Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          FMYfH1psSll+x34jYs0Xfhk5C7ShS8rsSSVwx2ImxUU=
Subject key identifier:   2D:A7:E5:7B:F0:4B:F1:4B:36:1B:3E:B9:D3:9F:12:3C:2D:5C:89:9E
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       774F8C60FD6EE67584EA46398073B60778C16B80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          01FF
Signing time:             Sun 27 Apr 2025 06:51:20 +0000
Manifest this update:     Sun 27 Apr 2025 06:46:20 +0000
Manifest next update:     Wed 30 Apr 2025 09:28:20 +0000
Files and hashes:         1: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: X36QLgVhGJ49HLtt76O3IZYZ5R6XiQpbmzY9UR5vonE=)
                          2: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: Te3AvUTGPO22MnUJ6/LYwCMSzsuyx7JfvuvxsiGtkzc=)
                          3: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: LKMpMHmAKa4eNyupgoR3jFLedvhgupf/jLZZmCrBqeY=)
                          4: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: XpFPcsbLxCI6NKz3XGZEwQyDlDuJ1JV+kC2sTVPG1no=)
                          5: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: s/uZYeJprhGnWX2//HBqYGCHtbueKtXiv18b+uk27Pk=)
                          6: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: blvhC5mu+XJhjfitpMdYcO0PTVbYBI2WHhZRJy/oOBc=)
                          7: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: xLGvyaDjwqpeZLZ4IR0CWf1khT74vyueTZyVJB2lFVg=)
                          8: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: YVPmHYNM/91Kh3go+8hTY3GFfVG3Jf2pj4Fr/0KSs7Q=)
                          9: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: 9IIX/I4LwDiuE+KeZYA2yYvi5TMJFCE/fbqcURjEk/E=)
                          10: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: 2278ZJ1gGMvFP2g/vEd5/wEl+LVW1rbxi3M1w9tcyIU=)
                          11: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: 0dUKes+eIh/aOaX/cHPsineN0HFtNVJsDIk5syVGyQk=)
                          12: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: jBGgrMGnibBJ35+neDfX4MwBNDGqqmS27hN6Fi2jltI=)
                          13: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 1cGLb6flF+sG9FbIeo7gqKEbomQnfYkuNhzZyM8ulKw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 05:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4f:8c:60:fd:6e:e6:75:84:ea:46:39:80:73:b6:07:78:c1:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Apr 27 06:46:20 2025 GMT
            Not After : Apr 30 09:28:20 2025 GMT
        Subject: CN=2DA7E57BF04BF14B361B3EB9D39F123C2D5C899E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:ff:12:42:33:d8:da:71:67:4d:c8:76:01:
                    f5:23:b1:82:3b:0c:c9:f2:c6:88:f0:d1:e1:72:8f:
                    de:cc:08:b6:fa:c2:a1:88:30:ce:22:65:36:1e:82:
                    a6:c2:3a:2f:7b:0d:58:c1:0b:1c:a0:e1:eb:da:72:
                    13:41:2f:3a:20:f1:64:13:7b:dd:36:1c:34:2d:a6:
                    10:77:df:66:a7:0f:53:ae:7b:09:25:9c:e8:8e:f2:
                    2f:15:cf:62:c8:3c:b7:4c:84:f9:59:a6:8f:b3:22:
                    f5:54:be:9b:d8:a5:bf:d2:57:4c:9a:af:da:74:2b:
                    4e:a8:45:ac:0e:eb:22:16:8e:89:45:89:ea:e1:5a:
                    21:15:4b:bf:83:e4:45:48:72:d4:54:0e:c9:01:2e:
                    b1:4a:83:f5:07:12:fc:ee:04:b7:6b:fe:93:54:05:
                    1b:34:19:49:59:3b:81:1d:7d:1c:42:93:37:1a:c0:
                    1d:9b:f8:37:c9:0f:b1:e5:39:4a:68:a6:8f:ec:94:
                    aa:fa:1c:b2:11:e0:31:b5:99:80:6a:31:11:fe:40:
                    15:1a:28:f7:29:7c:a3:aa:ba:0c:3a:6a:5f:5a:70:
                    81:86:6c:22:a0:fe:ab:33:68:39:0f:5f:d5:b0:c9:
                    53:82:e5:68:10:ab:39:c5:4f:03:b9:b6:68:22:c6:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:E5:7B:F0:4B:F1:4B:36:1B:3E:B9:D3:9F:12:3C:2D:5C:89:9E
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:a1:09:7a:99:6f:bc:2f:39:a4:e1:d7:fd:84:fa:72:d5:
         1c:13:cf:4e:3b:d6:5b:2c:a4:9c:91:27:f5:1d:8a:14:7a:f7:
         fd:39:03:08:ba:9e:3e:3b:48:76:f0:f3:5d:89:68:cf:98:56:
         75:b4:d8:e3:b4:c1:2a:92:f4:da:47:1e:ca:b4:8e:60:db:0c:
         c9:06:be:1d:e6:93:6d:95:ed:be:a2:ec:2c:78:5d:11:0e:60:
         1a:ee:fd:fd:a6:d4:72:8d:3f:aa:28:b9:20:c4:00:da:90:ab:
         59:fa:99:5d:53:e9:c6:cc:ed:5e:2c:85:24:bb:15:f4:32:24:
         02:1a:47:0a:b9:91:e4:96:96:a5:46:f8:20:11:b7:36:54:57:
         4f:d1:9b:4f:7a:95:03:99:98:25:77:24:7c:b4:f1:d9:63:55:
         51:11:14:a8:8b:04:06:a8:2e:e7:19:6a:60:b2:88:5d:22:32:
         03:3b:20:2f:ba:9e:f4:df:3b:a2:61:c9:23:34:fa:c4:ff:85:
         46:89:68:42:de:55:02:56:53:86:bd:cb:e6:d8:20:08:80:b8:
         42:e3:7d:ba:a4:49:c0:d5:34:c3:f0:ac:43:46:ef:8e:f2:3c:
         12:1b:65:3b:3d:a8:9b:0c:15:26:67:0c:00:02:87:d0:e7:af:
         fd:1d:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:42 2025 by rpki-client on console.sobornost.net