Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
File:                     89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json)
Hash identifier:          +wleKn560bLWNb6EAjj4/6wigH/CnLaJNBtGG4mAp8s=
Subject key identifier:   81:C9:84:E1:21:E7:6C:E2:A4:52:F7:84:0A:D3:F1:98:C8:D7:D0:4D
Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E
Certificate issuer:       /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E
Certificate serial:       71F3A94A02A9280E59E4B8E81951B5713F38CAB6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
Manifest number:          C6
Signing time:             Thu 24 Apr 2025 13:00:00 +0000
Manifest this update:     Thu 24 Apr 2025 12:55:00 +0000
Manifest next update:     Sun 27 Apr 2025 15:56:00 +0000
Files and hashes:         1: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: dGVpmdtEGT3h+fNYGvG5smP/PxkVYYYHGNHC/rEeLpo=)
                          2: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: PTT9MsWDPwZ9cRzvcXmuxxhA2JhY1zsKHAXPKrnZx/M=)
                          3: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: MBBZpw7CoYALAvD5clQ2rqu4bvVuNt924Pbsk0aT5Wk=)
                          4: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: lquMzYc1A9WezJfZrkZ7IH+M206UU3pQd22VWaKYVvM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl
                          rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 10:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f3:a9:4a:02:a9:28:0e:59:e4:b8:e8:19:51:b5:71:3f:38:ca:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E
        Validity
            Not Before: Apr 24 12:55:00 2025 GMT
            Not After : Apr 27 15:56:00 2025 GMT
        Subject: CN=81C984E121E76CE2A452F7840AD3F198C8D7D04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:5b:54:b2:97:0e:e7:77:bc:b4:77:13:9e:
                    e2:ad:28:19:69:ad:73:5d:49:89:ac:c1:b0:2e:35:
                    a5:e6:8d:d7:fb:d7:81:f6:67:52:65:eb:86:37:3b:
                    74:e4:b7:3e:81:7f:6d:f3:a2:12:e7:f7:bf:64:b6:
                    83:07:18:07:54:3c:98:e4:e3:c3:48:78:1a:2c:bd:
                    55:62:3f:49:df:f6:d9:d2:84:ab:a7:02:f2:3d:e2:
                    36:3d:83:72:67:dd:b5:81:3e:a6:53:a5:5e:dd:e0:
                    7a:73:22:8d:ab:a6:69:1b:ac:7e:65:d3:bc:c0:99:
                    3a:c2:28:3b:ac:3f:6d:73:b6:bb:20:46:9e:31:a5:
                    3b:3d:d8:c7:5f:72:88:ac:22:1e:c6:09:0d:49:3c:
                    df:77:a7:15:8f:06:6d:51:c8:bb:0c:8b:57:c4:63:
                    c8:c9:d8:cb:37:b2:71:c2:e4:8e:df:ef:53:7c:b2:
                    b9:e5:f5:4b:0a:b9:53:cc:f7:bf:f6:3a:35:60:0b:
                    c4:5c:ca:ed:4c:03:bc:23:40:5a:36:33:52:56:fb:
                    ae:59:55:02:72:ee:6a:c8:35:7f:bb:7e:2d:1f:c6:
                    86:b8:ba:c0:c5:22:1f:86:3f:d2:eb:11:c2:e3:9a:
                    a8:66:5a:db:77:b6:b2:64:a1:0a:44:27:66:3b:b0:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:84:E1:21:E7:6C:E2:A4:52:F7:84:0A:D3:F1:98:C8:D7:D0:4D
            X509v3 Authority Key Identifier:
                keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:69:b3:ca:a4:e7:7e:d0:f6:f7:c7:67:6c:c5:72:6b:72:79:
         31:7e:38:63:90:16:89:c9:a4:26:f2:d7:0d:48:c8:2a:21:ef:
         b3:f6:ab:ed:c7:48:af:89:17:80:30:08:6d:23:ab:de:99:d1:
         86:66:59:d8:09:be:da:e8:62:27:a1:dc:90:09:5b:ce:29:3a:
         62:ba:6e:13:40:67:5e:e1:64:df:2a:7d:ae:16:79:f7:11:3e:
         3f:ee:4e:be:2e:b5:02:00:9d:bc:bd:20:3e:d6:88:6a:7d:bb:
         9d:40:3c:73:ab:8a:06:cf:01:35:7b:ee:4f:16:ef:1b:8f:16:
         d3:88:cc:21:c4:07:e4:28:f7:f2:85:2a:50:73:13:16:06:71:
         54:99:4a:a8:70:9b:05:0f:1c:1b:04:f7:df:31:c8:84:a6:dc:
         b9:9b:ac:69:fc:de:40:07:88:ce:24:93:b7:a2:63:26:14:b7:
         89:90:a8:df:82:54:76:d1:e4:58:f9:da:60:c9:37:41:85:80:
         05:a5:75:64:6d:de:82:c8:23:82:73:8e:7b:16:39:07:ee:c2:
         fa:a0:de:ca:b0:30:70:bd:a0:3c:30:ed:73:d9:7f:3f:a2:43:
         eb:11:43:9f:18:9d:7d:e1:3f:60:93:f3:15:60:7a:33:52:b4:
         b9:36:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net