Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft
File:                     E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json)
Hash identifier:          0hHOGhYkHbfA1aDgodb0NSSMTYoZ/3sMNqfohqailHw=
Subject key identifier:   E3:40:2A:E0:18:33:5B:AA:C9:8E:44:49:B9:A2:F8:2D:49:C1:0D:23
Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65
Certificate issuer:       /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65
Certificate serial:       06A1E0549EE6F21083CD8A47FE416E393ADD3F35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft
Manifest number:          69
Signing time:             Wed 23 Apr 2025 13:01:50 +0000
Manifest this update:     Wed 23 Apr 2025 12:56:50 +0000
Manifest next update:     Sat 26 Apr 2025 18:54:50 +0000
Files and hashes:         1: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: ZMgOkSZ3/ZMH9Cw4ynFe0bUbUUV7q98dOonQwTKrkes=)
                          2: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: 0HoB6oielNyLm0vJrpzOqCNmXKO9qT/QRoICc6mdd70=)
                          3: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: 4yHX21WHUo392SGtXw+8bz/7pbXAzszyaOP+6cp8BDY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl
                          rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a1:e0:54:9e:e6:f2:10:83:cd:8a:47:fe:41:6e:39:3a:dd:3f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65
        Validity
            Not Before: Apr 23 12:56:50 2025 GMT
            Not After : Apr 26 18:54:50 2025 GMT
        Subject: CN=E3402AE018335BAAC98E4449B9A2F82D49C10D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:a3:56:ad:41:96:07:a7:32:74:f5:a8:65:
                    7b:52:ae:df:35:58:25:26:98:eb:8d:28:e2:c0:91:
                    9e:6e:e9:c6:08:0a:fc:3e:3f:28:4a:ce:c6:e5:24:
                    ca:ff:fe:2e:87:57:d8:a1:b6:0f:cf:15:1b:67:f5:
                    ca:55:b6:61:26:8e:50:94:bf:26:50:c4:7f:79:19:
                    e1:7e:d6:1c:31:d7:50:78:48:9f:2a:44:38:1b:4c:
                    40:be:d1:37:c6:ef:c7:97:0a:f0:2b:48:89:ab:f7:
                    41:20:af:a3:f8:cf:42:e5:12:1c:1a:6b:22:73:7c:
                    34:93:56:d6:9f:6b:b4:68:96:c4:e1:59:49:08:51:
                    85:26:ea:4a:be:78:fd:43:cf:6a:aa:43:d6:a7:9d:
                    2a:09:ef:34:a0:fe:27:16:45:5e:0e:b1:35:fd:73:
                    22:7f:35:14:04:7b:c5:e8:80:67:29:16:1e:cc:be:
                    78:f2:3b:c5:fd:c1:dd:29:f6:d0:93:75:9b:92:d7:
                    72:e0:84:d9:61:70:35:60:10:b1:ca:fb:30:62:72:
                    fb:fd:2e:05:59:3e:7f:f9:11:f9:fe:60:3b:c2:8d:
                    6a:44:91:a2:97:9a:82:88:54:6c:d8:54:9a:07:b3:
                    c1:56:9c:41:53:80:ac:a9:aa:34:f3:30:99:69:f5:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:40:2A:E0:18:33:5B:AA:C9:8E:44:49:B9:A2:F8:2D:49:C1:0D:23
            X509v3 Authority Key Identifier:
                keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:ec:c3:1f:c0:50:f2:07:67:6c:8f:79:aa:d3:86:23:6d:
         f1:ff:6d:8f:af:84:0f:2b:4f:bf:c1:48:8f:c3:8a:eb:ed:f6:
         37:b4:48:b6:93:96:7e:a4:0f:d8:98:35:c3:f3:c0:93:cb:88:
         0e:ec:90:9d:01:38:88:85:0e:5e:66:81:21:2a:18:78:19:0f:
         7d:48:35:a1:92:01:be:ec:09:9d:53:dc:62:71:18:07:76:4c:
         fd:0b:54:e3:7c:a1:bc:d0:f3:1a:94:2f:39:53:45:78:c7:58:
         a1:f5:f0:39:56:5d:26:20:57:fb:0c:74:d3:aa:9e:fb:36:5f:
         44:26:fb:ab:3a:d9:fd:d7:e9:87:22:d3:b7:7c:86:af:bd:c0:
         1b:8f:9d:af:aa:76:ca:1a:e8:34:18:d3:1b:49:8c:d3:7e:c1:
         7a:52:22:a3:0d:b8:71:80:a8:0e:c0:9b:f0:5b:c4:31:c0:48:
         46:34:e6:fb:c5:1b:53:17:7d:1c:fc:ba:e8:b2:8a:a3:0f:76:
         45:eb:47:a1:71:56:0a:10:18:03:2a:21:d0:9b:c6:5d:96:5e:
         cc:ac:8f:7e:55:3d:7a:1b:4a:34:cb:c7:79:8b:54:60:bd:1b:
         2c:e7:18:66:af:4d:b3:34:e0:0f:0e:a2:7c:b6:52:f7:8e:10:
         20:e6:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:33:58 2025 by rpki-client on console.sobornost.net