Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft
File:                     FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json)
Hash identifier:          bnexAEZXuIHgpfbmWzAznn+bW/UZgbjyOgqLCgep4CQ=
Subject key identifier:   EB:58:5B:0D:C1:7F:C3:6E:A7:43:82:B2:15:4A:CE:BE:C7:50:06:27
Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7
Certificate issuer:       /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7
Certificate serial:       3038801B201A6F13C5D86C754B80D08224FE6809
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft
Manifest number:          0120
Signing time:             Sun 27 Apr 2025 14:41:53 +0000
Manifest this update:     Sun 27 Apr 2025 14:36:53 +0000
Manifest next update:     Wed 30 Apr 2025 18:40:53 +0000
Files and hashes:         1: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: qs7ubJcVKgWjNPAZKmHuxlfHggRW/1iZmXUa/EfffYM=)
                          2: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: F9P1ZnUuqGV0taVDJEnFJzgAXTbawikhZBmBVym2mNw=)
                          3: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: qQiMuOKfrH8PAPkv5BzDpLFaZ1Dhp8Gu3GpyZWN3n5w=)
                          4: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: H3hffUKrAMQgM7P8EVWElY25bwWrRFq4QzBAmlTISAU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl
                          rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 15:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:38:80:1b:20:1a:6f:13:c5:d8:6c:75:4b:80:d0:82:24:fe:68:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7
        Validity
            Not Before: Apr 27 14:36:53 2025 GMT
            Not After : Apr 30 18:40:53 2025 GMT
        Subject: CN=EB585B0DC17FC36EA74382B2154ACEBEC7500627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:54:97:fe:be:44:3a:0f:d6:4b:4e:38:b3:
                    09:13:f3:78:1b:e0:0b:51:b2:c8:a0:d6:03:1d:80:
                    4c:dd:c5:a6:aa:94:94:b7:71:9d:57:b4:85:64:f4:
                    0d:fc:3b:0d:36:f9:fa:e9:a0:cc:c0:62:4f:63:bf:
                    6a:7f:6c:fb:67:2f:d3:20:a6:55:a9:ab:ed:0d:2f:
                    ee:42:91:b9:84:70:bf:2d:86:49:20:3a:40:1b:68:
                    45:e1:f8:d0:b0:70:64:c5:4c:ec:ba:af:16:dd:15:
                    33:1c:3b:40:ac:f1:05:33:c6:17:23:24:61:02:49:
                    fe:9f:22:ab:24:d4:42:26:c5:6a:d3:47:6a:42:46:
                    39:22:03:2d:a9:e2:b9:10:ad:8a:30:cd:bf:d0:89:
                    1b:9b:0c:b3:70:c7:75:60:d3:0c:62:4b:5d:9b:57:
                    08:86:1c:58:8a:30:ee:f7:1a:f9:ad:7b:95:f2:05:
                    81:3e:16:75:ff:2a:54:14:0b:67:9b:f0:c7:4e:ce:
                    e8:04:8c:fc:25:fe:96:69:a3:61:48:cf:10:e2:75:
                    4e:0b:14:d0:b8:c3:b5:b8:19:cf:dd:d4:c2:27:51:
                    3d:95:b1:81:94:98:e9:6a:38:f4:66:2b:6b:df:0d:
                    f9:67:ed:2e:87:3d:3c:fd:66:fb:d4:82:20:42:32:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:58:5B:0D:C1:7F:C3:6E:A7:43:82:B2:15:4A:CE:BE:C7:50:06:27
            X509v3 Authority Key Identifier:
                keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:7b:39:2f:04:16:e4:1d:b6:92:e8:80:14:40:5b:72:eb:
         f2:90:ac:90:b3:32:0d:e0:f5:0a:f1:1a:cc:a6:74:b5:55:04:
         f6:39:1c:54:dc:f2:84:e3:5c:8d:ce:12:01:04:3e:5d:d1:c2:
         df:bc:c0:6c:c0:8a:7d:63:42:9e:2b:77:84:82:78:54:75:54:
         e5:85:a1:8a:db:d8:60:d7:bc:bb:82:23:6b:ae:a9:35:5b:47:
         bd:67:11:04:19:ce:ab:68:c1:cc:b5:4b:51:f8:be:28:a0:f7:
         b3:01:a9:fb:6b:e8:e5:51:da:de:8f:df:9c:6d:93:28:f6:6d:
         c2:90:6f:5d:35:5a:16:b7:65:47:31:14:fa:8f:af:34:7d:fc:
         de:68:76:c6:5f:83:9c:a1:ba:78:fc:98:47:e5:77:f1:90:f7:
         30:4a:ed:4c:1d:35:ee:c2:36:64:31:fc:3f:b0:c4:80:07:e9:
         e0:27:63:0b:7d:aa:d7:dc:be:46:2c:3b:0a:16:c7:85:9c:16:
         1f:4d:ae:7f:c3:64:29:1c:11:5d:c4:00:d8:33:58:d7:cd:1a:
         a3:3c:1c:c5:bd:53:a0:18:4a:48:0b:2e:83:ae:2d:e3:51:b1:
         53:23:6c:a6:a5:c5:0a:85:71:cb:ee:fb:be:f0:f9:62:9a:c1:
         cf:61:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:56 2025 by rpki-client on console.sobornost.net