Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft
File:                     2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json)
Hash identifier:          fajQPXJH2hqcjEFyF8DohZcy6QUZ2IR+QcIPeTzB1r8=
Subject key identifier:   00:32:94:96:4D:F0:3F:93:37:BF:6E:83:95:AD:73:C7:DE:F2:96:86
Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D
Certificate issuer:       /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D
Certificate serial:       55ABD1C3D7C66711FA931DB9F884E5DF5C4E4521
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft
Manifest number:          0211
Signing time:             Wed 23 Apr 2025 08:42:25 +0000
Manifest this update:     Wed 23 Apr 2025 08:37:25 +0000
Manifest next update:     Sat 26 Apr 2025 09:58:25 +0000
Files and hashes:         1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=)
                          2: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=)
                          3: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: JYVVXBqo3Lsh3Zor6acMor7ZE9XK/5XUiKdAk6nt6H0=)
                          4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl
                          rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 09:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ab:d1:c3:d7:c6:67:11:fa:93:1d:b9:f8:84:e5:df:5c:4e:45:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D
        Validity
            Not Before: Apr 23 08:37:25 2025 GMT
            Not After : Apr 26 09:58:25 2025 GMT
        Subject: CN=003294964DF03F9337BF6E8395AD73C7DEF29686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:2f:a4:dc:14:11:bb:84:41:16:35:a4:95:
                    d0:05:a5:31:34:38:de:a9:20:0f:01:02:2b:4c:5b:
                    70:b6:ec:88:e1:96:5d:e5:23:2b:d2:fc:9c:86:b7:
                    ca:aa:60:cd:89:47:e3:0f:01:8b:a8:da:00:e2:0f:
                    bb:b8:b9:02:70:4d:b3:90:ad:5c:fa:22:ed:6f:e0:
                    a2:33:4b:31:99:9b:ce:5c:c6:86:ca:f4:e3:51:b9:
                    fd:e1:27:30:eb:4c:b9:3f:8a:da:cf:f5:e4:f5:34:
                    79:9c:75:d7:96:4c:80:2f:31:6f:71:d2:c9:be:51:
                    2c:98:38:35:e1:a8:a5:6e:4d:47:0a:9c:e7:fa:f4:
                    31:19:53:f4:e7:ea:3f:85:7c:de:93:60:5c:b6:8a:
                    f1:6a:ab:51:89:62:46:27:ce:49:ae:cf:e5:23:d9:
                    87:1d:ac:96:3b:8c:99:c9:dc:50:a9:6b:74:4c:b7:
                    33:17:79:fc:5f:3f:7c:e4:b2:6a:24:fd:95:0c:84:
                    5d:54:9f:ed:54:97:43:73:9d:1b:9a:24:82:be:b6:
                    df:86:4b:5f:00:ea:24:cd:e1:b8:56:8e:92:ca:92:
                    b6:83:b7:49:10:bb:56:21:73:f1:57:41:2d:15:60:
                    d4:3f:35:db:6f:fb:cf:6e:95:0f:9f:e9:3f:d7:03:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:32:94:96:4D:F0:3F:93:37:BF:6E:83:95:AD:73:C7:DE:F2:96:86
            X509v3 Authority Key Identifier:
                keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:65:3b:b5:f7:5c:e5:ad:d7:60:9a:ec:96:fc:0a:60:91:
         e7:bf:f4:d5:4f:d8:77:e3:69:8b:42:98:c8:34:25:71:a7:be:
         87:e4:af:e5:7d:59:75:bb:28:2a:26:fd:09:29:01:c9:ca:8b:
         0c:dc:d5:09:86:d6:45:6a:d5:29:a8:1b:87:d4:d8:47:dc:91:
         60:3a:6a:a8:43:ce:a2:39:20:9e:08:e7:c7:2d:8a:c2:71:5d:
         b4:19:a2:54:07:b0:6c:71:5d:10:47:6c:7b:81:ee:ab:bf:ec:
         68:65:42:17:e4:5e:23:a2:3c:74:3f:25:ad:55:23:33:cf:5c:
         63:cc:b4:fa:e6:a5:39:0a:7b:a8:87:9f:bc:10:a1:3f:b9:e9:
         e9:b4:05:09:a2:d3:81:6b:d1:8e:70:5b:52:5e:bd:cd:fc:f5:
         a4:ad:31:5b:c6:98:58:67:e6:9f:2b:74:b6:eb:43:41:fb:97:
         d2:30:b2:d8:93:88:b8:f7:14:22:be:76:61:d0:d0:9a:14:dc:
         7a:38:9a:aa:0c:94:f8:78:47:a1:4b:fc:2a:9d:80:41:c2:c4:
         e0:7c:ab:c5:8a:9d:b3:02:38:76:9d:49:18:42:d7:2c:68:9e:
         7d:4d:17:49:24:56:60:ec:e6:ea:1b:1e:88:3f:91:74:cf:23:
         50:1b:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:12:24 2025 by rpki-client on console.sobornost.net