Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
File:                     491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json)
Hash identifier:          C2envt0YLGvrnh/vLZ7B33xjRR2/lLYq5zS0b5FGXd4=
Subject key identifier:   F6:E3:B6:98:24:B5:59:12:72:41:4C:AD:49:05:AC:E3:61:B1:B0:D2
Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95
Certificate issuer:       /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
Certificate serial:       74643B208424B2F6587FCD7FE89984C894F9DBF7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
Manifest number:          01A6
Signing time:             Sat 26 Apr 2025 03:50:59 +0000
Manifest this update:     Sat 26 Apr 2025 03:45:59 +0000
Manifest next update:     Tue 29 Apr 2025 12:24:59 +0000
Files and hashes:         1: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: MUfRn9lbrp81WMx09UFWCA0kG2/2E+bxpD3Uyi4FCjU=)
                          2: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 1P2ogrnijw2MvpVLks2hrGbS/RxvIv2H3EW9osb1JfQ=)
                          3: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: k/Q1zBBHqxGgSdwI7WJvzpfF87jzxOHY6ad+PfSjYrU=)
                          4: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: uAd0JDcy4hpWuoEBSRUvaHCaFXVpe2sxWabbA6bZmhw=)
                          5: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: NOw/NEm3PMCbXTGqxWPDqyT8dJkjuZuy6Yh+EG0lwcQ=)
                          6: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: FeqaP2txuOgRBx2G96zuc78OrFRr2szEz0GSYPgv878=)
                          7: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: APvRAxFS/BciWNG05hryQjcSm8DABLzRNy+ilZSBuW8=)
                          8: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: rvVfeVhsLZ7fWwhIJc3Pd2GqdWdss3UfF7UYtrrPnKo=)
                          9: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: R8Z+hXBnnWiJJKdYZqlOoXUCZ71qI50sWMocZ6icaII=)
                          10: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: iUKGVzhyTEJeEGxOC/Chk8qCSbgQUyxbtxHAcSFlfVA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl
                          rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:64:3b:20:84:24:b2:f6:58:7f:cd:7f:e8:99:84:c8:94:f9:db:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95
        Validity
            Not Before: Apr 26 03:45:59 2025 GMT
            Not After : Apr 29 12:24:59 2025 GMT
        Subject: CN=F6E3B69824B5591272414CAD4905ACE361B1B0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:1d:46:e5:17:a8:4f:8b:7a:cb:a4:c4:3b:
                    3b:57:f7:30:da:36:82:01:c2:99:5e:87:36:b1:ad:
                    ce:e0:4f:55:26:a6:83:50:e4:c6:45:2c:0a:fd:6d:
                    9e:ae:f9:a5:8b:ab:18:1e:53:8e:69:8f:1c:bd:0b:
                    36:df:d8:a9:74:e5:b4:69:79:33:76:bc:4f:8d:da:
                    ad:26:21:5c:19:78:41:bd:9b:ac:b6:e9:5a:9f:f6:
                    c0:e8:c1:a0:1e:81:e8:1c:13:e8:2d:02:d0:b1:29:
                    4b:8b:eb:9a:ac:08:e3:09:1f:9b:39:76:4f:1b:20:
                    0c:46:d5:46:93:71:70:18:e8:d2:c3:d3:d4:6b:4b:
                    a3:80:f7:45:0c:3d:5b:a2:5d:b9:f2:b4:47:ec:10:
                    18:1d:86:e6:b2:0c:6e:9a:b8:19:dd:7e:2f:f8:39:
                    35:e2:58:c2:39:fe:f9:e8:2d:6b:b3:76:b4:0d:67:
                    a0:3b:75:00:88:1c:3f:57:e9:0f:6a:28:8b:ff:2f:
                    57:84:f7:bc:d2:7e:6b:0f:17:4a:e6:55:f0:39:48:
                    66:8d:f9:3f:33:3d:6b:1a:25:dc:ca:c5:58:9e:76:
                    f7:67:1a:86:07:cf:4f:f1:f6:e9:84:e2:d6:e0:01:
                    cb:f6:9f:8d:3d:fd:72:c4:e0:8d:02:b5:3a:27:cd:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E3:B6:98:24:B5:59:12:72:41:4C:AD:49:05:AC:E3:61:B1:B0:D2
            X509v3 Authority Key Identifier:
                keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:fb:de:26:b1:5b:8b:8f:8a:0a:dc:e4:33:41:93:81:c9:
         72:6a:17:f1:ae:63:5c:d9:53:a7:29:11:82:e4:a3:d2:c6:52:
         f5:40:40:8b:57:8d:86:71:58:51:15:6b:18:ac:fd:bb:7b:fa:
         83:40:22:23:23:8b:1c:57:ba:76:0e:e1:09:69:13:18:1c:b9:
         1e:a6:5e:9d:ee:50:77:41:2f:95:1f:fb:5e:06:d0:58:96:db:
         e4:56:36:c5:ee:13:6c:41:ee:27:77:10:71:1a:d4:3f:0d:12:
         58:a7:25:ed:c0:a8:09:f6:7b:03:0f:17:da:8e:ac:c6:bf:be:
         d2:3a:5e:ca:a5:cd:0d:75:e2:35:0e:9e:04:3d:9d:44:be:a6:
         6c:a6:ce:a6:7c:21:f4:e8:21:d5:d5:d9:df:9c:20:c2:ea:7d:
         01:b3:fe:49:8a:16:81:37:0d:d4:63:47:50:97:ab:63:07:6b:
         47:9b:e1:50:39:a8:68:4d:bb:c3:94:94:fe:1f:15:da:fd:b3:
         f9:23:cc:4e:45:1d:f4:a4:85:09:c8:37:6f:10:4c:12:f4:05:
         ba:aa:47:fb:4c:b3:33:b1:d5:ca:37:5d:fd:42:dc:99:c5:9e:
         b5:cd:10:1d:50:9b:55:1a:f3:b3:f0:07:48:0c:92:4d:75:89:
         24:7c:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:31 2025 by rpki-client on console.sobornost.net