Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          4tyMpXB8iFn0kTrygGHNvFB/79GdkjyfwFU041GcJws=
Subject key identifier:   20:65:5B:4D:D5:48:A6:54:F3:D2:31:B5:68:9F:08:B5:FD:3B:F4:3F
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       7158EC72B2CE67C2656DE05B7033F62E62547F7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          04C7
Signing time:             Fri 25 Apr 2025 05:10:01 +0000
Manifest this update:     Fri 25 Apr 2025 05:05:01 +0000
Manifest next update:     Mon 28 Apr 2025 10:07:01 +0000
Files and hashes:         1: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: RQ8qS3znXvVJvNtPWPBA0wk2ih45H6PiyFCH7LH26So=)
                          2: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: zXSqQBvlzL5Qd7ukUJxUD+iaVT3g/E6NjHe1W2xTBhw=)
                          3: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: U7QS9bMS2+t1XHExH+JHZSXP/9sTh8XHPZioautpjoI=)
                          4: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: JqHWDCQrPQV7fXq4Fw3xJkEwwIkfmmkIlguZIHGiTX0=)
                          5: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: 7RROuYODVVhNO2+bjbdOGIl/UFrzyWOSbw909j2VmTo=)
                          6: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: 5kphXit/LNBkVw8osIk/3vijQtN+EbxCtDf6F2cC7lU=)
                          7: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: bcv9+A8fnNa4nTKxyLUpprqdZBOoY3R/2lzSPgws1GM=)
                          8: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: QT2s5B9t6PnCCcNGSmiWwWVIE1Y3OmnLse/XbCIYmGE=)
                          9: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: nZcY2gfxAEyBR5vBIabcGR8YJ3boENfhzaPlLrFWCrY=)
                          10: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: ii86NXnr/WYmHnry427PiBTknuSG/osb8uEvWhmtijc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:58:ec:72:b2:ce:67:c2:65:6d:e0:5b:70:33:f6:2e:62:54:7f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Apr 25 05:05:01 2025 GMT
            Not After : Apr 28 10:07:01 2025 GMT
        Subject: CN=20655B4DD548A654F3D231B5689F08B5FD3BF43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:14:4d:c1:d4:b5:c2:0a:65:3c:57:4e:9c:
                    37:8e:d2:26:20:4e:dd:cc:b8:f6:2b:2e:75:06:e8:
                    27:bf:7f:01:3c:19:b9:f5:4e:0d:01:61:2d:33:c1:
                    c6:3b:0a:e6:77:a2:e8:64:16:f3:2c:f4:fc:48:23:
                    9f:a8:f2:3c:bb:82:d1:62:a2:76:b4:59:cb:d2:7b:
                    27:cc:e3:32:9f:2f:9a:dc:bb:a4:6e:06:ce:59:b4:
                    fa:95:e6:86:eb:be:2d:30:f6:00:67:b0:3a:bc:f1:
                    72:d7:da:96:39:e1:0c:27:4b:0e:d6:bf:17:46:c5:
                    5e:cc:dd:29:9a:e9:67:69:85:d7:ae:c2:49:8d:70:
                    72:9c:1c:e2:f1:fa:67:87:fb:bf:6e:92:d5:ab:76:
                    54:84:b2:d2:06:ef:16:99:7f:6b:8f:26:23:5f:bb:
                    d1:2c:d2:59:b1:87:7f:9d:2c:05:9b:9c:6a:05:62:
                    5e:eb:15:33:17:2c:a5:d4:a9:50:2d:2d:43:f2:42:
                    c7:af:e4:0b:90:48:1b:c4:57:df:1b:3f:6d:80:a6:
                    38:31:aa:ee:3d:54:51:7c:b1:0a:0e:47:60:ce:5d:
                    e9:dd:1f:9c:81:36:a9:81:11:91:d1:c4:60:3b:48:
                    c9:31:96:d5:73:0d:af:9c:15:66:1b:ae:d1:8a:4d:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:5B:4D:D5:48:A6:54:F3:D2:31:B5:68:9F:08:B5:FD:3B:F4:3F
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:14:75:a2:df:96:57:5a:76:4e:78:e4:94:55:25:7c:e3:6e:
         87:76:ba:25:42:d3:72:da:54:e0:cf:67:38:e2:03:25:58:43:
         80:da:df:f9:27:e7:38:9a:2d:4d:17:a5:d0:07:5b:cb:1b:3e:
         11:31:92:39:03:bf:76:d4:9f:67:27:30:e2:29:83:79:6c:3d:
         34:24:15:d2:07:98:04:9d:f9:32:1f:7a:48:77:a5:1a:33:6a:
         7a:07:c3:33:38:64:59:07:33:a3:68:9e:1f:51:28:58:6e:b3:
         5d:ec:35:4e:b8:d5:46:82:7d:2c:98:4c:92:3d:07:8a:ad:78:
         dd:5b:23:79:eb:4f:20:3e:59:79:91:a5:72:b7:35:af:c0:3e:
         dc:db:e5:6a:9f:78:2a:e0:28:25:64:8b:a4:f6:ec:70:81:03:
         47:79:60:03:64:c3:ce:d1:c8:73:6c:aa:56:bf:84:22:be:eb:
         19:d9:7c:5c:05:f0:26:65:06:88:16:ae:3c:c8:dd:1d:27:39:
         03:bf:bc:23:b2:00:14:25:8b:20:cc:e7:58:42:e6:fd:79:f7:
         5f:e9:ec:d4:b9:12:85:82:0d:be:69:8d:ab:4f:f6:51:04:a4:
         aa:f6:c9:b8:6c:66:2c:a0:37:ba:a2:9f:1a:ff:88:a0:02:57:
         cf:be:90:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net