Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
File:                     F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json)
Hash identifier:          xCeSmggTl+TLJvp/a9xbGtcpJcY7/Xdz3MRFmfg5Y6w=
Subject key identifier:   75:4F:74:1F:FB:0E:2A:6B:00:1F:73:63:4D:D0:6D:66:A1:12:0D:64
Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
Certificate issuer:       /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Certificate serial:       092AA9B6AC4E954F1525B8B0BB96F67834DAA685
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
Manifest number:          0358
Signing time:             Thu 24 Apr 2025 17:02:00 +0000
Manifest this update:     Thu 24 Apr 2025 16:57:00 +0000
Manifest next update:     Mon 28 Apr 2025 04:15:00 +0000
Files and hashes:         1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=)
                          2: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=)
                          3: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: GH0NAlEG08LR9ajv9ULMpxWa3ITEaokBFZQPwyYm45w=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl
                          rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2a:a9:b6:ac:4e:95:4f:15:25:b8:b0:bb:96:f6:78:34:da:a6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
        Validity
            Not Before: Apr 24 16:57:00 2025 GMT
            Not After : Apr 28 04:15:00 2025 GMT
        Subject: CN=754F741FFB0E2A6B001F73634DD06D66A1120D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:66:d5:26:4d:0e:c9:59:c2:b0:19:26:ff:
                    55:23:9b:3b:d4:d7:27:81:4a:d7:b3:9b:90:0a:0c:
                    a4:fb:62:9f:38:9c:f1:71:93:67:27:24:70:67:38:
                    61:0f:5b:2a:6d:ee:e2:8a:f2:5c:72:11:e1:cf:fb:
                    55:35:f7:f6:9d:67:7e:d9:22:7f:42:a4:65:55:8a:
                    a6:1b:9a:98:5d:ed:c0:d2:63:6e:19:8f:1d:bd:f6:
                    ef:15:71:3d:6c:77:d7:28:bc:d4:c8:d0:9f:2b:4f:
                    16:ab:a2:db:1b:9f:b6:3a:2b:38:6a:88:1e:05:9b:
                    92:fc:09:3c:d6:54:cc:43:18:48:52:19:48:2a:cb:
                    f9:16:a2:70:1f:fc:8a:b1:d1:0e:0e:c5:ec:d7:41:
                    39:52:3e:ac:53:8e:4d:c2:ea:9e:2b:94:5f:86:96:
                    32:9a:48:12:3b:11:2d:a1:7f:9c:e9:50:4b:27:81:
                    db:21:9f:a4:5c:70:a5:d3:ee:5d:a1:fb:9e:19:9f:
                    ca:78:7d:1c:99:63:8b:0f:d0:56:d3:f1:4f:b6:c2:
                    bd:f9:53:f7:8c:ab:e9:a5:1d:de:70:f9:47:db:31:
                    7e:d5:bc:5b:7a:29:85:6b:2e:b0:e0:93:8e:21:3c:
                    5f:84:dd:34:90:14:3a:09:fc:02:ba:03:93:1d:ee:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4F:74:1F:FB:0E:2A:6B:00:1F:73:63:4D:D0:6D:66:A1:12:0D:64
            X509v3 Authority Key Identifier:
                keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:48:58:93:39:19:f7:1b:e6:b9:25:dd:4f:0c:42:f5:7b:6e:
         16:ae:08:b4:7c:60:e5:b5:54:16:bc:ec:26:53:a2:37:1a:bc:
         60:52:e3:a2:36:f8:8a:57:e4:16:c1:aa:4e:67:cb:a7:4d:8e:
         08:c7:43:c4:0b:47:6c:1b:1f:d7:bc:73:cf:6d:d9:bd:8c:96:
         97:59:6c:a3:61:36:f7:68:c7:3a:94:ab:98:a0:d2:20:99:73:
         62:03:81:ec:25:be:c6:7a:f7:c9:5a:fb:45:75:ca:1a:97:8c:
         51:37:85:fb:d0:1e:8f:52:00:55:cd:5f:17:10:1b:7a:84:90:
         7b:8e:74:79:2d:e5:ba:c0:9a:0d:9a:54:54:f5:c5:5f:e2:24:
         d1:76:73:9a:13:cf:71:ae:17:23:54:66:ac:86:a0:86:d1:79:
         7e:da:92:fa:18:89:8d:ba:74:39:28:db:a3:60:28:d0:4f:cb:
         aa:31:99:b9:c7:86:94:5c:ad:0c:2d:c0:7f:58:83:56:4e:67:
         8e:81:c4:84:9b:e5:ed:ec:8c:b2:c4:71:a8:e8:6e:95:a1:eb:
         6b:34:37:fc:5f:a5:be:8b:10:fa:c6:97:27:0d:86:3d:b8:43:
         52:82:b2:76:f3:da:0b:31:73:b1:1c:c4:e1:e5:57:be:24:33:
         ef:54:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client on console.sobornost.net