Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
File:                     656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json)
Hash identifier:          b3Uqd5oGU6PWYdUwCxAdeNZ8RCm4f045EUyrjkugncQ=
Subject key identifier:   5B:DD:3A:1F:BB:76:0C:30:A4:1E:4B:F2:FC:55:6D:69:93:6A:55:C4
Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
Certificate issuer:       /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Certificate serial:       32D7A878CE696D4A3452081A6BC6FE8DDAFB4F11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
Manifest number:          01FE
Signing time:             Fri 25 Apr 2025 03:42:14 +0000
Manifest this update:     Fri 25 Apr 2025 03:37:14 +0000
Manifest next update:     Mon 28 Apr 2025 07:10:14 +0000
Files and hashes:         1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=)
                          2: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: ZP7DzvwIY1MHKSfFEUcTSf5a3yBjijUFtCTDQ5uXQ18=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl
                          rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d7:a8:78:ce:69:6d:4a:34:52:08:1a:6b:c6:fe:8d:da:fb:4f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
        Validity
            Not Before: Apr 25 03:37:14 2025 GMT
            Not After : Apr 28 07:10:14 2025 GMT
        Subject: CN=5BDD3A1FBB760C30A41E4BF2FC556D69936A55C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:67:f4:db:db:03:ca:12:44:23:88:0b:36:
                    88:08:02:62:01:83:cb:14:d4:31:49:5d:6c:ca:99:
                    da:43:9c:47:ce:ac:e1:b3:9b:e1:da:36:60:94:9c:
                    8b:55:d0:d9:5c:ee:3c:89:bd:51:0c:63:de:97:d0:
                    1f:1b:dd:53:a2:1c:19:06:d5:e5:40:2f:fd:65:96:
                    b3:a4:be:d3:09:83:f2:00:96:3d:78:1d:20:ce:08:
                    d7:56:67:7e:89:89:53:1d:4f:0e:d5:40:23:de:39:
                    59:5a:24:79:c9:22:4f:ce:6d:df:5c:66:74:ed:9b:
                    0c:46:44:ff:59:4b:32:f2:2e:10:a6:3d:05:87:b4:
                    5e:40:42:a0:e5:7e:62:7d:fe:ab:2b:48:3d:a9:d6:
                    48:37:d1:84:f2:98:54:42:b5:99:3f:26:3b:87:84:
                    6f:2d:59:18:45:92:f4:f8:53:5c:c3:3c:f2:d4:04:
                    c3:b6:55:fc:1d:15:eb:22:0e:99:e9:ce:a1:81:c5:
                    96:be:24:76:5c:2a:ae:ce:7c:96:5d:71:f2:68:51:
                    ce:0f:21:ec:ef:ff:94:20:62:62:e0:07:ad:25:22:
                    62:ae:8c:4b:2d:6d:fd:5c:82:68:c5:72:f6:c8:3d:
                    e4:1b:25:7a:b7:42:43:2f:b6:40:f4:30:9b:47:a0:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:3A:1F:BB:76:0C:30:A4:1E:4B:F2:FC:55:6D:69:93:6A:55:C4
            X509v3 Authority Key Identifier:
                keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:74:7d:e9:5a:93:ca:a0:80:d0:e4:64:a0:28:d7:d8:3b:
         00:fd:c9:89:f8:fc:6f:3f:e3:d4:67:73:3c:01:70:24:91:27:
         b1:24:e5:7c:7e:b8:bc:41:7b:2f:2f:83:30:01:d6:18:9f:8c:
         9e:32:d4:d4:17:03:33:a6:b4:72:0a:25:26:45:45:2b:04:bb:
         3b:f5:39:7a:3b:b9:d7:9a:17:89:a5:de:ef:4e:aa:a9:b7:33:
         c9:8f:6a:6f:32:cd:90:b2:55:8c:37:d2:56:7a:7c:06:85:88:
         09:60:57:ba:9b:a9:c3:40:17:1b:fb:c3:a9:89:ca:86:35:4f:
         f2:b7:5f:6b:81:d5:b5:93:2c:0c:43:97:cf:59:72:57:89:af:
         fd:28:eb:b4:6e:f8:9f:ad:94:e5:96:94:b5:06:e0:50:4b:12:
         3f:c3:71:f8:85:57:af:be:84:0f:8e:f0:0f:13:20:fe:7f:eb:
         53:90:ac:0a:b8:84:de:38:85:a3:69:dc:f4:4a:ed:c7:22:a0:
         7e:5d:73:b4:9b:db:90:51:33:d8:07:68:bd:e4:91:ff:55:14:
         0e:68:ea:e2:28:e7:b3:81:61:2d:ac:c1:15:80:f0:ff:6c:93:
         36:a9:c7:06:76:b0:ab:1c:05:2b:c8:fa:12:08:0a:d7:88:ea:
         d0:2c:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net