Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft
File:                     C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json)
Hash identifier:          0l+6eSjQvXTvECQM1W/SqQQ1Fmppngs8Woksu1ForVM=
Subject key identifier:   63:5D:35:53:83:0F:E2:5F:72:92:DD:C1:30:6E:1F:18:B5:C1:4F:CE
Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7
Certificate issuer:       /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7
Certificate serial:       5421E8FE4BC475A34FAAED76F9DA80C12F78082A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft
Manifest number:          EF
Signing time:             Fri 25 Apr 2025 06:11:24 +0000
Manifest this update:     Fri 25 Apr 2025 06:06:24 +0000
Manifest next update:     Mon 28 Apr 2025 09:35:24 +0000
Files and hashes:         1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: fPtFW64rMVWWTfe0idTINB3BUS2Ju2ivrfcwXSv84rI=)
                          2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: n0wSfYokNi/npNPzftcDmS3sdBSeLLSMYOoHz/p9hrE=)
                          3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: RIPwkwrtUM/4ffKNW9yUN28LgPyDGB1P3EsXYFO7WUY=)
                          4: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: vMQiOK9h+o0p2/Vo/WKY4NTxNdewDlbggZxmbYuAQAE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl
                          rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:21:e8:fe:4b:c4:75:a3:4f:aa:ed:76:f9:da:80:c1:2f:78:08:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7
        Validity
            Not Before: Apr 25 06:06:24 2025 GMT
            Not After : Apr 28 09:35:24 2025 GMT
        Subject: CN=635D3553830FE25F7292DDC1306E1F18B5C14FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:5b:3e:b5:55:c9:02:1e:fe:13:db:90:8e:
                    24:38:11:6a:8d:5f:ff:eb:4b:0e:67:67:cb:c0:fd:
                    a5:62:41:36:78:dd:53:60:80:ca:69:53:d2:38:8c:
                    b0:06:bc:2e:2b:d6:66:12:9e:89:ee:2b:d9:98:29:
                    42:e5:90:2a:0c:4a:37:5b:09:7d:58:0b:99:0b:6f:
                    af:a6:a0:69:e2:21:75:3d:a3:0b:e6:66:5b:ed:12:
                    0e:5a:fa:cc:45:ca:f1:b0:d4:16:96:ce:b2:ca:fa:
                    df:c3:ba:09:c2:55:1e:01:d5:a4:31:69:a9:e7:08:
                    11:0a:28:6c:55:9f:28:16:82:0b:a1:2d:49:68:1f:
                    09:61:c6:a4:dc:22:d3:f9:df:1d:ea:a0:8d:91:28:
                    ff:81:66:bb:7a:1c:82:1e:b9:cb:c5:ed:40:10:e8:
                    20:19:30:af:cf:88:36:0a:06:40:6a:f9:cf:13:a5:
                    a3:3d:96:34:23:3a:87:63:11:c3:1c:12:d3:5b:a1:
                    0e:60:29:36:83:ce:45:e9:1b:24:36:38:73:f8:9d:
                    8a:4e:51:c4:bc:9a:b6:a5:3b:be:27:a3:92:04:09:
                    e8:22:57:0a:44:61:22:9b:86:f0:d9:5c:c1:18:00:
                    95:3b:7b:ed:d5:d5:01:f2:e9:da:92:30:6f:06:f5:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5D:35:53:83:0F:E2:5F:72:92:DD:C1:30:6E:1F:18:B5:C1:4F:CE
            X509v3 Authority Key Identifier:
                keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:1e:06:0b:31:47:f4:c8:bc:19:4f:52:5a:23:cf:29:6a:
         0f:ff:6a:20:22:ac:3e:e6:b1:81:b6:67:dd:cd:a1:77:5e:96:
         97:c9:90:22:89:f7:eb:23:b2:e1:4c:8a:69:67:df:71:65:fe:
         16:15:08:5d:8a:7e:39:11:3f:c1:1d:32:d4:1d:99:7e:5a:b5:
         54:3d:d9:65:03:0f:5e:0c:af:26:62:61:f6:f5:9e:9f:a7:15:
         21:b3:e0:08:e7:91:68:67:98:15:6f:b7:e4:ce:cf:f1:88:82:
         b5:40:a2:49:45:43:6b:5c:d8:6f:3e:70:26:99:f1:3c:f9:7b:
         7d:5b:6a:a7:57:65:61:26:7e:6d:32:31:27:ae:4d:2e:95:04:
         e2:54:b6:aa:73:13:a3:b2:e5:43:49:b4:64:2a:fd:69:d2:37:
         88:70:bd:2b:9f:7f:a1:a0:c6:41:e1:b7:26:c4:fc:f3:a1:a1:
         6a:cb:98:cd:8d:33:c6:5d:db:a9:cc:bc:68:65:e7:40:c2:d6:
         f7:27:ba:cf:1e:d1:9b:d3:40:06:e0:71:d8:23:2a:3c:89:00:
         1c:cf:41:06:43:90:92:68:79:bf:a1:9f:a2:75:cc:bd:db:dc:
         54:b6:59:8c:a9:cf:5b:fd:27:59:76:1b:93:2e:44:da:b6:f9:
         f3:9e:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net