Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
File:                     D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json)
Hash identifier:          1Kl0rMHg00bpVefjXgakwP4n4SsetDOx5d3Ho9tX+Tc=
Subject key identifier:   05:69:8A:01:14:C5:72:AD:FE:50:AC:0B:5C:A6:EA:96:8F:37:EC:05
Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A
Certificate issuer:       /CN=D8D82E797873C8877988A42E5C473D1919238C2A
Certificate serial:       765C329ECC8C6A8B60F71B8B9FD86D5168F3F43E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
Manifest number:          CD
Signing time:             Thu 24 Apr 2025 04:30:51 +0000
Manifest this update:     Thu 24 Apr 2025 04:25:51 +0000
Manifest next update:     Sun 27 Apr 2025 09:30:51 +0000
Files and hashes:         1: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=)
                          2: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=)
                          3: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=)
                          4: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: CgdKJ3gEnOKabkZmbS17v6TQQ9WeSUg6gmu3PIaUfuE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl
                          rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 09:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5c:32:9e:cc:8c:6a:8b:60:f7:1b:8b:9f:d8:6d:51:68:f3:f4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A
        Validity
            Not Before: Apr 24 04:25:51 2025 GMT
            Not After : Apr 27 09:30:51 2025 GMT
        Subject: CN=05698A0114C572ADFE50AC0B5CA6EA968F37EC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:fc:a1:ed:f3:d5:dd:70:ee:50:75:6f:86:
                    c4:4b:77:8f:0e:c7:72:4e:b7:d2:c6:be:69:a7:c2:
                    a3:4e:01:3b:fc:1e:cc:49:41:7b:7c:a7:8c:bf:be:
                    68:1e:30:f1:05:dc:2e:41:4b:c1:7f:47:5b:54:de:
                    df:d1:0c:96:d9:e7:bf:6f:87:10:13:12:fa:7b:14:
                    22:99:1d:65:2f:d3:ee:ba:7f:88:82:d6:11:fd:e9:
                    08:ac:ec:93:08:dc:bf:36:5f:f8:24:e7:7b:6e:86:
                    d6:4a:c2:bc:00:59:4b:53:20:60:2b:70:fd:1c:ea:
                    f6:47:e1:aa:df:56:5f:3a:55:10:a8:c7:c5:e6:08:
                    d8:49:a3:95:0e:b4:18:69:7f:dc:9f:e4:9b:a4:52:
                    29:4b:e6:bb:9d:20:b9:3d:3c:72:bd:a8:db:50:f3:
                    5c:ce:5a:84:52:05:80:3b:39:a8:16:c7:34:4e:db:
                    e2:bc:7b:d5:9e:c1:a5:3e:38:35:08:65:5f:ca:9f:
                    f1:4b:76:d5:d9:e3:9f:68:b9:64:47:4d:1d:4b:cb:
                    80:3e:f7:df:c4:f0:64:e3:29:a9:d1:98:63:5c:8f:
                    9e:7e:0a:bd:09:f2:ee:11:53:c3:96:2a:be:98:57:
                    3d:6e:c2:08:30:ed:08:6a:62:c0:e2:21:81:e6:9b:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:8A:01:14:C5:72:AD:FE:50:AC:0B:5C:A6:EA:96:8F:37:EC:05
            X509v3 Authority Key Identifier:
                keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:72:3c:d8:cf:79:65:dd:51:f4:05:e3:8a:17:d0:69:54:
         a5:69:5c:41:8e:d1:2f:d8:a8:3e:d1:08:fb:e7:69:4c:e6:8c:
         ce:76:2c:f2:90:b7:31:40:dd:5f:ef:7b:80:96:3b:ba:d2:8b:
         8c:2a:53:85:56:cb:65:53:61:7a:aa:d6:ed:1b:de:4f:80:33:
         a2:42:cb:a3:49:2e:cb:80:24:52:ac:62:34:30:10:83:aa:16:
         7c:2e:9d:e4:5d:3f:7b:8e:5d:ce:f8:aa:62:32:2a:14:90:fb:
         d5:83:f4:a6:cd:2a:3b:84:f6:05:0b:fd:f1:8f:50:95:90:60:
         31:fc:31:1a:27:36:1b:bb:9b:cb:a0:09:49:8e:df:29:42:8a:
         61:f2:94:cc:7a:e2:67:85:17:5a:e0:a7:33:0d:e1:ca:70:29:
         63:fc:cd:3f:2e:e1:6e:47:c4:2f:eb:dc:2e:01:fd:d1:18:ba:
         69:bf:ae:a9:9f:7e:e2:ac:61:e0:0b:08:58:35:75:bb:0a:43:
         73:2c:58:05:6c:d9:2c:b9:ac:21:a5:12:45:4a:e2:68:87:25:
         94:51:93:a8:d0:c4:04:fc:12:8f:a4:ca:5b:21:ba:24:21:ed:
         10:2b:4a:0d:aa:c5:6f:3f:55:99:5d:03:92:42:ce:3c:a2:f7:
         a5:e8:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net