Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
File:                     5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json)
Hash identifier:          6G7kR6oaFJWX5AfJ+oMlFtyatAjzaffDOA3qklNqp7w=
Subject key identifier:   2D:9E:65:4B:6E:43:B3:B5:E9:FD:F8:0D:CD:0E:02:DE:D0:24:04:7D
Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92
Certificate issuer:       /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792
Certificate serial:       426DAC35E8594638F60263CA2EB044CD1E0F9300
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
Manifest number:          016D
Signing time:             Wed 23 Apr 2025 01:40:34 +0000
Manifest this update:     Wed 23 Apr 2025 01:35:34 +0000
Manifest next update:     Sat 26 Apr 2025 10:51:34 +0000
Files and hashes:         1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=)
                          2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=)
                          3: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: txL48gr8MEFCT66aaezNa7JzS/uZ372FuyIsR7n/QSU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl
                          rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 10:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6d:ac:35:e8:59:46:38:f6:02:63:ca:2e:b0:44:cd:1e:0f:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792
        Validity
            Not Before: Apr 23 01:35:34 2025 GMT
            Not After : Apr 26 10:51:34 2025 GMT
        Subject: CN=2D9E654B6E43B3B5E9FDF80DCD0E02DED024047D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:22:a7:69:3c:a2:08:9f:94:a5:fe:b6:0e:64:
                    6f:7e:1e:a0:9d:c9:9a:c2:b0:34:0f:6f:a1:d8:91:
                    4b:78:2a:a6:a4:74:6a:ff:ed:21:44:aa:d2:76:1f:
                    5c:c1:2a:58:61:f1:5d:69:ff:ae:36:ad:d5:7a:d4:
                    bb:97:2c:10:46:04:8e:69:85:79:54:bf:ab:d1:09:
                    e6:1b:46:38:af:f1:21:c4:84:c5:89:ea:e2:6d:a6:
                    3d:03:3d:e3:d6:66:51:51:57:90:77:09:10:6e:af:
                    9c:dc:04:98:02:ae:e0:a9:59:d0:21:76:24:d1:cc:
                    ef:27:3d:ad:d6:4f:39:db:af:5d:4e:e2:c3:ad:fa:
                    d8:12:b4:07:da:63:33:45:bb:ab:c4:30:91:df:39:
                    4a:91:f5:c1:e3:e6:fd:1c:b3:40:d8:d4:5f:0e:30:
                    f1:a6:bb:0c:5a:0e:12:86:6c:17:01:b7:bd:09:51:
                    56:de:e9:e7:ab:c2:83:08:1f:f6:b7:b1:04:37:53:
                    e2:53:bb:a9:0e:01:0d:7a:95:53:1f:fb:5f:b8:b9:
                    16:39:f5:68:35:81:d5:59:9f:3a:36:b8:86:69:46:
                    d8:bf:7f:36:43:ad:d4:95:0a:28:bb:db:4c:23:07:
                    91:72:da:81:fb:23:2b:1f:35:b9:d4:79:15:c3:d6:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9E:65:4B:6E:43:B3:B5:E9:FD:F8:0D:CD:0E:02:DE:D0:24:04:7D
            X509v3 Authority Key Identifier:
                keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e9:2f:46:b8:8b:07:e3:f6:f9:a9:a9:96:3c:df:dc:2d:94:
         f2:f0:3a:57:77:b5:9a:af:77:c6:bc:e3:60:b4:fd:77:b6:86:
         8f:ae:9e:e7:c5:25:46:ec:5d:51:72:c1:c9:3a:53:e4:f7:63:
         7b:5b:91:1e:1b:68:53:c9:b4:94:d2:f9:ac:5d:4e:0a:4f:1b:
         16:53:f1:38:d2:a8:11:c4:0e:c9:61:1f:ce:50:8e:0f:3c:0a:
         d9:ae:13:71:8b:94:3d:cd:7d:3a:0e:78:3a:e1:c9:4b:af:ab:
         57:62:92:1a:e7:d4:f8:36:08:c3:fb:55:8a:21:af:21:4c:0f:
         e3:81:79:98:9d:39:0b:71:20:df:fe:01:31:46:2b:61:70:85:
         18:33:54:49:9d:17:5e:2d:ff:24:e7:02:36:75:25:c6:73:b8:
         76:21:2d:96:3e:bc:a7:ce:ae:53:49:27:2f:83:db:f3:a0:0b:
         91:d4:d0:40:81:28:45:db:5a:c6:d6:ba:c6:f1:86:ab:d5:2d:
         b2:8d:3d:0c:71:7c:0e:41:68:2e:e1:a9:0b:cc:6f:6c:5d:49:
         4a:ab:64:23:4f:2c:d3:ac:79:94:1e:cd:5c:0b:b1:f0:47:95:
         20:77:b5:c7:d1:05:5a:58:e0:bb:79:b9:cc:79:2c:4f:25:40:
         88:e3:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net