Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft
File:                     D237DEA20D73B3F216B98336BA8307D913DDB257.mft (raw, json)
Hash identifier:          gCT05cGe9jirmjhvzkTdxNlvm5T1VSAGcvRRzKqSJyk=
Subject key identifier:   33:08:FD:58:22:27:91:9C:57:B5:43:09:5D:10:58:17:65:09:DE:36
Authority key identifier: D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57
Certificate issuer:       /CN=D237DEA20D73B3F216B98336BA8307D913DDB257
Certificate serial:       608060E691F106119E4A2F5802C5243B48C85138
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft
Manifest number:          84
Signing time:             Thu 24 Apr 2025 22:31:02 +0000
Manifest this update:     Thu 24 Apr 2025 22:26:02 +0000
Manifest next update:     Mon 28 Apr 2025 08:11:02 +0000
Files and hashes:         1: 3136302e32302e3130342e302f32332d3233203d3e20313532373930.roa (hash: tqotyjAH3hPNKC4KMmbJRyOeRh1hAR0CNyyT9ndAu7k=)
                          2: D237DEA20D73B3F216B98336BA8307D913DDB257.crl (hash: OkswtyPZdvlf3iz1RnJ9iKZQuZNSuAsjvX+Gtj/v3iQ=)
                          3: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (hash: Jit+uJIEyqjGrv7HRmDwiYsYuySfB8Lk478TOnlXVFM=)
                          4: 3136302e32302e3130342e302f32342d3234203d3e20313532373930.roa (hash: 5TysUWdf//ijZZADQg/kyk1hPl8L9rMcShCWekWYvss=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl
                          rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:80:60:e6:91:f1:06:11:9e:4a:2f:58:02:c5:24:3b:48:c8:51:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D237DEA20D73B3F216B98336BA8307D913DDB257
        Validity
            Not Before: Apr 24 22:26:02 2025 GMT
            Not After : Apr 28 08:11:02 2025 GMT
        Subject: CN=3308FD582227919C57B543095D1058176509DE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:3c:06:1b:b2:01:d1:3f:e4:a9:ac:b8:ab:
                    eb:1e:24:1c:af:1b:b3:aa:38:cf:20:7e:c9:da:9e:
                    1b:6c:bd:6d:33:15:72:3a:6c:6c:8e:f7:d5:b4:71:
                    7c:3f:6f:b9:17:19:8e:2b:db:d0:9a:d0:b0:b0:9f:
                    7d:a6:13:66:9c:37:6b:d8:f2:4b:9d:15:84:97:53:
                    e0:9b:8a:8b:c9:05:40:96:a9:cd:57:3b:5e:a5:13:
                    48:fc:49:b5:7c:7d:8a:db:bc:e2:d4:24:c9:21:b1:
                    37:89:b2:8b:9c:da:65:87:25:a9:4b:e1:1b:6d:6d:
                    4f:58:43:3c:5c:25:8e:ca:b5:17:ac:6d:73:bb:3d:
                    2a:2b:6c:88:7c:9a:aa:16:b6:0c:23:74:eb:7c:45:
                    21:af:f4:73:3b:e0:44:05:5c:39:4b:bf:f7:e8:12:
                    27:de:97:1f:a9:32:dd:22:7f:21:e7:55:df:3f:08:
                    75:16:a2:d1:71:9b:47:1f:47:b3:99:eb:17:cb:05:
                    6d:64:6e:0c:74:5e:bb:19:be:fa:3d:e2:20:cb:7e:
                    7e:76:c8:da:bd:fc:72:fc:39:57:4d:a3:e7:4f:9d:
                    e6:b8:1e:f9:2e:de:6f:5f:71:31:ba:f7:e1:7b:93:
                    e2:a3:74:e4:93:8c:7c:c2:6b:ca:b8:af:d5:8a:77:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:FD:58:22:27:91:9C:57:B5:43:09:5D:10:58:17:65:09:DE:36
            X509v3 Authority Key Identifier:
                keyid:D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:05:db:66:fd:41:f4:88:7f:f7:70:06:c2:c4:08:82:71:
         56:93:35:01:66:87:10:7d:77:54:f1:59:67:df:8b:5b:9e:49:
         d3:b6:f9:8c:4b:d2:60:4d:5f:2b:14:d1:43:5d:ac:16:68:1c:
         2e:4d:da:40:08:a6:54:21:99:c3:db:95:64:61:3e:33:66:c6:
         3d:88:fa:b4:7f:73:ad:e7:3d:99:7b:c6:84:0a:fc:01:bc:a0:
         b3:82:dd:64:e4:88:43:18:fc:3c:b5:26:22:51:bc:90:ce:4e:
         42:0e:31:d0:6f:ab:0f:1e:5a:af:58:f4:0c:56:53:7f:b0:cc:
         17:1b:2b:e4:fd:0d:3c:1c:d6:79:71:0a:08:b5:04:bf:a6:89:
         f2:43:6a:7c:55:77:c6:98:2d:58:c9:c6:b9:32:d2:d7:45:67:
         d3:a0:cd:ab:7c:cf:7c:97:9a:7d:3b:fd:5c:f0:3d:08:17:2a:
         3c:85:54:2f:e0:4f:33:e4:b3:eb:6c:c0:20:4b:d7:72:90:86:
         4f:f5:33:04:0a:b2:99:b9:3d:f9:32:9e:1b:f1:2a:90:ce:ba:
         ef:bb:ca:76:4a:88:b6:a2:f1:89:79:4b:96:67:f0:7e:06:24:
         f0:df:d8:69:ab:b3:64:e2:23:85:9f:de:22:41:4b:bc:fe:84:
         0e:1c:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net