Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft
File:                     614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json)
Hash identifier:          RDJDWm+Wtccj4V57Umw+vintFMstewvTzFkA3OyJEFI=
Subject key identifier:   1D:48:23:7A:75:DE:0A:3F:B5:44:FE:0C:62:A0:F5:56:27:09:D9:94
Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98
Certificate issuer:       /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698
Certificate serial:       6721AC520CD31BB1DD1A015C905D5C48C3D08A45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft
Manifest number:          52
Signing time:             Fri 25 Apr 2025 20:11:54 +0000
Manifest this update:     Fri 25 Apr 2025 20:06:54 +0000
Manifest next update:     Tue 29 Apr 2025 04:56:54 +0000
Files and hashes:         1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=)
                          2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: F8e9iRJuOrKIwtQasnrJJCYLHBj92o6KsHjoiXTaSno=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl
                          rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:21:ac:52:0c:d3:1b:b1:dd:1a:01:5c:90:5d:5c:48:c3:d0:8a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698
        Validity
            Not Before: Apr 25 20:06:54 2025 GMT
            Not After : Apr 29 04:56:54 2025 GMT
        Subject: CN=1D48237A75DE0A3FB544FE0C62A0F5562709D994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:cb:66:38:f2:44:cf:b8:ae:18:b7:97:47:
                    03:01:18:c1:b2:06:41:62:97:ad:e6:de:30:55:70:
                    e7:41:d8:34:29:1c:3a:6a:10:a2:a2:77:f6:5a:70:
                    77:3e:2d:f7:87:5c:c0:df:56:0d:ef:f7:ab:10:a4:
                    18:53:7d:5a:f1:5b:27:16:97:c3:fc:22:6a:30:2c:
                    b5:2d:5c:e2:c6:27:43:0b:19:99:f0:75:da:b0:cc:
                    8c:1b:9b:f4:9c:da:99:b2:31:56:26:1b:1f:6d:fa:
                    3b:c0:dc:de:07:19:94:9a:39:2d:61:06:e0:02:49:
                    65:e2:4f:0b:2c:ba:40:25:ee:eb:90:f9:45:76:ba:
                    0a:66:f3:86:7c:f0:8f:4a:8a:b1:a7:4a:c9:87:49:
                    7b:b2:39:75:ae:4a:74:ad:4c:51:df:69:61:da:2a:
                    c1:fc:0e:04:b5:9e:da:29:f4:9b:3f:32:c4:ae:69:
                    e6:d8:ae:da:0a:3c:ac:ed:0e:12:12:9b:f1:da:3d:
                    d9:3d:af:d6:cb:aa:64:e2:de:d3:cc:f8:52:49:2e:
                    a6:25:ba:0e:1b:d4:09:97:69:28:95:57:da:e3:d8:
                    26:ee:18:65:45:b7:b8:d3:2e:8e:84:83:03:e9:39:
                    2f:07:89:9d:7a:12:87:d2:bb:44:59:fd:10:93:60:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:23:7A:75:DE:0A:3F:B5:44:FE:0C:62:A0:F5:56:27:09:D9:94
            X509v3 Authority Key Identifier:
                keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:19:1a:c3:ff:62:76:8f:f0:ac:fb:e2:71:c2:1b:0d:d5:bc:
         73:6a:dc:f5:0d:82:d3:c2:2e:27:c9:38:63:cc:28:4a:83:7a:
         3c:a7:51:c1:c9:4e:66:bd:3a:f7:c7:5a:35:93:8f:50:cd:54:
         33:b6:88:b6:26:d8:d9:c3:49:aa:d0:f5:22:18:1b:dc:c9:c3:
         ce:e1:75:24:f6:21:06:29:ac:60:fa:ea:c4:68:ca:4e:f3:5a:
         eb:22:7c:be:7a:fd:ef:6d:ad:c9:22:d5:99:a5:c4:83:cb:00:
         aa:8f:fa:56:b7:c0:a8:35:3f:ff:6c:18:e4:f5:f2:e0:7a:37:
         95:31:28:7f:aa:4f:5e:3b:7f:4a:64:0c:2e:87:f5:1f:5a:a8:
         fc:a7:82:00:d8:db:24:d3:e0:61:ab:5f:65:31:74:94:d3:7f:
         d7:f0:38:be:f0:87:14:0f:b5:35:b2:62:51:eb:85:0e:5a:d6:
         43:1f:34:57:18:44:76:2f:4a:16:d2:5f:f5:38:04:12:12:b1:
         8d:d5:06:d1:b9:68:30:04:87:e3:41:ad:2b:31:50:92:73:27:
         83:95:d1:9f:2f:ce:a7:eb:66:f5:c3:14:5c:7a:20:fd:20:87:
         b4:b4:4c:ef:cf:fb:9d:11:d6:3b:9c:d9:30:cc:8e:46:79:68:
         46:25:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net