Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          NgWiV5GN7WlVVK2NoPvZfJg0rPKqHcmcZdfLFbOAPbc=
Subject key identifier:   A4:96:9C:3A:4F:E3:79:D5:A7:69:4F:9B:87:C6:78:83:05:38:6D:91
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       2304E89B1E6689B5B4FA4C77390883C999E241C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          0585
Signing time:             Fri 17 Apr 2026 20:32:46 +0000
Manifest this update:     Fri 17 Apr 2026 20:27:46 +0000
Manifest next update:     Tue 21 Apr 2026 06:05:46 +0000
Files and hashes:         1: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: KvSvkJVty1qHjYffQieqFJAuh3dt1BHzGki9sQiAFXI=)
                          2: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: hmU/fFbEB5MHfxnUZwzr2O0p+/FFdJYTbJLKljW/yfY=)
                          3: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: h7NsaP81E/4rqIyGV1dg1JRgScEeK/hJwwlj/aFKArk=)
                          4: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: uPV0voLTxjHrIsHmaExj5+EGVw7Nm+iGd6nJEj83KUE=)
                          5: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: qdqxuS9k+OvaSgglDWCGRRKf/LCK9cnMwJLYiIUDsQU=)
                          6: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: EZdh60eQJ0O5FCzuczO3QBjbRRYgOvtWbCa5RUYH7z8=)
                          7: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: f3MW9MRtW/VCaCOx6xmUJmKr1hGfG/0h6/MnEScZWs0=)
                          8: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: IrBPaOzrnHx8A3kF5U8FLypO1fdlWfu1886gczEN4Os=)
                          9: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Au0lkFPRKVBvBG5KfA74Xt/Sxl2Jzxo+Ex2p9zz5DkQ=)
                          10: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: 1FsOdleRSG3IEtzn2Y5KIghx/oCLGSKZKVzGT9z4mXU=)
                          11: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: 4nd2DLm/J+RolIn9aIGsW+HXsvu2ybFSiuHkPOngkOI=)
                          12: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: zoZa3tLUvTTpmYIJTx5LfPwbAyo/gY5JwiU6TWgDs78=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 04:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:04:e8:9b:1e:66:89:b5:b4:fa:4c:77:39:08:83:c9:99:e2:41:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Apr 17 20:27:46 2026 GMT
            Not After : Apr 21 06:05:46 2026 GMT
        Subject: CN=A4969C3A4FE379D5A7694F9B87C6788305386D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:68:f9:9e:36:9a:c6:62:29:a8:6c:55:42:71:
                    31:ba:b9:eb:0f:17:57:47:c6:a6:19:99:09:ae:de:
                    6b:b9:46:60:77:1b:7a:25:0b:93:eb:4a:74:e3:e9:
                    9a:fa:84:ac:b3:53:60:e8:df:2f:c0:ac:b4:00:b4:
                    ea:a9:e1:53:f8:ef:b9:5c:21:df:11:bf:d7:5a:aa:
                    68:0a:92:e6:3f:45:60:f1:1a:cc:eb:8f:21:0a:6e:
                    b2:7b:13:30:a2:c5:7f:91:72:25:cc:10:99:e4:e2:
                    0d:0c:80:68:60:8d:59:2a:f3:df:c9:a5:86:0a:80:
                    7d:64:8d:9f:90:21:be:55:9e:61:87:a7:22:da:4e:
                    58:29:51:4f:fb:23:08:f3:de:07:4c:6e:e4:36:19:
                    a5:57:b4:66:29:03:b0:dc:42:03:3b:52:cd:5a:e4:
                    58:6f:8c:8f:58:ab:e9:0d:bc:ff:77:d9:9d:df:ba:
                    b8:5c:09:04:6a:07:57:75:8e:32:52:e3:be:5c:6a:
                    ad:f7:b8:72:fc:d1:ae:f0:f8:e4:3f:95:c3:3b:ff:
                    9b:e2:d8:25:49:e2:fa:4b:f6:14:54:96:22:32:98:
                    f0:74:1e:76:75:bf:c4:2c:57:00:cc:0b:1e:eb:ce:
                    26:58:97:6d:9b:ed:81:c8:95:38:02:a5:9a:43:28:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:9C:3A:4F:E3:79:D5:A7:69:4F:9B:87:C6:78:83:05:38:6D:91
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:28:99:32:ce:ff:04:44:b1:e2:67:f8:ff:92:2d:e3:09:b7:
         4e:e7:b2:40:65:b6:92:c3:97:7d:fc:8e:52:ae:c0:71:47:3f:
         91:f2:46:01:56:d0:25:95:9c:c5:dd:f8:e6:6e:de:bb:59:b3:
         f0:98:d7:d7:83:8d:0d:43:64:5e:27:a0:1a:63:b7:79:de:5f:
         ba:3c:cc:b2:38:cc:c5:db:48:f5:d7:c4:35:a9:6f:c2:04:3b:
         18:c3:51:8d:15:17:5e:59:de:70:2c:56:6f:37:25:1d:ce:23:
         79:e5:b5:8b:73:d9:9f:bb:f5:c6:f7:36:70:d6:45:51:23:11:
         a3:bd:3b:80:7a:f1:2c:d8:24:2e:8b:0c:0b:14:f1:b1:10:89:
         2b:0c:08:b8:5c:cc:72:e9:b6:54:43:84:34:44:26:27:1a:b9:
         96:01:4e:0b:d9:d9:62:f6:d4:e1:a7:fe:b5:94:c5:95:3d:5e:
         3a:37:e0:bd:4c:89:9e:6b:b3:6a:29:e0:14:52:d9:8b:20:05:
         55:72:fc:df:91:8f:60:20:05:03:5a:74:d2:07:83:6e:c0:f2:
         f4:fb:15:8a:37:6d:88:4a:bb:45:82:73:9d:26:2c:31:d6:8d:
         e1:7c:48:69:b7:5f:d2:a2:35:5d:ed:5b:d4:2a:7b:71:ad:d3:
         45:ea:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:30:29 2026 by rpki-client