Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
File:                     923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json)
Hash identifier:          ULaMaARfsQpDTgzAFakV3CVfuzD4Syr3ZTnlTAEz5dU=
Subject key identifier:   64:0D:E8:04:DC:8B:0C:2F:F6:83:EE:37:65:9F:C9:34:E2:78:3A:3A
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       381C6160BCA3B95CE4504D96AFAA75CDA3D0F73E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
Manifest number:          0585
Signing time:             Wed 25 Mar 2026 15:12:34 +0000
Manifest this update:     Wed 25 Mar 2026 15:07:34 +0000
Manifest next update:     Sun 29 Mar 2026 02:22:34 +0000
Files and hashes:         1: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: QVcEps8yiGL2UfFqAU6S0SwOvOL4GMwkoHsrt8b7xrI=)
                          2: 323430323a616134303a31373a3a2f34382d3438203d3e20313337333330.roa (hash: R28MIfUaJCnc4/MfDxXrHUmk9cJ89tiWvymn3ICC4cM=)
                          3: 3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa (hash: 0nR+a0GrELpeQDM3LuDxE+qTaXatthUlw07SHUwh/Ys=)
                          4: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: r1HTlIacGCX7WIy+ItKmdF1K+oqgLcL3a+HFYfLMrrg=)
                          5: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: rNDsRlOx+ZmLfoeW6nnGDsNn4s742wqQJvoJUhwEUPQ=)
                          6: 323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa (hash: eTm7SRPStPMMue15D604/zbIpBPlfqR8Q8XY+kXO8k8=)
                          7: 323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa (hash: hdgIawWouah0ekpAe8UrvrGoDu4aXWNxqYNJE/bdGyY=)
                          8: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: s80i2JnZJo0U9U25elvxTxh6QkHnCZRBkPx/ALx9H8Q=)
                          9: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: P2lcJfyLPGUNQ4cnX8Y2QLZI/erXHDt7Fmf4XMrSfGM=)
                          10: 323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa (hash: RUrWhmreQUQp1NjZrcuDlG3qiB+RCRdIC30Io87l1mw=)
                          11: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: v4Taz03e2i7+jkqTPf0U0ovYjVCMponleywvMjVM0R8=)
                          12: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: zh95BFBdCbv/H0EiAO2kNQNsmpUEe+0QlQtPZIBdZcE=)
                          13: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: o4PO23lnRqPf03Wo6JrcILog0Qd/SLT9yVAea2BC/2M=)
                          14: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: 22kUuK/GVBrAxrLqaG0j6+V0+LsPCWDPGnPRWi0ZTZE=)
                          15: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: NNrOvOAX878W/wl76ltah13BW4qzOmHYAfyfUyg3Do4=)
                          16: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: ix6QVYHLLnfJn7tGXN1RpfnIGSyzbAedxPhWyf6Iui0=)
                          17: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: 1ez+krjsqhXyqvxYrqewG2OuJMmETdewfUDWdsil76A=)
                          18: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: /CIS3iPItuK729ktXooV2XibUcE8PIXGTUFxbNW9uhA=)
                          19: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: DyblRdAcneayqUYUzLQrusdo79df7lrk/CG5/9G503c=)
                          20: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: aznR+rxjjEIsUxFM5mh1iq4hQzHytRItzxTk14wm3KQ=)
                          21: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=)
                          22: 323430323a616134303a31383a3a2f34382d3438203d3e20313337333330.roa (hash: Nbj2OeR+uWV2WwV2WDCkzfCUJ0UTXPC/nTipHdsGOoc=)
                          23: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: JpAZjX8/swngpxlxVVVajwCNKWAQXON4Zao07dX/5sA=)
                          24: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: hgu6JQFjlPCsZ1LOkWJ43XgrvcgegqNe/WOZPeA+nLk=)
                          25: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: wQY9oUK0n/ZiM1qUELQ9nUUAjEFwQkM8wAkVoOkHjLI=)
                          26: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: zJ/IOktVnWhWz4jSOLDXtaH370UXngeNbW03Fgb+vvw=)
                          27: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: HA87lAPnR7iUK+dc1jECmtT+iEh5xxhksBYnQ16Faq0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Mar 2026 02:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1c:61:60:bc:a3:b9:5c:e4:50:4d:96:af:aa:75:cd:a3:d0:f7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Mar 25 15:07:34 2026 GMT
            Not After : Mar 29 02:22:34 2026 GMT
        Subject: CN=640DE804DC8B0C2FF683EE37659FC934E2783A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:f1:33:a9:bd:b7:f2:9d:9e:c3:9f:36:96:
                    78:d9:30:2f:3a:e2:8d:a6:a2:9c:79:ea:b9:72:b6:
                    56:31:0c:7a:7d:8c:bd:96:19:43:a5:91:dc:6c:64:
                    0a:db:f8:d6:ce:7d:3f:8f:a5:a5:0c:92:a5:b3:c2:
                    53:8f:e5:79:cc:f2:59:ed:4b:40:a5:e5:83:00:04:
                    ec:ec:55:cb:75:30:f6:4b:34:df:48:f0:8c:9a:ac:
                    0f:6d:03:1c:31:cf:01:95:83:09:78:20:da:3b:6f:
                    3c:bc:a0:70:43:67:d9:4c:71:85:bd:fd:68:ba:07:
                    3a:db:63:8d:49:b6:54:aa:73:f7:45:89:ca:80:9f:
                    3d:c1:d7:57:56:a2:3f:29:01:76:4f:2b:a5:0f:cf:
                    80:8a:f7:a7:a7:97:4e:d3:f8:83:8b:6c:0a:d9:33:
                    3d:95:26:73:be:1a:67:89:7c:c3:64:68:6b:17:7d:
                    73:4c:43:e6:0d:ad:18:c7:c3:26:58:9c:d2:d8:82:
                    61:74:10:44:69:58:2c:1f:8e:f5:02:3d:af:3e:99:
                    51:9d:73:c7:a9:10:37:da:a2:a8:28:2d:bd:55:7f:
                    b4:57:ac:51:fd:a0:0d:10:6e:ae:7a:1c:99:af:ae:
                    57:ed:91:2c:df:ef:be:56:e6:34:17:6f:f5:d1:83:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0D:E8:04:DC:8B:0C:2F:F6:83:EE:37:65:9F:C9:34:E2:78:3A:3A
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e6:70:44:4c:a6:68:31:2d:fd:d5:07:02:3a:68:e4:f9:38:
         b2:7a:28:15:06:81:f3:91:0f:ae:f8:c1:43:5d:60:63:63:6c:
         ec:1c:b0:bc:42:e6:57:10:66:1a:66:ae:cc:63:e0:1b:18:dc:
         fb:3b:27:47:b3:c1:5a:4b:46:d0:8c:b4:99:e4:4c:7e:12:64:
         fe:1b:32:32:c0:28:c9:4d:13:1f:fa:7f:88:dc:91:e3:0d:a5:
         fe:ee:e6:2a:87:bf:1a:c5:8a:61:bb:a9:bf:52:b4:86:01:97:
         10:2e:5b:41:f7:ad:69:35:d7:fb:1c:2e:aa:71:3e:bd:45:5f:
         ff:69:b3:54:64:c0:48:03:9e:00:ae:dd:d8:67:3f:c7:92:6d:
         9f:be:30:89:31:69:de:6c:75:64:50:f0:6d:8e:55:e0:8d:a4:
         d2:0a:5d:96:18:b5:42:b9:93:38:4c:8f:aa:7f:d5:4c:14:45:
         69:b3:f2:ed:27:f4:26:f5:1a:c1:00:53:90:b5:3c:83:f0:e5:
         cc:e6:18:e7:fa:d8:f4:bc:6e:83:5d:aa:c0:ed:c7:4d:93:18:
         8e:0d:20:42:82:ff:d5:b7:12:68:39:09:f2:0d:e4:5b:aa:65:
         18:58:dc:4a:f0:ff:b7:4f:6f:11:d8:1d:db:25:14:82:eb:de:
         73:fa:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:12 2026 by rpki-client