
         b7:92:78:e2:a5:5b:27:2b:d3:9e:57:36:bd:9b:aa:9a:1f:c3:
         f4:ab:c2:cd:99:5b:27:25:84:79:66:3c:ab:43:f4:82:3e:81:
         4e:5a:de:a5:15:20:0e:f9:2a:f5:cf:22:52:15:65:ad:fe:08:
         94:2c:b4:44:9f:14:c7:ac:7f:7e:8f:0d:aa:6b:7a:ed:27:ca:
         40:43:09:e2:1c:07:6a:3b:15:8a:6c:ab:b2:27:a8:c1:0b:f9:
         6d:e9:1a:b7:43:1c:d3:44:d9:b2:b6:ae:93:96:5a:64:1d:2b:
         2e:96:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client on console.sobornost.net