Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
File:                     1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json)
Hash identifier:          R4VMZ9cQ1LR5SV+NcbS4O2OuAnCbj7HZWVHd409WITw=
Subject key identifier:   00:DD:0C:8D:21:57:12:6A:68:1E:C5:8E:7B:C8:74:F5:7E:16:80:1D
Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D
Certificate issuer:       /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
Certificate serial:       570AE0E759E754E835A9E94310217068738DE3DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
Manifest number:          04C9
Signing time:             Thu 24 Apr 2025 17:41:57 +0000
Manifest this update:     Thu 24 Apr 2025 17:36:57 +0000
Manifest next update:     Mon 28 Apr 2025 01:06:57 +0000
Files and hashes:         1: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: DYsfoHydVZmYdj94omemhRnLTfnM8HloEUBIxoK/eEw=)
                          2: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: uhFXD5HucnvLa577o/lzdkI4bHtpnmfQ2EHjnkZ6ZlU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl
                          rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0a:e0:e7:59:e7:54:e8:35:a9:e9:43:10:21:70:68:73:8d:e3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
        Validity
            Not Before: Apr 24 17:36:57 2025 GMT
            Not After : Apr 28 01:06:57 2025 GMT
        Subject: CN=00DD0C8D2157126A681EC58E7BC874F57E16801D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:d0:90:5f:e6:28:2a:77:db:0c:ba:86:72:
                    aa:bc:6c:8e:3f:0a:d2:44:6b:da:06:29:2f:65:06:
                    a3:fd:a2:cf:d1:95:2a:c0:7f:49:49:8a:66:c9:88:
                    ad:f0:6a:e5:d6:b4:47:c7:68:47:7c:9f:82:c6:34:
                    d6:6c:bb:b2:1c:95:dd:78:6c:59:94:95:98:11:f2:
                    45:07:7c:7b:e9:93:9a:8c:3d:e3:c5:ae:4a:c7:4e:
                    5b:5d:c8:ec:69:a9:99:4a:00:ca:82:4a:21:e7:c3:
                    90:9a:8b:8b:59:ce:b4:5a:a0:2d:ae:fb:89:4b:1c:
                    8c:a4:ac:85:ab:22:c1:91:ae:08:c2:c3:ec:77:3c:
                    d6:92:84:ad:1f:8e:a1:43:3a:19:a3:93:28:25:fd:
                    18:41:62:58:33:76:4e:ee:d7:ea:62:17:eb:02:39:
                    8a:88:28:d8:17:37:ee:5f:90:7f:28:76:be:ec:3a:
                    0d:b7:90:e2:ba:e7:07:8a:5b:c3:4a:63:29:61:07:
                    3f:8c:fe:4f:a1:e6:ae:2d:eb:85:98:12:27:84:02:
                    94:15:16:6f:c8:95:5e:51:f6:8e:5a:66:5f:1f:cf:
                    19:62:2f:06:bb:cf:bf:a1:63:d8:b5:e3:6d:bb:cd:
                    94:f7:c8:13:ab:fd:a3:96:60:c3:ef:54:f5:2f:47:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DD:0C:8D:21:57:12:6A:68:1E:C5:8E:7B:C8:74:F5:7E:16:80:1D
            X509v3 Authority Key Identifier:
                keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:30:f9:f5:f4:1e:b6:fb:8c:f8:d5:54:fa:a7:83:ac:63:
         ad:16:73:93:e9:dd:ca:5a:33:3f:88:d0:b0:46:c0:a2:56:ed:
         90:e5:97:cd:36:6c:31:cd:f9:90:fc:e6:b4:5a:78:f2:81:01:
         fd:76:81:9e:e8:64:42:27:bf:17:7e:f4:3b:1e:51:79:4c:fb:
         dd:ed:ad:6a:aa:b8:c4:95:86:42:ad:90:51:ea:ff:ca:f7:37:
         5c:0e:9b:85:0b:4e:12:78:35:29:ba:54:d5:1a:b5:ef:dd:35:
         3c:85:bf:9e:92:35:71:ba:d6:69:28:1c:bf:c2:99:1e:1f:61:
         a1:e7:35:bd:c3:fe:55:60:b5:93:ab:de:a5:98:f2:cb:13:12:
         86:2f:7f:ac:9b:b6:79:13:ff:40:9e:72:e0:24:fb:9a:ed:a8:
         5b:95:4f:47:01:19:6e:30:b4:38:0f:2a:48:87:96:5e:2c:f3:
         4d:98:86:a8:bb:91:5a:84:44:45:22:a2:ea:39:f9:8d:79:52:
         82:2e:1a:e1:ae:f2:99:e9:4c:66:4e:9e:ab:d1:ac:9e:38:bd:
         90:27:eb:ca:40:78:9b:37:ef:0c:b8:6d:73:5c:7c:24:58:8a:
         80:41:62:dc:a6:1c:39:05:04:af:12:da:b4:c5:1d:be:b6:e3:
         ea:6a:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client on console.sobornost.net