Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
File:                     F33127B2252454B491C5DC9FE3937C56F28F8066.mft (raw, json)
Hash identifier:          1Nyg9Jgo92nKh6zQQ/WRBVxuoNPIPRAFLTh+DFIFIxE=
Subject key identifier:   65:C9:59:EB:E4:F1:7A:EB:F3:86:78:A6:88:92:CB:A7:E5:97:42:C2
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       50F72813126EEBD088ABC8C343E27F7D38982AA7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
Manifest number:          03B0
Signing time:             Thu 24 Apr 2025 21:20:55 +0000
Manifest this update:     Thu 24 Apr 2025 21:15:55 +0000
Manifest next update:     Mon 28 Apr 2025 00:55:55 +0000
Files and hashes:         1: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: 44xJ+4HPqKcd5YyfQZtlfLdXLia/wNGmzcAqkBPsBnY=)
                          2: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM=)
                          3: F33127B2252454B491C5DC9FE3937C56F28F8066.crl (hash: hnMWEcMiHQYvgQHCDx+ZAlz6QKkhX4PiOsqfayVA+PU=)
                          4: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: TZ45IaHiDcklYnYgaDPwrwSUbUctA3Q/NXqUbigRnzs=)
                          5: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: Xb1Bkjs5hzP5DiGreqFq1n1/N1wG2GKWoe1mJNbSKvU=)
                          6: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=)
                          7: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: nPfvFxh32GtLGhwJQ/WVsbfFCUobHuoJlvZ49Ao0HyU=)
                          8: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: BhrGTMcOlTnS9+LXizZepRTc8dUVDoSk9wrBjorwUZI=)
                          9: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: gRftjSQQEs2HA/M7jkf+ozLtCrIoawfYsZxOb3X4kBI=)
                          10: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: xd0vdotwl3DI/gtzK9jd/Z1SgDoCaQpGK+EAJgcM1tI=)
                          11: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: DcGxDHPqViJVOJR4+8wZK4plCpX0AqnB3wzHsVU0B/I=)
                          12: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: sfYpDs3jHVhySahEuUQy0V6BeSKjH1Lk7XnZpDOyCWI=)
                          13: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f7:28:13:12:6e:eb:d0:88:ab:c8:c3:43:e2:7f:7d:38:98:2a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Apr 24 21:15:55 2025 GMT
            Not After : Apr 28 00:55:55 2025 GMT
        Subject: CN=65C959EBE4F17AEBF38678A68892CBA7E59742C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:97:94:3d:e3:21:68:95:aa:f7:f2:07:15:07:
                    de:0d:5a:d4:53:b6:26:bb:02:5b:f0:c8:59:ee:c1:
                    b2:8e:2a:e8:b9:10:98:01:f2:a9:a1:3e:6c:5c:0d:
                    ea:b0:d4:c5:13:7c:be:8a:5f:a5:1a:4e:ba:44:2f:
                    1b:aa:4e:9f:8a:71:f8:53:62:e7:53:a2:f7:f7:09:
                    f1:fa:80:f5:0e:61:c1:be:ed:f9:e8:a4:f4:5e:61:
                    f6:f6:c9:f2:6e:98:2d:d9:59:c2:59:23:3f:89:8a:
                    bb:c2:12:bb:79:30:9e:ed:40:e9:76:ec:3f:ed:44:
                    82:c8:d3:86:5f:af:c7:43:aa:2b:ef:7a:61:18:51:
                    60:8a:24:ce:3c:db:d9:56:49:ef:ba:11:ee:3e:16:
                    7f:d8:bd:d2:6b:1f:d8:33:3c:7b:21:05:ec:e8:87:
                    3b:f8:df:c5:3c:30:25:47:60:eb:3b:33:ab:bf:f3:
                    a0:2c:ce:86:26:ac:3e:d2:ec:79:22:f5:5d:d4:f6:
                    22:17:2c:27:0b:8f:5b:f8:21:78:ae:84:98:ac:61:
                    70:2b:1b:ec:c6:16:e2:2a:3d:16:5f:7e:dc:93:9f:
                    c4:6b:ee:da:08:aa:87:00:b0:1e:6f:ba:a9:38:bd:
                    ab:a7:5e:46:b4:0e:1a:71:aa:ba:d4:2d:14:05:ad:
                    bf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:59:EB:E4:F1:7A:EB:F3:86:78:A6:88:92:CB:A7:E5:97:42:C2
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:61:ab:ae:65:35:8d:3e:71:0e:ac:4f:a6:f0:6f:b9:94:32:
         ba:ec:be:d5:32:b6:8b:c3:7e:95:a3:b1:7b:8c:14:89:be:93:
         da:69:98:f0:1d:c0:e2:2d:83:27:fc:47:7d:4b:03:e0:8f:d7:
         15:a1:09:cd:12:82:30:ac:01:c3:2a:75:3c:77:c7:25:07:b2:
         8e:52:f8:a9:29:88:17:b7:38:32:8b:df:46:40:da:bb:18:fb:
         e2:9a:c4:ce:84:d2:29:3e:56:44:b2:ef:ec:fb:41:9c:fb:5e:
         8d:e2:df:56:11:2a:56:b9:a9:4a:f9:85:f2:ae:81:13:6d:55:
         59:bf:52:95:e0:1b:86:02:4a:f9:87:ab:82:c9:97:f3:36:c2:
         33:f8:cf:5f:17:99:6c:76:68:c4:87:01:18:43:1f:3e:ef:a1:
         89:71:17:df:12:71:c1:eb:80:69:0e:3f:3d:2d:58:e3:f4:92:
         ce:d1:d9:45:49:e5:cd:30:b9:bb:84:65:96:e0:eb:7e:e1:00:
         7b:cf:b5:d3:5f:98:08:9a:17:d1:09:37:e4:b2:5f:53:27:5d:
         d5:36:25:c5:6a:61:2f:af:7d:db:06:98:2e:ab:b6:eb:a6:bf:
         d2:9d:13:0a:b1:2f:05:43:b7:4e:91:76:67:92:b7:fc:64:76:
         3e:bc:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net