Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          vA271OZWGr9lL0y1UqlI0tRugO76NdCJwXAz/YU04v0=
Subject key identifier:   2B:7C:9C:58:EA:0F:67:84:34:D9:EA:28:3A:CD:77:DC:2C:2E:22:4D
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       38EDAB78BD4438199F76F618B8230ECFB8A6962D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          04D2
Signing time:             Wed 23 Apr 2025 08:32:19 +0000
Manifest this update:     Wed 23 Apr 2025 08:27:19 +0000
Manifest next update:     Sat 26 Apr 2025 17:41:19 +0000
Files and hashes:         1: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: ev9kwx7xYfGQ0wqa7vOCRk3KIttSxKV6RHvfveIzVEs=)
                          2: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: /tYDlm+7FzJ8gja/IWkTc+vVL+l3/jcPAKHO2Fo8Pbo=)
                          3: 3131312e36372e38382e302f32332d3234203d3e203234353337.roa (hash: LOzYi7IlYeMp9QOHAGBPza4xIVDFMZkY2F5HPF37I6E=)
                          4: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: EIVt1gw8uC00TUXe1g4MzSSAjmH7VFXaCY+Hl6qqj+4=)
                          5: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: 79szJlSxFEM6vGgihAOETNzSQWjHNJBKmnEw59Gq12g=)
                          6: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: n62tsL2z93EkvJ5FJ6Ucd+CAqKUW8/RP9Dy3KqIDqZs=)
                          7: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: vhSbfr4PwcH2c1j4QZ7NODAAE3UKxSP2hh5xHxbrnvM=)
                          8: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: 2uhmj0dfbqVvDGktakJ5oY8OeRuRcTikYjNHLnaMjxQ=)
                          9: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: WpCc5wWIke3cUlXvQPfU10u+vQT2+u4asQ1kuTfrBhw=)
                          10: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: ndzf/dY/nmXxj2I9KPRlglxDyJBwxAj+OgRvw2hK3Yo=)
                          11: 3131312e36372e38362e302f32332d3234203d3e203234353337.roa (hash: 9PsTzehCSaVj3oVEGKfLHdsO6UamUj63Cby7WZOY4Lc=)
                          12: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: lrS/GSSKQ2J7NdJ/xy82TzU+/28NXl295mMItZF0aBM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 09:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ed:ab:78:bd:44:38:19:9f:76:f6:18:b8:23:0e:cf:b8:a6:96:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Apr 23 08:27:19 2025 GMT
            Not After : Apr 26 17:41:19 2025 GMT
        Subject: CN=2B7C9C58EA0F678434D9EA283ACD77DC2C2E224D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:4a:3d:3e:04:8a:1c:3f:53:f1:5f:00:84:
                    02:51:e3:e2:03:25:76:3c:1f:be:54:da:11:22:b1:
                    9c:d2:c1:df:0e:a0:75:45:6d:da:e3:dd:7d:23:1e:
                    80:9d:ee:9e:e9:5b:33:f5:7b:3f:69:9a:36:5b:81:
                    b3:48:78:a8:84:bb:1c:e4:8e:d6:e3:58:dd:ec:20:
                    74:3c:4a:a5:54:17:bb:f8:85:d7:ae:2a:51:07:39:
                    8e:5a:f5:57:ee:18:ca:17:25:86:c6:63:ca:f1:e5:
                    ba:8e:33:72:c7:1f:9a:6c:70:58:4d:58:c2:94:c3:
                    5d:5b:f1:0d:74:6e:ef:55:93:92:7f:cb:8f:b0:ca:
                    ba:1a:3f:fb:78:9c:9a:4e:a4:f0:22:b5:0a:1c:bc:
                    06:5f:b9:50:2c:f6:f4:ea:ac:34:5a:6f:95:96:42:
                    4c:fe:e3:ac:3f:04:83:27:5b:ed:c3:a2:f0:50:b2:
                    62:a0:28:f8:80:c8:e0:b2:a8:63:96:fb:d1:57:8f:
                    ef:69:2a:e0:35:2c:9c:b3:2d:f4:b4:fa:8e:89:78:
                    0c:4b:d8:d1:6b:ff:af:bb:fc:f7:22:14:e5:2d:f1:
                    8d:86:8b:9a:62:aa:42:ab:a7:33:34:36:89:f9:ed:
                    65:4c:39:02:cc:e6:17:24:a2:2c:24:3b:a9:ef:6d:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7C:9C:58:EA:0F:67:84:34:D9:EA:28:3A:CD:77:DC:2C:2E:22:4D
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:bf:00:0d:fc:b6:9d:5e:03:ec:89:76:47:0d:6e:d4:8c:
         53:7f:6c:6d:63:91:1c:15:ce:e8:7b:27:8b:e1:80:31:07:5b:
         7d:4f:e4:cc:8b:2f:1a:40:a9:e9:b0:2a:26:7a:d0:07:a2:54:
         7d:c3:b5:59:c5:3f:4c:27:60:37:bc:6b:7f:8b:c6:c5:6d:ca:
         9f:84:ca:b3:91:f4:61:ff:de:9c:01:5f:66:03:98:49:31:c9:
         69:fb:ce:28:be:00:82:49:7c:70:79:9e:74:fc:fb:7d:95:1d:
         d2:7e:51:f0:1e:c2:7e:6d:4c:79:a6:8c:97:c0:91:d3:53:37:
         ba:60:54:eb:65:d0:65:f9:f5:93:cf:6d:4a:20:a0:2d:c0:e7:
         07:b7:5f:85:da:6f:32:a3:87:f8:bf:55:c5:e5:6b:a8:4b:d1:
         e6:ac:7b:92:8f:29:1b:50:51:96:d1:c8:5e:5d:a5:bf:e6:5e:
         1c:f9:d5:04:dc:4c:a4:7a:11:06:a2:c3:20:d9:d8:74:f4:1f:
         b9:c5:10:11:3a:be:14:ed:d6:b4:a5:4e:c0:9a:9e:fe:91:79:
         3b:51:96:36:fa:bd:98:1a:9c:0a:1f:5d:a2:63:52:49:8e:21:
         dc:5a:fc:ae:8c:4c:23:e6:04:9a:8e:1b:ac:dd:2a:27:9a:4c:
         0a:fc:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:12:24 2025 by rpki-client on console.sobornost.net