Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          wE1bLMcB9PjnA6ZvdumEL5i4+xu5LBvRbK0NCcn13o4=
Subject key identifier:   0B:D4:81:A0:CE:40:19:81:AA:D1:96:ED:52:53:6B:F2:DE:BB:4B:EF
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       681E0CDB63B10EA1AE25E353213DD2A474572D51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          01F0
Signing time:             Thu 24 Apr 2025 17:12:15 +0000
Manifest this update:     Thu 24 Apr 2025 17:07:15 +0000
Manifest next update:     Mon 28 Apr 2025 03:01:15 +0000
Files and hashes:         1: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=)
                          2: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=)
                          3: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: 5vfRQglkGebXcyI4NOFRylHa3YwfCIlaVZa2/3QDn2I=)
                          4: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=)
                          5: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=)
                          6: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=)
                          7: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw=)
                          8: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=)
                          9: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=)
                          10: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=)
                          11: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: fmU/gB/7itVGB2sFtyfrKlK+5/0j2F7s2JNU9ipGEtI=)
                          12: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=)
                          13: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:0c:db:63:b1:0e:a1:ae:25:e3:53:21:3d:d2:a4:74:57:2d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Apr 24 17:07:15 2025 GMT
            Not After : Apr 28 03:01:15 2025 GMT
        Subject: CN=0BD481A0CE401981AAD196ED52536BF2DEBB4BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:64:4d:41:ee:64:29:c0:9c:ed:a0:6b:df:
                    ce:5b:99:3b:7b:70:b1:df:e4:bc:12:ef:58:e3:12:
                    b8:a7:89:48:26:b2:04:4b:04:67:c4:c0:46:5d:74:
                    ef:14:3e:9b:f4:bd:2a:a2:a9:67:17:cf:f2:67:3f:
                    15:e9:ad:40:13:2e:13:19:14:28:47:ee:c6:b5:c8:
                    ad:8c:9a:04:0e:28:64:c4:75:b7:7e:15:87:52:c6:
                    f3:25:7d:18:c6:51:35:10:c0:13:b5:bc:43:2c:66:
                    5c:21:42:36:0d:6d:6e:4f:50:5b:6c:7d:46:6b:c0:
                    de:f1:03:be:b4:01:90:31:e2:e7:e3:ad:99:b4:71:
                    3d:df:af:69:28:c2:02:82:ce:4d:c2:d7:da:0b:ce:
                    a3:3e:5e:a4:85:3a:86:f2:d5:dc:32:40:f1:37:e7:
                    c8:16:48:f0:01:10:df:ff:09:a2:85:87:f5:94:c1:
                    4e:01:1c:b2:5d:97:57:91:08:48:b5:95:86:8e:17:
                    50:bd:ff:f8:65:32:85:37:68:4f:ab:5d:3c:92:37:
                    23:ad:1b:6f:81:32:84:c4:58:0a:50:0c:c0:a5:48:
                    60:9c:e9:78:46:27:01:f2:0e:7b:a7:41:73:b8:22:
                    c4:86:e2:98:00:40:bd:d5:fa:c4:fa:aa:c4:2a:15:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:81:A0:CE:40:19:81:AA:D1:96:ED:52:53:6B:F2:DE:BB:4B:EF
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:93:86:b2:3c:b4:f8:03:a8:59:ae:df:11:f9:8d:76:f7:
         a6:11:36:12:f0:04:41:d5:3c:39:8a:96:d1:85:8c:66:25:0f:
         99:7f:3e:94:9a:7e:00:32:4d:c4:8a:8a:c7:c9:03:58:e0:33:
         f7:3f:a1:86:20:cb:e0:74:ea:e5:c2:c7:d0:17:6b:21:be:8f:
         a5:fb:8c:a2:49:44:3e:21:ff:ac:9d:8a:70:4f:7d:9a:88:0a:
         9a:0d:22:7f:43:41:41:26:62:2b:9f:e3:48:7f:c8:a3:df:66:
         20:ec:96:9b:c2:5e:4a:b9:a9:1e:32:71:d7:75:21:4a:7d:de:
         46:83:9f:78:86:e5:6d:06:fc:b4:73:62:42:55:64:48:8b:bc:
         42:14:24:12:d9:f1:76:ce:ea:d4:81:eb:42:7e:d8:26:65:06:
         1f:27:53:17:cd:28:44:c8:79:06:c3:ef:f5:0a:e2:49:06:63:
         6a:9d:22:03:e4:9c:80:6d:93:a5:c1:18:20:a6:c9:fa:ca:ed:
         21:16:1d:f8:4c:60:e2:3b:df:95:3a:f5:ad:85:38:d3:69:cc:
         c1:45:60:26:dc:b6:c7:eb:d2:10:7f:b9:03:48:dc:6b:d0:c1:
         06:0e:46:26:6c:8f:dc:72:83:54:09:58:33:cb:4b:69:6c:9f:
         41:4f:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net