Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
File:                     6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json)
Hash identifier:          SOjSdfhR0vPJuWBmLCm1FK5u5rb5qYSPOjE3Cq/zAMs=
Subject key identifier:   68:FF:23:D5:3F:A7:A7:F2:77:62:B7:FE:41:13:59:E8:6C:C3:9A:C9
Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
Certificate issuer:       /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Certificate serial:       09D9254ADFDC82D734DA42D3B7F0FCED99D87DAC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
Manifest number:          01A3
Signing time:             Wed 23 Apr 2025 08:52:12 +0000
Manifest this update:     Wed 23 Apr 2025 08:47:12 +0000
Manifest next update:     Sat 26 Apr 2025 16:02:12 +0000
Files and hashes:         1: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: HKwN8FVtXtYHezj/vEX/FGxfRTeqhcgFgbYC3uY5Qf0=)
                          2: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: Hh/1+4qlbDhzD71qNTvlYUqqubeV5bO7623/66P2dW8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
                          rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 09:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d9:25:4a:df:dc:82:d7:34:da:42:d3:b7:f0:fc:ed:99:d8:7d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
        Validity
            Not Before: Apr 23 08:47:12 2025 GMT
            Not After : Apr 26 16:02:12 2025 GMT
        Subject: CN=68FF23D53FA7A7F27762B7FE411359E86CC39AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:b0:23:9c:09:d1:bf:2b:51:2e:3d:f5:02:
                    c0:f5:1d:cd:e8:bd:72:eb:1b:45:ab:a3:9c:04:0c:
                    3f:6c:3f:95:40:e7:ee:ec:a1:c2:a7:37:57:60:9f:
                    9c:0f:82:1a:07:fc:c9:ea:8b:d4:a6:5f:e4:58:2e:
                    a6:cb:f6:98:6c:e5:88:46:ff:f2:c5:14:b2:6a:e3:
                    fe:4e:7e:54:dd:d2:04:bf:1f:0e:46:66:16:6c:ab:
                    39:55:0d:dd:f2:54:96:02:bf:6f:53:5d:55:e0:c6:
                    cc:98:ef:8c:3d:f4:af:21:4d:9f:83:ea:32:a0:70:
                    cf:9e:39:7d:36:5a:93:04:33:69:d3:0f:c5:fb:f3:
                    08:d5:44:43:22:6c:f1:ab:08:f6:ef:ae:e9:96:3c:
                    c9:e3:86:37:e0:b2:11:c2:bd:67:1a:9a:1a:a5:3c:
                    f2:ce:e6:be:14:c7:47:60:51:19:73:f0:44:6a:1a:
                    62:ba:a3:79:48:64:88:a7:5b:f4:b8:14:27:0e:15:
                    02:0a:97:e3:6d:5d:0c:a6:98:27:03:74:43:c5:be:
                    b8:45:13:ba:c3:e5:2a:85:be:12:f8:32:91:47:d0:
                    2a:83:03:7c:75:42:ef:25:9b:37:85:6a:4c:72:1a:
                    62:9c:8a:3d:10:c8:25:5b:e4:f1:79:c7:1d:19:7a:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FF:23:D5:3F:A7:A7:F2:77:62:B7:FE:41:13:59:E8:6C:C3:9A:C9
            X509v3 Authority Key Identifier:
                keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:74:d3:39:8c:04:bd:0b:b7:8d:64:ff:68:25:19:c7:12:
         b9:aa:fc:ab:78:59:4e:3c:77:fd:4f:23:70:3f:aa:06:a6:39:
         ef:69:bd:22:92:35:71:31:3b:e4:07:22:d7:a9:ed:8e:6f:f1:
         46:b2:c5:70:09:02:47:4a:3c:7c:1c:36:ad:53:b1:29:b5:56:
         6c:a3:7c:48:75:b0:6e:14:62:38:26:0b:b8:6e:fd:a2:5e:94:
         f2:d0:c9:0e:50:d3:83:91:2b:10:24:91:20:1f:59:b9:46:aa:
         c4:ac:8c:17:31:03:12:d6:de:c9:e8:a1:0e:b0:df:74:54:b5:
         f4:d1:c9:57:fa:d9:57:b5:9a:31:db:6d:02:ba:d6:fd:89:1a:
         d2:0e:74:cb:47:7e:be:16:e0:bb:3a:ac:8a:2f:b3:ce:ed:66:
         f6:3d:bb:b0:bc:82:3e:3e:78:14:4f:f3:1a:cb:33:0b:aa:65:
         46:8e:be:43:fc:43:a4:d8:fb:8f:41:08:ec:9d:bf:37:9e:07:
         8f:af:cb:69:cd:c8:43:24:3e:37:42:c4:f1:23:02:2f:02:5b:
         e3:41:97:99:e2:0f:82:c3:54:8c:26:10:36:e0:30:1e:b1:e1:
         74:6e:99:f5:c8:d1:fa:45:57:32:b8:ce:c0:b0:9d:90:98:4b:
         a0:23:fd:93
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCdklSt/cgtc02kLTt/D87ZnYfawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJE
OTAwM0E4QjAeFw0yNTA0MjMwODQ3MTJaFw0yNTA0MjYxNjAyMTJaMDMxMTAvBgNV
BAMTKDY4RkYyM0Q1M0ZBN0E3RjI3NzYyQjdGRTQxMTM1OUU4NkNDMzlBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQbAjnAnRvytRLj31AsD1Hc3o
vXLrG0Wro5wEDD9sP5VA5+7socKnN1dgn5wPghoH/Mnqi9SmX+RYLqbL9phs5YhG
//LFFLJq4/5OflTd0gS/Hw5GZhZsqzlVDd3yVJYCv29TXVXgxsyY74w99K8hTZ+D
6jKgcM+eOX02WpMEM2nTD8X78wjVREMibPGrCPbvrumWPMnjhjfgshHCvWcamhql
PPLO5r4Ux0dgURlz8ERqGmK6o3lIZIinW/S4FCcOFQIKl+NtXQymmCcDdEPFvrhF
E7rD5SqFvhL4MpFH0CqDA3x1Qu8lmzeFakxyGmKcij0QyCVb5PF5xx0ZepmlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaP8j1T+np/J3Yrf+QRNZ6GzDmskwHwYDVR0j
BBgwFoAUasWNJIVef+JKxFK30P3bm9kAOoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTUwNTMxOS1jMzNkLTQzNGEtYWJjNS02YTYxY2U4NTNlOTUvMC82QUM1OEQyNDg1
NUU3RkUyNEFDNDUyQjdEMEZEREI5QkQ5MDAzQThCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJEOTAw
M0E4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U1MDUzMTktYzMzZC00MzRhLWFi
YzUtNmE2MWNlODUzZTk1LzAvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERC
OUJEOTAwM0E4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJYtdNM5jAS9C7eNZP9oJRnHErmq/Kt4WU48
d/1PI3A/qgamOe9pvSKSNXExO+QHItep7Y5v8UayxXAJAkdKPHwcNq1TsSm1Vmyj
fEh1sG4UYjgmC7hu/aJelPLQyQ5Q04ORKxAkkSAfWblGqsSsjBcxAxLW3snooQ6w
33RUtfTRyVf62Ve1mjHbbQK61v2JGtIOdMtHfr4W4Ls6rIovs87tZvY9u7C8gj4+
eBRP8xrLMwuqZUaOvkP8Q6TY+49BCOydvzeeB4+vy2nNyEMkPjdCxPEjAi8CW+NB
l5niD4LDVIwmEDbgMB6x4XRumfXI0fpFVzK4zsCwnZCYS6Aj/ZM=
-----END CERTIFICATE-----
Generated at Wed Apr 23 11:12:24 2025 by rpki-client on console.sobornost.net