Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
File:                     940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json)
Hash identifier:          ZusdK/NpUUz9OkfYfygwfNPrZruIuU2cD5Vy5qpgs80=
Subject key identifier:   2A:69:6F:33:16:56:60:3A:28:12:A7:03:D9:B0:89:A3:2B:E1:D4:74
Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
Certificate issuer:       /CN=940E05E54E6B685EFBC6114D1E913804318364AB
Certificate serial:       5C18246DD8C187364BB1F9583958A1B65AD81E6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
Manifest number:          015B
Signing time:             Fri 25 Apr 2025 13:40:43 +0000
Manifest this update:     Fri 25 Apr 2025 13:35:43 +0000
Manifest next update:     Mon 28 Apr 2025 17:09:43 +0000
Files and hashes:         1: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: 3M+qehQhPJtRx+AWVv45lLS8rU8qsKaeaYio/75TNPk=)
                          2: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: AzlMFbzrHGcEG4v19yHIw2cVpPbbaGWfk/zoDkydCtA=)
                          3: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: 0GdkcRSW/WOmMDtLEseTJ0FV/ehSLJNqguRNtYzrWRU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl
                          rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 17:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:18:24:6d:d8:c1:87:36:4b:b1:f9:58:39:58:a1:b6:5a:d8:1e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB
        Validity
            Not Before: Apr 25 13:35:43 2025 GMT
            Not After : Apr 28 17:09:43 2025 GMT
        Subject: CN=2A696F331656603A2812A703D9B089A32BE1D474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:ec:1f:5f:52:44:23:2b:26:d1:dc:1b:c1:
                    45:3c:52:e9:91:89:84:c6:07:3c:8d:3c:16:39:b2:
                    d0:e2:ed:64:bc:56:43:05:c4:16:e9:54:de:8b:bb:
                    04:ef:d9:8d:8b:be:4a:6b:6f:d8:39:ba:b8:84:4e:
                    c8:0d:a7:52:fe:19:eb:96:e4:26:76:3f:8d:0e:28:
                    04:a7:03:d8:ad:03:c6:d7:ec:06:d9:56:87:c4:62:
                    fa:e7:21:67:7d:7b:87:81:59:63:44:fe:e2:fc:c0:
                    a7:4a:29:52:bb:da:c4:53:a7:fe:f9:b9:0a:1f:56:
                    9b:f7:98:57:55:98:44:40:a6:39:0d:db:2c:73:56:
                    d6:02:2a:53:73:5f:49:d2:ab:1a:31:ae:d9:39:1b:
                    50:1d:ff:7a:6c:4a:f7:4b:b7:e5:35:90:dc:84:48:
                    72:90:1a:c4:97:0a:51:24:4b:ba:c1:92:f4:83:e5:
                    55:9e:30:fe:d4:96:05:3b:67:4b:50:d8:22:9d:33:
                    b0:6b:f5:79:9b:da:04:54:0a:79:d2:74:38:f0:36:
                    7e:80:dd:d2:74:00:d1:0c:37:a1:8e:4c:37:f3:94:
                    b6:02:05:43:04:9a:7d:16:11:58:0d:9a:80:b8:76:
                    8b:e8:1e:4a:c8:56:93:95:2f:13:82:91:92:19:c1:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:69:6F:33:16:56:60:3A:28:12:A7:03:D9:B0:89:A3:2B:E1:D4:74
            X509v3 Authority Key Identifier:
                keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:02:cf:5f:b0:fa:a3:8b:af:e4:3c:0f:bf:96:a8:8f:bd:0b:
         28:49:4c:07:59:9c:db:73:8b:17:1c:67:4d:40:ef:19:c6:ff:
         50:42:2c:f2:a4:d8:ca:8c:b8:76:fe:a3:a0:f3:74:79:77:3a:
         bf:fd:7a:9e:f7:6f:80:27:3e:c3:82:4a:a7:35:49:37:f6:e8:
         88:66:04:4d:b1:69:a1:b9:80:b0:0c:79:19:3f:09:74:24:c9:
         37:9c:a8:2a:4b:30:1e:7a:5e:b8:e3:60:70:33:42:6e:bf:12:
         40:1a:b3:a5:84:95:85:51:e8:36:33:ff:7d:7e:80:2e:ef:7c:
         15:29:a3:a3:52:a5:58:7f:3f:1d:52:fa:28:4c:93:8b:d9:a6:
         b8:5b:0b:1e:61:05:be:72:4d:cd:46:98:4f:0e:a9:44:97:37:
         bb:23:99:ca:e8:a4:83:b0:40:c4:2b:dd:53:25:4e:9a:06:8c:
         dd:49:6a:7d:e2:62:f8:94:b5:45:44:32:e7:31:8f:97:3c:85:
         9e:4a:21:1a:be:4e:45:ac:55:c2:58:d2:2f:cd:77:db:82:a9:
         38:2a:99:fa:c4:38:c2:a7:1e:8a:6a:65:59:3c:3c:47:d7:70:
         9e:2c:ec:09:67:66:0e:57:e4:99:3d:01:4b:a6:0c:3c:3b:32:
         13:95:30:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXBgkbdjBhzZLsflYOVihtlrYHmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz
MTgzNjRBQjAeFw0yNTA0MjUxMzM1NDNaFw0yNTA0MjgxNzA5NDNaMDMxMTAvBgNV
BAMTKDJBNjk2RjMzMTY1NjYwM0EyODEyQTcwM0Q5QjA4OUEzMkJFMUQ0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1z+wfX1JEIysm0dwbwUU8UumR
iYTGBzyNPBY5stDi7WS8VkMFxBbpVN6LuwTv2Y2Lvkprb9g5uriETsgNp1L+GeuW
5CZ2P40OKASnA9itA8bX7AbZVofEYvrnIWd9e4eBWWNE/uL8wKdKKVK72sRTp/75
uQofVpv3mFdVmERApjkN2yxzVtYCKlNzX0nSqxoxrtk5G1Ad/3psSvdLt+U1kNyE
SHKQGsSXClEkS7rBkvSD5VWeMP7UlgU7Z0tQ2CKdM7Br9Xmb2gRUCnnSdDjwNn6A
3dJ0ANEMN6GOTDfzlLYCBUMEmn0WEVgNmoC4dovoHkrIVpOVLxOCkZIZwZLRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKmlvMxZWYDooEqcD2bCJoyvh1HQwHwYDVR0j
BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF
NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz
NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz
YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4
MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEcCz1+w+qOLr+Q8D7+WqI+9CyhJTAdZnNtz
ixccZ01A7xnG/1BCLPKk2MqMuHb+o6DzdHl3Or/9ep73b4AnPsOCSqc1STf26Ihm
BE2xaaG5gLAMeRk/CXQkyTecqCpLMB56XrjjYHAzQm6/EkAas6WElYVR6DYz/31+
gC7vfBUpo6NSpVh/Px1S+ihMk4vZprhbCx5hBb5yTc1GmE8OqUSXN7sjmcropIOw
QMQr3VMlTpoGjN1Jan3iYviUtUVEMucxj5c8hZ5KIRq+TkWsVcJY0i/Nd9uCqTgq
mfrEOMKnHopqZVk8PEfXcJ4s7AlnZg5X5Jk9AUumDDw7MhOVMII=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net