Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
File:                     B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json)
Hash identifier:          P1OuyNZjyzbCUrP+aiRacJRCMnyIBvxNmxDL8B7i+ng=
Subject key identifier:   E3:5F:49:9F:74:36:5D:6D:81:7B:A4:E0:E0:44:25:2B:DA:AF:29:0D
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Certificate issuer:       /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial:       3DC0E36FCAD3B301254E289683FEE60D1E0A3BD8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
Manifest number:          016F
Signing time:             Thu 24 Apr 2025 10:11:05 +0000
Manifest this update:     Thu 24 Apr 2025 10:06:05 +0000
Manifest next update:     Sun 27 Apr 2025 14:04:05 +0000
Files and hashes:         1: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: cxySA+7GoKy0ZBQ953Jz7wXFE+7U1S6vU/NAFozpO4w=)
                          2: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: 4CYpX855PsKjE7pRqG0I65N8tDE2yevHm2JcGXCxF84=)
                          3: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: UieSxZjEvKIMrWcJdH2TDXUustdkDqF4w0J/hh4yLRA=)
                          4: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: vY8tbOcXriyCtT6FUxDmURMpeDa3xL/alWeAEYVK8DM=)
                          5: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: rFdxCWF2EWmPNUYntxmvjYuYlWk+c8nne3YR21QiUtg=)
                          6: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 7LPe2lEj9jSSghBzwzWvEJHD1rdTalK2jKZeyt7h7R0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
                          rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 14:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c0:e3:6f:ca:d3:b3:01:25:4e:28:96:83:fe:e6:0d:1e:0a:3b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
        Validity
            Not Before: Apr 24 10:06:05 2025 GMT
            Not After : Apr 27 14:04:05 2025 GMT
        Subject: CN=E35F499F74365D6D817BA4E0E044252BDAAF290D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:af:59:b6:5c:83:c1:05:c9:cf:0c:e4:96:
                    e5:7f:3f:32:7e:8b:c8:e1:35:b3:29:28:3b:cc:de:
                    09:1c:e0:bb:54:04:7a:93:63:95:a1:d0:17:ed:6b:
                    b7:f1:5c:b6:42:d2:1d:3d:b5:a4:42:4a:50:f8:62:
                    cc:8a:eb:ee:84:9d:2b:bd:65:eb:36:77:e2:24:69:
                    31:b3:40:f7:9b:08:cb:f7:6d:cb:45:00:5a:36:5e:
                    d7:69:9f:e8:53:a3:1d:b1:ac:ec:64:76:07:69:83:
                    b5:f2:43:82:05:93:e7:b9:c3:42:03:b7:8b:0a:2b:
                    d4:11:a5:c8:4b:da:aa:bb:71:28:37:a8:8e:c5:bf:
                    ac:f9:9a:01:d1:d2:24:c2:2a:e0:b3:35:de:8d:98:
                    4f:0a:ee:43:2b:0c:15:00:42:a8:58:10:be:e2:0f:
                    2f:bf:9c:6d:f9:f9:f5:5d:ba:d2:ae:2a:0c:b3:90:
                    ec:55:22:35:17:6b:b0:84:ce:46:32:75:75:f6:f2:
                    30:60:7b:15:f7:e8:2b:ac:fc:b1:72:79:7a:1e:70:
                    d6:3a:27:20:07:7c:08:42:31:b7:bf:68:02:ec:dd:
                    f4:50:9d:8a:56:78:2e:17:c9:ff:03:5c:02:ad:4b:
                    f8:bf:cf:8f:8c:e4:27:7f:ed:e6:6c:74:44:ba:c4:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:49:9F:74:36:5D:6D:81:7B:A4:E0:E0:44:25:2B:DA:AF:29:0D
            X509v3 Authority Key Identifier:
                keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e4:6a:47:ba:9d:4d:ad:3d:1c:bb:e6:de:92:33:22:e6:05:
         db:30:ce:47:89:d8:81:01:c2:82:e3:bc:34:f2:48:66:ed:60:
         6b:3d:99:ca:f2:53:b4:28:83:29:74:e2:51:0f:3a:4e:f3:a6:
         86:2d:53:55:76:35:76:15:c7:f3:db:86:01:40:f0:02:9f:27:
         7a:9c:92:72:0e:09:c9:ff:ae:c4:fd:ff:a5:5f:d3:72:95:72:
         41:30:5b:39:5f:d8:fc:5e:87:07:cb:ee:a4:c9:8f:a6:88:34:
         4a:dd:db:8d:8d:b3:c1:b7:f6:2e:a5:fe:94:89:5a:44:f6:2a:
         21:72:38:e9:c3:f4:8d:11:b0:f8:0f:e2:60:5a:e1:a9:51:92:
         54:c3:8d:30:df:e9:cf:97:a4:e2:24:35:bc:b1:ca:9a:b4:24:
         f3:df:af:64:07:3a:9a:08:22:02:14:e0:55:71:99:14:91:84:
         59:4f:ac:74:50:e2:dd:8f:0b:47:f6:85:5c:d1:98:e0:00:6d:
         51:1c:f2:61:5d:88:3c:19:ae:3d:e9:6a:a1:df:08:91:04:89:
         e8:ff:32:0f:55:3f:1b:0e:63:c9:47:19:11:09:51:cc:d9:0f:
         78:20:02:3c:7f:e0:b6:bd:73:4e:b0:d8:15:39:4e:75:af:cb:
         58:41:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:01 2025 by rpki-client on console.sobornost.net