Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
File:                     DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json)
Hash identifier:          nFjM2vV5BlE//7i2QaQ+6k8UWsGCmLJIiBuio84IKac=
Subject key identifier:   32:8B:FF:EE:5A:14:20:85:90:D4:9E:2A:2A:B3:D6:70:8E:65:9F:6B
Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
Certificate issuer:       /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Certificate serial:       3D34B9D2392FD6B8B9A35815E1C171199D73C15D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
Manifest number:          DE
Signing time:             Wed 23 Apr 2025 11:11:40 +0000
Manifest this update:     Wed 23 Apr 2025 11:06:40 +0000
Manifest next update:     Sat 26 Apr 2025 11:27:40 +0000
Files and hashes:         1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: Y75qCB4MrvpIC9F7y5Nq4KDcneyQ7e02U4yfwXJDiC8=)
                          2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl
                          rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 11:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:34:b9:d2:39:2f:d6:b8:b9:a3:58:15:e1:c1:71:19:9d:73:c1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
        Validity
            Not Before: Apr 23 11:06:40 2025 GMT
            Not After : Apr 26 11:27:40 2025 GMT
        Subject: CN=328BFFEE5A14208590D49E2A2AB3D6708E659F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:73:5d:b9:fc:42:4d:b7:5d:f4:f2:22:46:
                    98:a6:08:65:86:73:1f:68:79:15:b1:35:53:99:67:
                    53:d7:4f:ac:43:a2:7d:31:43:7f:26:7c:52:de:d0:
                    6a:81:5d:5a:eb:4a:7a:a6:d3:21:10:8d:c7:08:00:
                    ae:73:c2:53:8a:15:8e:18:97:d0:1e:5a:35:f7:48:
                    d0:a9:b6:52:66:8c:4d:50:24:8d:a0:a1:2f:06:2c:
                    f7:90:45:c5:6a:a4:35:8c:c8:44:81:9c:a7:19:33:
                    70:df:76:94:85:e8:a6:74:3b:54:1a:79:40:56:b3:
                    e5:7f:05:ca:96:df:22:ae:71:ac:a9:5d:b8:f5:6a:
                    4d:d4:12:03:de:3f:f2:88:61:1b:88:ee:6f:17:3e:
                    9c:f8:43:c0:53:d0:c9:7b:df:db:7c:55:80:93:8c:
                    aa:dd:51:29:b9:52:59:c1:a8:95:7b:7a:cc:fe:9b:
                    77:cc:c6:33:43:7d:40:1b:79:5a:3b:cb:f7:6a:ea:
                    80:e3:a9:7d:ff:b2:3e:76:33:d7:64:30:3d:07:55:
                    7c:ae:5c:48:cc:50:cb:4a:c1:9a:5c:89:9f:be:93:
                    14:95:ee:ac:e6:bf:f6:24:17:63:59:23:d2:44:b0:
                    12:cb:94:0b:54:8c:48:55:8c:10:a8:7d:6a:ef:87:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8B:FF:EE:5A:14:20:85:90:D4:9E:2A:2A:B3:D6:70:8E:65:9F:6B
            X509v3 Authority Key Identifier:
                keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:02:88:cd:4a:09:53:96:f6:e4:3e:d6:8d:a0:ac:79:04:26:
         86:a2:91:02:08:cd:d2:36:dc:39:a1:6b:0a:5d:8b:77:2c:ce:
         56:cb:41:12:96:fd:9d:86:20:16:8c:55:04:91:d4:af:97:87:
         17:55:54:68:9f:19:8d:18:e7:56:dd:54:4e:2e:32:51:90:1f:
         17:44:42:77:b9:60:66:74:4e:0d:7e:22:f7:ad:1f:16:cd:6e:
         d6:53:e6:e0:8f:46:b6:e0:95:fb:08:74:e0:a0:1b:56:e1:3f:
         d7:c4:8a:3c:0f:9a:a9:85:6c:14:22:3f:18:1b:4d:04:83:4c:
         57:9c:46:80:02:28:e8:ef:45:b0:50:b7:4a:e3:9a:57:b4:cc:
         d4:29:55:9d:9b:41:8c:77:04:c6:7d:7c:9f:e9:f6:e0:d7:d9:
         db:43:d4:6b:b9:0b:e7:09:0e:b8:15:19:47:67:1d:d7:1b:17:
         e4:6e:35:c5:41:23:a1:bc:c1:a6:02:f7:ad:6d:dc:ec:27:f9:
         7e:ee:dd:ab:e9:a3:86:8e:31:59:cb:25:f9:57:bc:d4:43:1f:
         0b:bc:ef:a6:70:13:98:9f:f2:4d:30:37:b5:84:0a:e8:db:ca:
         d1:54:20:b3:ff:1a:39:ab:81:a0:5b:66:2c:6c:81:8e:11:de:
         51:78:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 13:25:44 2025 by rpki-client on console.sobornost.net