Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
File:                     0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json)
Hash identifier:          VayUKXQugPhfD4T1A0dzBr89B4QDtp3cyrEHWmp2GpQ=
Subject key identifier:   92:FB:65:41:93:0C:69:48:38:8D:67:8A:48:CD:6B:94:48:39:73:EB
Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E
Certificate issuer:       /CN=0EAF2A0CD22523DB087375417038E4165075CA3E
Certificate serial:       53AA4CB84E2AE435D94DAC3BD792356953F83E47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
Manifest number:          9E
Signing time:             Wed 23 Apr 2025 14:21:00 +0000
Manifest this update:     Wed 23 Apr 2025 14:16:00 +0000
Manifest next update:     Sat 26 Apr 2025 22:48:00 +0000
Files and hashes:         1: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: 20xyi7WGXkhpJhYMMa60rCEDcWMrrO4WibLNf+8UjDs=)
                          2: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: iQdMv5qlXzGEn/whfAtiXdmcdfGxq1K0gNZpkFTnCrg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl
                          rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 18:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:aa:4c:b8:4e:2a:e4:35:d9:4d:ac:3b:d7:92:35:69:53:f8:3e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E
        Validity
            Not Before: Apr 23 14:16:00 2025 GMT
            Not After : Apr 26 22:48:00 2025 GMT
        Subject: CN=92FB6541930C6948388D678A48CD6B94483973EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:2c:1e:44:db:27:39:1d:06:15:cd:f6:9c:
                    cd:39:e3:2e:8d:4b:0f:8c:2d:49:68:5c:5e:30:75:
                    36:9a:69:12:62:8f:08:ce:28:a0:c2:2c:1a:2d:69:
                    5a:f2:57:88:3a:9c:d1:d4:f6:6a:e7:4a:ba:8d:b7:
                    64:41:cb:47:af:d5:d7:01:eb:17:45:cd:c1:e6:a9:
                    b8:5e:6b:ec:e0:3b:24:a4:ac:90:90:fc:a4:ac:c5:
                    96:65:7e:c2:02:48:fc:68:aa:d9:ff:b2:04:58:1d:
                    3a:6e:b4:b9:ba:b2:11:2b:b4:18:53:24:e9:43:d9:
                    1c:5e:e9:1b:81:47:1a:a3:96:fe:50:84:a6:44:55:
                    da:f4:9c:0e:cf:cd:9e:0c:42:45:fc:ba:07:0c:7a:
                    1c:82:2b:ef:fb:be:e2:4f:4f:aa:1e:38:58:da:f7:
                    36:01:60:ce:61:8c:a3:c9:2c:44:43:aa:13:48:e2:
                    7e:b5:ac:e0:c9:47:c1:63:5a:b4:9d:2e:ac:5d:5b:
                    bc:25:5a:2e:4a:6a:be:ac:61:84:1f:ce:92:7d:51:
                    cc:5b:91:e5:d9:af:9f:c9:26:44:6a:d1:79:64:e2:
                    4c:3c:a1:fc:5b:36:49:8b:a6:4b:1c:1c:ea:f9:4f:
                    c3:56:18:bc:2b:ff:9b:34:72:64:16:57:4b:c1:00:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:65:41:93:0C:69:48:38:8D:67:8A:48:CD:6B:94:48:39:73:EB
            X509v3 Authority Key Identifier:
                keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:30:4c:9b:03:c6:da:30:16:67:77:12:0c:2a:08:fb:43:ae:
         13:1e:e5:cd:c0:2c:5a:78:56:c7:a2:5c:ff:26:9e:95:dc:99:
         92:56:16:88:4b:49:44:e5:d4:90:43:fb:57:30:65:f6:95:a6:
         be:3d:87:f3:0f:2b:d1:e2:03:06:80:f6:b6:da:b5:76:75:5a:
         90:96:a5:20:96:c4:7c:0a:ff:3b:18:ee:09:38:4b:ce:62:d5:
         b7:77:5c:f8:6a:bc:3e:ea:cc:ac:f5:9f:0a:09:1b:23:93:7d:
         68:f9:4a:a8:ee:cb:d8:78:92:ff:d5:17:3b:b7:7c:b9:6f:04:
         f9:01:d3:f0:6e:44:1d:45:c2:51:c5:e8:b3:2a:b1:a2:9c:b6:
         1d:44:f3:7f:52:56:ee:af:7b:e1:f8:a9:32:04:1d:29:70:8b:
         67:11:75:45:20:46:af:35:f9:21:3b:c4:fd:5f:54:cf:02:5f:
         c1:1f:1e:94:03:30:89:27:8e:b9:91:73:02:f1:97:0c:5d:a3:
         08:3a:65:91:07:17:93:4f:11:d8:36:20:64:01:15:0e:18:4f:
         b5:53:09:7d:2c:b1:40:35:ab:fb:fb:be:74:8f:6e:60:a7:0e:
         b8:84:5c:f0:46:3c:71:3c:7f:c7:4e:5c:4b:ac:12:61:b6:6f:
         06:24:5d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net