Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
File:                     6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft (raw, json)
Hash identifier:          LHi1KM/0UvbgLAU+JB8y+MrFML+kMfNdEug5N05uNgo=
Subject key identifier:   D3:E8:ED:0D:65:F9:C8:9D:E9:95:05:AF:D6:59:D9:42:E3:5C:A3:14
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       2333F0052C0FD1DB5CFD60C77E77E340E14388
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
Manifest number:          029B
Signing time:             Wed 23 Apr 2025 17:20:38 +0000
Manifest this update:     Wed 23 Apr 2025 17:15:38 +0000
Manifest next update:     Sat 26 Apr 2025 20:50:38 +0000
Files and hashes:         1: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: naA5lUlBRat5ef0vI8voPPjFrMHR9bpoQ6w5VRUzIn0=)
                          2: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: 3xHj2Za1UQ2hx7TMbM6D07YNJ7NH1FcliBdFRmqQm1g=)
                          3: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: kHw5hH5+IfpLbksfP3QZEjTxkepAiasbWHMw4A7m3b0=)
                          4: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: QUgb+3auw+3QXbybWiXjJyrqBHMbQrgJpf1sSivTg0g=)
                          5: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: Jsc0sEwnIvfzafDdx5P/GKzvW0lqzmukEooIoZhkd4I=)
                          6: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: W7qMjGU5xZ9Oay/8WGxeZxhy9LWBi2AIkynmyghqxgo=)
                          7: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: 0z+M+MfV31ApunTcr4X9MYd8Du/BJdShdW8aFWf3OwA=)
                          8: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: kLmEQPQ/od1FdskOnhWMMgPU8rf3JMAMKcmeKR1b8o8=)
                          9: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: 4+y7rjN8rrx24W4l4v0NhyPbAx+wxdh2Vyt9geBR9nM=)
                          10: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: nxdAn3jn+XYvc4duvxuDcKKQ6L/WvqrTreEgfRLbG3Y=)
                          11: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: US1SXV+hgdxuRQjfdZVl4UlTanx6B6V1We4A6nIE/aU=)
                          12: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: 0TXvmS9XRzFPQg7VBjdDhocXuAjOCXrahzSe/hBS+kE=)
                          13: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 7urOwCjdO2YZyXJHO3LKXR7humjd9mLf0bELAOmhNtc=)
                          14: 6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl (hash: cAbZ5y1ubq1d0BCG323UzmDc+jrVcqbyKUJxf3e2RfQ=)
                          15: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: IsH3U/BHRUb2Qe5b502VK1K1N8x5p/BPRkAJxJWs0XM=)
                          16: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: oYKRgeAiMpYufzUDpAVrBlt6W1jyPeS9JOxxuQtOwZY=)
                          17: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: TioKn3OEWrA5HJc/rJ0Sfo3o6zbghNv33aandwoul2U=)
                          18: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: YgVLRg3O7QRj5xGJQiVJq81SI0VTcACtqesTlVxXavs=)
                          19: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: VMgB9Kb4EVQHlb3VDwgkZg7RdNnVVkcFEhqcUkw3BMY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:33:f0:05:2c:0f:d1:db:5c:fd:60:c7:7e:77:e3:40:e1:43:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Apr 23 17:15:38 2025 GMT
            Not After : Apr 26 20:50:38 2025 GMT
        Subject: CN=D3E8ED0D65F9C89DE99505AFD659D942E35CA314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:59:22:5a:af:86:00:ab:f7:50:b5:14:ef:
                    5e:42:22:f1:c0:6b:05:8f:e1:c8:9a:17:7a:4e:02:
                    05:18:30:7d:50:8a:d2:18:56:7d:97:89:d6:8f:b4:
                    3b:40:ce:e8:97:7a:cb:ea:c3:30:5c:5f:5a:36:9f:
                    29:d3:37:86:10:bd:ec:0c:48:c8:40:87:16:84:09:
                    4a:54:03:a7:d0:f9:dc:7c:df:dd:6f:42:33:ec:fa:
                    b9:c0:8d:27:b9:fd:83:ca:71:cd:f2:5c:8d:9a:ec:
                    98:23:00:00:fa:51:3b:d0:82:a4:90:33:96:a7:73:
                    89:92:80:1a:cc:7f:6b:92:6a:ec:77:82:5c:16:5d:
                    ea:e8:99:72:77:49:d9:cc:b5:54:4a:c4:dc:1e:79:
                    e2:be:5e:87:be:c3:40:7a:65:59:da:19:9d:68:97:
                    7e:96:25:02:7f:ba:00:5f:e6:ba:be:81:f6:50:29:
                    39:15:c3:2d:aa:eb:18:ae:52:84:98:19:21:c5:e9:
                    f2:a9:0c:4e:63:d0:a1:15:19:2e:af:37:95:81:b2:
                    78:e3:be:2c:b1:ac:ca:8c:8a:8f:e8:14:f7:e1:0b:
                    3c:53:96:f2:27:ed:25:79:c7:ee:aa:f7:89:7f:cf:
                    72:28:59:b0:4a:85:d9:dc:33:a3:fa:d1:78:bf:0b:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E8:ED:0D:65:F9:C8:9D:E9:95:05:AF:D6:59:D9:42:E3:5C:A3:14
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:cd:97:78:43:7b:46:64:27:d4:f6:96:71:a2:be:5b:de:ec:
         64:a0:f7:8b:76:52:20:f5:f6:5d:f9:32:c7:8d:ef:7a:3e:1e:
         5f:75:ef:5c:70:36:bd:a2:47:5b:ff:22:6b:9f:fb:e2:2e:23:
         3c:e8:3d:5d:48:ef:8e:0c:0e:a3:89:62:e9:a4:85:33:52:f3:
         c4:99:6b:30:92:30:1b:5c:a6:85:12:bb:eb:26:ae:b6:aa:10:
         3c:a9:22:96:bc:05:19:d3:54:e8:4b:be:a4:2e:c8:d0:ac:37:
         20:6b:d2:c7:62:2c:b2:fc:08:a0:da:b5:37:c6:56:ef:60:b6:
         10:8a:0b:0a:02:11:ee:f7:63:15:5e:8d:1e:0e:3b:2e:1c:3d:
         e1:ad:61:1c:69:03:10:ba:63:ab:cf:d5:3b:ac:9c:4a:a4:94:
         ac:00:d9:83:5b:9a:3d:8b:70:b5:2d:5b:6f:26:f7:52:d0:3c:
         3f:28:16:b2:d9:15:41:aa:fc:4b:7a:9d:ae:ea:c8:09:61:7a:
         ed:5d:21:a8:de:d6:33:5e:f5:93:eb:0d:45:d5:57:44:00:de:
         66:e3:7d:d3:be:71:a9:80:8a:a5:24:7f:77:8e:a3:f3:1f:a1:
         d9:37:f9:f3:7b:aa:f4:25:dc:f4:bb:7f:cc:8f:12:a3:5e:9b:
         60:5e:48:0b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITIzPwBSwP0dtc/WDHfnfjQOFDiDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2RjZBMzUzMDE5OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JG
NzFGQjQwMB4XDTI1MDQyMzE3MTUzOFoXDTI1MDQyNjIwNTAzOFowMzExMC8GA1UE
AxMoRDNFOEVEMEQ2NUY5Qzg5REU5OTUwNUFGRDY1OUQ5NDJFMzVDQTMxNDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdmWSJar4YAq/dQtRTvXkIi8cBr
BY/hyJoXek4CBRgwfVCK0hhWfZeJ1o+0O0DO6Jd6y+rDMFxfWjafKdM3hhC97AxI
yECHFoQJSlQDp9D53Hzf3W9CM+z6ucCNJ7n9g8pxzfJcjZrsmCMAAPpRO9CCpJAz
lqdziZKAGsx/a5Jq7HeCXBZd6uiZcndJ2cy1VErE3B554r5eh77DQHplWdoZnWiX
fpYlAn+6AF/mur6B9lApORXDLarrGK5ShJgZIcXp8qkMTmPQoRUZLq83lYGyeOO+
LLGsyoyKj+gU9+ELPFOW8iftJXnH7qr3iX/PcihZsEqF2dwzo/rReL8L+L0CAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBTT6O0NZfnInemVBa/WWdlC41yjFDAfBgNVHSME
GDAWgBRvajUwGYqbdlemNv7M+znzv3H7QDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0
MjM0NGJlLWY5ZmItNDYzNC05MmQ2LTg5NGRkNTM4Y2FkZi8wLzZGNkEzNTMwMTk4
QTlCNzY1N0E2MzZGRUNDRkIzOUYzQkY3MUZCNDAuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi82RjZBMzUzMDE5OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFG
QjQwLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8wNDIzNDRiZS1mOWZiLTQ2MzQtOTJk
Ni04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlG
M0JGNzFGQjQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAss2XeEN7RmQn1PaWcaK+W97sZKD3i3ZSIPX2
Xfkyx43vej4eX3XvXHA2vaJHW/8ia5/74i4jPOg9XUjvjgwOo4li6aSFM1LzxJlr
MJIwG1ymhRK76yautqoQPKkilrwFGdNU6Eu+pC7I0Kw3IGvSx2IssvwIoNq1N8ZW
72C2EIoLCgIR7vdjFV6NHg47Lhw94a1hHGkDELpjq8/VO6ycSqSUrADZg1uaPYtw
tS1bbyb3UtA8PygWstkVQar8S3qdrurICWF67V0hqN7WM171k+sNRdVXRADeZuN9
075xqYCKpSR/d46j8x+h2Tf583uq9CXc9Lt/zI8So16bYF5ICw==
-----END CERTIFICATE-----
Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net