
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json)
Hash identifier: ULaMaARfsQpDTgzAFakV3CVfuzD4Syr3ZTnlTAEz5dU=
Subject key identifier: 64:0D:E8:04:DC:8B:0C:2F:F6:83:EE:37:65:9F:C9:34:E2:78:3A:3A
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial: 381C6160BCA3B95CE4504D96AFAA75CDA3D0F73E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
Manifest number: 0585
Signing time: Wed 25 Mar 2026 15:12:34 +0000
Manifest this update: Wed 25 Mar 2026 15:07:34 +0000
Manifest next update: Sun 29 Mar 2026 02:22:34 +0000
Files and hashes: 1: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: QVcEps8yiGL2UfFqAU6S0SwOvOL4GMwkoHsrt8b7xrI=)
2: 323430323a616134303a31373a3a2f34382d3438203d3e20313337333330.roa (hash: R28MIfUaJCnc4/MfDxXrHUmk9cJ89tiWvymn3ICC4cM=)
3: 3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa (hash: 0nR+a0GrELpeQDM3LuDxE+qTaXatthUlw07SHUwh/Ys=)
4: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: r1HTlIacGCX7WIy+ItKmdF1K+oqgLcL3a+HFYfLMrrg=)
5: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: rNDsRlOx+ZmLfoeW6nnGDsNn4s742wqQJvoJUhwEUPQ=)
6: 323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa (hash: eTm7SRPStPMMue15D604/zbIpBPlfqR8Q8XY+kXO8k8=)
7: 323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa (hash: hdgIawWouah0ekpAe8UrvrGoDu4aXWNxqYNJE/bdGyY=)
8: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: s80i2JnZJo0U9U25elvxTxh6QkHnCZRBkPx/ALx9H8Q=)
9: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: P2lcJfyLPGUNQ4cnX8Y2QLZI/erXHDt7Fmf4XMrSfGM=)
10: 323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa (hash: RUrWhmreQUQp1NjZrcuDlG3qiB+RCRdIC30Io87l1mw=)
11: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: v4Taz03e2i7+jkqTPf0U0ovYjVCMponleywvMjVM0R8=)
12: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: zh95BFBdCbv/H0EiAO2kNQNsmpUEe+0QlQtPZIBdZcE=)
13: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: o4PO23lnRqPf03Wo6JrcILog0Qd/SLT9yVAea2BC/2M=)
14: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: 22kUuK/GVBrAxrLqaG0j6+V0+LsPCWDPGnPRWi0ZTZE=)
15: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: NNrOvOAX878W/wl76ltah13BW4qzOmHYAfyfUyg3Do4=)
16: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: ix6QVYHLLnfJn7tGXN1RpfnIGSyzbAedxPhWyf6Iui0=)
17: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: 1ez+krjsqhXyqvxYrqewG2OuJMmETdewfUDWdsil76A=)
18: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: /CIS3iPItuK729ktXooV2XibUcE8PIXGTUFxbNW9uhA=)
19: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: DyblRdAcneayqUYUzLQrusdo79df7lrk/CG5/9G503c=)
20: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: aznR+rxjjEIsUxFM5mh1iq4hQzHytRItzxTk14wm3KQ=)
21: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=)
22: 323430323a616134303a31383a3a2f34382d3438203d3e20313337333330.roa (hash: Nbj2OeR+uWV2WwV2WDCkzfCUJ0UTXPC/nTipHdsGOoc=)
23: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: JpAZjX8/swngpxlxVVVajwCNKWAQXON4Zao07dX/5sA=)
24: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: hgu6JQFjlPCsZ1LOkWJ43XgrvcgegqNe/WOZPeA+nLk=)
25: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: wQY9oUK0n/ZiM1qUELQ9nUUAjEFwQkM8wAkVoOkHjLI=)
26: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: zJ/IOktVnWhWz4jSOLDXtaH370UXngeNbW03Fgb+vvw=)
27: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: HA87lAPnR7iUK+dc1jECmtT+iEh5xxhksBYnQ16Faq0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 02:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1c:61:60:bc:a3:b9:5c:e4:50:4d:96:af:aa:75:cd:a3:d0:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Validity
Not Before: Mar 25 15:07:34 2026 GMT
Not After : Mar 29 02:22:34 2026 GMT
Subject: CN=640DE804DC8B0C2FF683EE37659FC934E2783A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:f1:33:a9:bd:b7:f2:9d:9e:c3:9f:36:96:
78:d9:30:2f:3a:e2:8d:a6:a2:9c:79:ea:b9:72:b6:
56:31:0c:7a:7d:8c:bd:96:19:43:a5:91:dc:6c:64:
0a:db:f8:d6:ce:7d:3f:8f:a5:a5:0c:92:a5:b3:c2:
53:8f:e5:79:cc:f2:59:ed:4b:40:a5:e5:83:00:04:
ec:ec:55:cb:75:30:f6:4b:34:df:48:f0:8c:9a:ac:
0f:6d:03:1c:31:cf:01:95:83:09:78:20:da:3b:6f:
3c:bc:a0:70:43:67:d9:4c:71:85:bd:fd:68:ba:07:
3a:db:63:8d:49:b6:54:aa:73:f7:45:89:ca:80:9f:
3d:c1:d7:57:56:a2:3f:29:01:76:4f:2b:a5:0f:cf:
80:8a:f7:a7:a7:97:4e:d3:f8:83:8b:6c:0a:d9:33:
3d:95:26:73:be:1a:67:89:7c:c3:64:68:6b:17:7d:
73:4c:43:e6:0d:ad:18:c7:c3:26:58:9c:d2:d8:82:
61:74:10:44:69:58:2c:1f:8e:f5:02:3d:af:3e:99:
51:9d:73:c7:a9:10:37:da:a2:a8:28:2d:bd:55:7f:
b4:57:ac:51:fd:a0:0d:10:6e:ae:7a:1c:99:af:ae:
57:ed:91:2c:df:ef:be:56:e6:34:17:6f:f5:d1:83:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:E8:04:DC:8B:0C:2F:F6:83:EE:37:65:9F:C9:34:E2:78:3A:3A
X509v3 Authority Key Identifier:
keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e6:70:44:4c:a6:68:31:2d:fd:d5:07:02:3a:68:e4:f9:38:
b2:7a:28:15:06:81:f3:91:0f:ae:f8:c1:43:5d:60:63:63:6c:
ec:1c:b0:bc:42:e6:57:10:66:1a:66:ae:cc:63:e0:1b:18:dc:
fb:3b:27:47:b3:c1:5a:4b:46:d0:8c:b4:99:e4:4c:7e:12:64:
fe:1b:32:32:c0:28:c9:4d:13:1f:fa:7f:88:dc:91:e3:0d:a5:
fe:ee:e6:2a:87:bf:1a:c5:8a:61:bb:a9:bf:52:b4:86:01:97:
10:2e:5b:41:f7:ad:69:35:d7:fb:1c:2e:aa:71:3e:bd:45:5f:
ff:69:b3:54:64:c0:48:03:9e:00:ae:dd:d8:67:3f:c7:92:6d:
9f:be:30:89:31:69:de:6c:75:64:50:f0:6d:8e:55:e0:8d:a4:
d2:0a:5d:96:18:b5:42:b9:93:38:4c:8f:aa:7f:d5:4c:14:45:
69:b3:f2:ed:27:f4:26:f5:1a:c1:00:53:90:b5:3c:83:f0:e5:
cc:e6:18:e7:fa:d8:f4:bc:6e:83:5d:aa:c0:ed:c7:4d:93:18:
8e:0d:20:42:82:ff:d5:b7:12:68:39:09:f2:0d:e4:5b:aa:65:
18:58:dc:4a:f0:ff:b7:4f:6f:11:d8:1d:db:25:14:82:eb:de:
73:fa:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:12 2026 by rpki-client