Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
File:                     129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json)
Hash identifier:          IHqUXCyzdz0mvo9KWPMY44w97bRHNr+bBcCcpJ2K3yE=
Subject key identifier:   1A:96:8F:A2:A7:BD:DC:9E:F7:B9:74:70:87:DA:EB:FA:58:28:57:FE
Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
Certificate issuer:       /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Certificate serial:       52EE25BFBAA0694BD046B889B68CD12F9DD32F7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
Manifest number:          01E0
Signing time:             Thu 24 Apr 2025 15:20:51 +0000
Manifest this update:     Thu 24 Apr 2025 15:15:51 +0000
Manifest next update:     Sun 27 Apr 2025 23:24:51 +0000
Files and hashes:         1: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=)
                          2: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: 2cNupz50hCwCFJhsnaJbSmVmPmPiBn5Gfs2SXODt14U=)
                          3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl
                          rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ee:25:bf:ba:a0:69:4b:d0:46:b8:89:b6:8c:d1:2f:9d:d3:2f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
        Validity
            Not Before: Apr 24 15:15:51 2025 GMT
            Not After : Apr 27 23:24:51 2025 GMT
        Subject: CN=1A968FA2A7BDDC9EF7B9747087DAEBFA582857FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:39:cb:d2:14:32:fe:02:f2:2b:fb:ad:22:
                    f7:00:b2:e6:60:13:34:8f:2d:4d:d1:44:c9:95:78:
                    8a:21:04:97:5f:25:08:a6:a2:ff:9d:27:61:33:a1:
                    9c:f7:3a:9e:df:f8:76:85:fd:cc:12:cd:37:55:22:
                    fa:9e:90:3f:3f:3a:0d:b2:f5:08:8c:aa:08:00:d2:
                    63:0b:44:14:d0:e5:97:27:92:ab:86:a0:9e:05:9d:
                    9f:72:4e:9b:8b:c8:b4:e1:d1:b4:8e:d9:1e:02:9d:
                    82:c0:ec:8e:d5:0c:73:42:81:39:c5:ba:88:9b:0e:
                    41:3f:51:1b:6e:24:cc:89:ab:39:97:2a:e0:86:54:
                    26:19:94:fb:0d:43:98:88:0c:75:30:4c:d5:ee:b3:
                    7a:2f:eb:11:3a:e6:f0:c6:94:1f:34:e3:0a:cd:b5:
                    91:03:22:87:44:e0:0d:02:eb:46:d7:f4:d7:8b:5d:
                    a9:fe:00:d2:f7:c5:51:3f:a4:93:40:60:44:01:05:
                    b0:3c:cd:7b:0d:ca:7e:75:c9:dd:34:78:a8:49:ed:
                    18:61:ea:03:a9:9b:7c:3e:ac:5b:07:62:77:a5:f6:
                    e3:48:ce:60:e7:fd:8a:6f:f6:26:a6:d5:7f:4c:b0:
                    3c:6b:bc:a7:de:6f:9b:1f:b2:b3:d9:e3:ba:0d:a9:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:96:8F:A2:A7:BD:DC:9E:F7:B9:74:70:87:DA:EB:FA:58:28:57:FE
            X509v3 Authority Key Identifier:
                keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:f4:69:e1:e6:4c:51:00:22:af:e2:cf:4c:cd:3a:f8:9c:
         0a:86:50:e4:72:5c:11:22:8a:0f:53:17:73:63:47:0b:23:b6:
         ae:b9:27:85:9b:68:77:fa:09:2d:58:ab:f6:1d:78:68:5e:0d:
         a2:1a:eb:b0:78:68:33:9f:d3:a2:11:83:69:05:cd:73:7a:c2:
         fa:37:6c:0c:87:ae:77:e4:df:10:40:03:d6:ca:bf:c9:96:64:
         f7:0c:39:6a:87:ea:a9:05:19:56:9d:0a:c4:93:b6:a2:b5:52:
         92:f0:97:9f:33:e4:8c:93:cb:97:05:4c:ca:fb:ee:1a:1c:fd:
         77:3a:69:ae:f6:3f:6c:43:b4:b4:f9:72:90:28:e2:6e:9d:fc:
         87:f1:c1:d3:5e:31:5d:ab:51:ae:d8:67:5d:8b:f1:be:a3:d2:
         54:f4:2c:64:73:63:18:b0:d4:9c:76:b7:22:7a:db:d8:78:a7:
         20:4d:9e:42:d9:51:63:4c:41:d1:f1:a8:2a:70:92:d3:9c:4a:
         4c:64:7f:dd:fe:09:76:23:5b:6b:15:20:dc:63:40:76:ef:a0:
         42:d5:e9:7e:50:1c:39:ff:81:ff:79:d3:24:5a:43:7f:6e:b3:
         d7:4b:e6:bd:6d:1b:84:b3:ce:e5:c7:8b:33:db:93:58:ad:b2:
         3a:85:70:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net