Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft
File:                     5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json)
Hash identifier:          olxfT85q1tt4+YhO3AZ2TObOEa3nfAQgJMIAH1j0BVc=
Subject key identifier:   54:23:09:69:3E:EA:67:04:22:B9:D0:DB:06:95:B6:50:D1:4C:84:5D
Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E
Certificate issuer:       /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E
Certificate serial:       10C441D5EE03F51F7C7DBF97B0143BC53AB9F695
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft
Manifest number:          01EF
Signing time:             Sun 27 Apr 2025 02:31:42 +0000
Manifest this update:     Sun 27 Apr 2025 02:26:42 +0000
Manifest next update:     Wed 30 Apr 2025 11:16:42 +0000
Files and hashes:         1: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: IbiWK5270mwHrnB6XT0JomBYqQc1q1mQYDwwzYu+Fp8=)
                          2: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: k18rbyJ1e45uKkhjh5UhyMFWegVRvsXmbYp5alOFJn0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl
                          rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 05:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c4:41:d5:ee:03:f5:1f:7c:7d:bf:97:b0:14:3b:c5:3a:b9:f6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E
        Validity
            Not Before: Apr 27 02:26:42 2025 GMT
            Not After : Apr 30 11:16:42 2025 GMT
        Subject: CN=542309693EEA670422B9D0DB0695B650D14C845D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:5c:d1:0c:f3:f0:fe:cc:a3:48:9b:1e:50:
                    3a:69:af:5d:be:43:11:a4:16:7d:dd:ab:23:69:a2:
                    55:89:bd:85:e0:95:f3:b7:28:0b:2c:fd:b6:e8:c7:
                    5d:2a:b3:54:f4:be:9c:b7:96:59:f4:63:57:eb:a9:
                    a2:99:c0:66:b0:b3:d2:e4:ee:72:51:8a:80:15:1c:
                    57:1e:82:c1:22:cb:1c:3b:ab:9a:ce:43:02:45:f5:
                    12:73:7d:b3:6f:e8:69:fb:60:f5:b3:38:5a:8f:12:
                    ad:16:67:2b:08:84:a2:f0:2b:88:83:72:12:03:63:
                    7f:60:9d:06:47:a7:54:d6:36:2f:e7:a1:b8:9d:5d:
                    4d:61:e4:e3:13:db:35:99:e8:60:5e:c3:f3:a1:b0:
                    a3:f2:51:c4:2d:41:fb:f2:56:5e:a2:23:99:23:18:
                    88:4f:38:fb:32:00:f2:1e:6e:70:26:08:89:3f:ab:
                    29:45:78:02:ca:51:c9:2e:47:67:58:74:f5:26:6d:
                    c5:03:fb:63:1e:d8:e9:6e:f5:f2:26:56:0c:37:70:
                    9d:32:da:bf:67:45:fc:88:ce:8a:39:47:14:16:83:
                    d5:1b:4b:d3:c0:27:65:cb:ef:a2:77:7c:05:dd:60:
                    d7:d7:a0:f4:53:58:b3:2a:1f:4b:86:c1:03:17:dc:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:23:09:69:3E:EA:67:04:22:B9:D0:DB:06:95:B6:50:D1:4C:84:5D
            X509v3 Authority Key Identifier:
                keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:e4:51:f3:c6:36:aa:8b:83:c1:8d:49:a7:90:03:e6:da:
         75:da:b5:ee:80:87:ec:57:d4:b9:ce:68:07:38:0d:f7:b8:5e:
         5c:8c:12:55:f5:04:1c:a0:94:38:8f:95:98:50:79:ca:77:72:
         8c:17:40:29:f9:55:27:38:bc:f6:bc:89:53:aa:93:fa:a8:ee:
         53:2b:07:68:50:52:0b:44:ca:b2:8c:98:e9:d5:c2:58:66:44:
         f1:c6:cd:3a:28:69:63:22:b8:a4:60:83:a2:77:05:90:bf:69:
         9b:7d:bb:f3:e8:46:d3:78:00:a1:c3:f3:44:b4:99:3b:84:3c:
         83:c2:77:cc:f1:e2:be:7d:1b:e4:47:48:60:cd:17:b0:1e:1d:
         b6:f1:d9:1f:b6:a2:04:57:76:f0:25:06:9b:7a:a9:8c:0a:11:
         fc:b3:0e:b8:91:b5:57:e0:5e:73:75:d0:7d:41:4d:f9:07:45:
         b1:9d:8a:9e:d6:e3:92:9e:6a:6f:8e:bd:e7:28:40:6f:c3:33:
         12:16:cd:b2:9b:0c:d7:92:a6:6f:d8:e1:f4:8f:51:89:19:90:
         42:5f:3c:76:a0:cd:10:f0:3f:5b:ce:8d:6f:40:3f:59:7c:6a:
         a8:ee:de:84:57:2a:42:9a:ac:2c:3b:d5:28:ea:0b:cf:16:1f:
         f8:67:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:32:55 2025 by rpki-client on console.sobornost.net