$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json) Hash identifier: yqZy8k+X4QPBJvVUZrv4uWd7iqUklcsTuyOjMc8BERA= Subject key identifier: 66:D8:D4:0A:86:98:8C:32:47:57:DE:3D:D0:8D:3D:FB:42:61:76:35 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 399635E11508DC3F9B1812870CE9994CF49C2F3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft Manifest number: 0130 Signing time: Tue 24 Mar 2026 02:41:34 +0000 Manifest this update: Tue 24 Mar 2026 02:36:34 +0000 Manifest next update: Fri 27 Mar 2026 11:33:34 +0000 Files and hashes: 1: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=) 2: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=) 3: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=) 4: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: SOe6CNGwh7AV/ME3NGZRGYorNCiEvzdLsEvnR8QiyAQ=) 5: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=) 6: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=) 7: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=) 8: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=) 9: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=) 10: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=) 11: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=) 12: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=) 13: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=) 14: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=) 15: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=) 16: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=) 17: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=) 18: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=) 19: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=) 20: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=) 21: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=) 22: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=) 23: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=) 24: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=) 25: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=) 26: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=) 27: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=) 28: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=) 29: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: ceOZamXerL4EtFnzZhJ8VSIufjDh+9fgKvcHhSBGqKc=) 30: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=) 31: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=) 32: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=) 33: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=) 34: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=) 35: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=) 36: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=) 37: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=) 38: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:96:35:e1:15:08:dc:3f:9b:18:12:87:0c:e9:99:4c:f4:9c:2f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Mar 24 02:36:34 2026 GMT Not After : Mar 27 11:33:34 2026 GMT Subject: CN=66D8D40A86988C324757DE3DD08D3DFB42617635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:02:75:dc:54:1d:4a:78:d5:dd:74:b7:6a: 1d:b8:e0:a9:ed:05:1f:47:2c:22:29:94:df:9d:2e: 2b:93:77:43:2e:56:20:9d:1e:5a:85:78:a2:af:43: c7:d7:37:83:45:fd:50:86:0f:40:01:47:43:2a:7c: d0:16:63:f9:48:55:5d:22:d2:b7:e5:0a:76:30:76: 36:fb:ca:d7:94:f2:b5:f0:f5:87:93:8f:ee:3c:db: cb:2c:9b:16:cc:08:4f:8c:fd:96:4a:da:a9:27:19: 58:9b:34:42:4c:2c:77:4c:ac:6d:d6:34:b2:a9:d8: 40:34:3d:22:09:d7:ce:6f:4b:f2:d8:42:b6:8f:49: d0:41:58:7d:c6:91:ce:39:7e:b0:d8:1e:03:f7:a7: 4d:19:99:28:9b:95:ed:d3:0d:a8:b1:c8:cf:d5:df: e3:c0:3b:68:da:5e:bc:8c:20:e2:13:2d:5f:bf:1f: 1c:74:89:a9:ee:8d:fc:b6:40:ed:87:f8:45:21:8c: 7e:bf:1f:49:73:1f:73:1b:95:bf:e7:eb:ad:4d:1d: 7a:b7:b5:c7:35:84:21:e8:bb:97:b3:8e:e5:c0:39: 83:3c:8f:30:7d:e5:3c:a5:55:d8:10:a1:e6:fa:7e: 96:41:11:94:8f:e8:21:36:f7:95:48:ad:06:62:ab: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D8:D4:0A:86:98:8C:32:47:57:DE:3D:D0:8D:3D:FB:42:61:76:35 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3a:c1:cf:47:c8:08:41:cc:9e:98:f3:b0:82:52:9f:f1:ad: 5c:a7:14:f9:ef:b9:2f:22:df:04:3e:00:9e:c9:52:5a:51:22: 21:04:14:8c:f3:fa:1d:26:c3:da:e3:c1:07:6a:19:8b:cd:94: 52:f5:48:f2:e7:b3:24:67:b7:92:d1:18:f9:6e:ef:c4:47:36: b9:8c:f1:3a:73:86:fc:f3:59:37:63:b1:56:06:8d:c5:56:a9: ad:e6:86:0e:1d:c3:df:d6:86:c1:a2:8e:25:5d:84:a0:af:89: ca:9a:fa:59:30:ca:6f:8e:a0:f3:07:fe:ee:b6:78:38:20:fc: 67:3c:a7:02:44:c4:4d:a9:4f:f2:67:d8:9a:b5:85:d1:9d:4d: 02:d6:89:a1:e8:20:7c:d6:46:cf:77:39:45:f8:12:75:11:56: b1:f6:ca:fd:ba:f5:43:03:0c:7c:11:d1:7c:2e:4e:c6:dd:d7: b5:b7:22:7c:3f:e7:3d:92:5a:73:a5:fc:64:fa:37:23:1e:b7: 82:56:c5:00:d4:e1:1d:f3:c2:bd:c8:0f:8a:02:33:f6:48:78: 7e:6a:be:65:bb:56:5f:d6:d5:b1:c7:c7:8c:d7:37:7c:b0:69: b2:78:7a:43:a5:c4:97:7d:cc:19:d9:dc:5e:97:3e:e2:44:ad: 0b:79:76:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZY14RUI3D+bGBKHDOmZTPScLzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNjAzMjQwMjM2MzRaFw0yNjAzMjcxMTMzMzRaMDMxMTAvBgNV BAMTKDY2RDhENDBBODY5ODhDMzI0NzU3REUzREQwOEQzREZCNDI2MTc2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRQJ13FQdSnjV3XS3ah244Knt BR9HLCIplN+dLiuTd0MuViCdHlqFeKKvQ8fXN4NF/VCGD0ABR0MqfNAWY/lIVV0i 0rflCnYwdjb7yteU8rXw9YeTj+4828ssmxbMCE+M/ZZK2qknGVibNEJMLHdMrG3W NLKp2EA0PSIJ185vS/LYQraPSdBBWH3Gkc45frDYHgP3p00ZmSible3TDaixyM/V 3+PAO2jaXryMIOITLV+/Hxx0ianujfy2QO2H+EUhjH6/H0lzH3Mblb/n661NHXq3 tcc1hCHou5ezjuXAOYM8jzB95TylVdgQoeb6fpZBEZSP6CE295VIrQZiq8kNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZtjUCoaYjDJHV9490I09+0JhdjUwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY6wc9HyAhBzJ6Y87CCUp/xrVynFPnvuS8i 3wQ+AJ7JUlpRIiEEFIzz+h0mw9rjwQdqGYvNlFL1SPLnsyRnt5LRGPlu78RHNrmM 8TpzhvzzWTdjsVYGjcVWqa3mhg4dw9/WhsGijiVdhKCvicqa+lkwym+OoPMH/u62 eDgg/Gc8pwJExE2pT/Jn2Jq1hdGdTQLWiaHoIHzWRs93OUX4EnURVrH2yv269UMD DHwR0XwuTsbd17W3Inw/5z2SWnOl/GT6NyMet4JWxQDU4R3zwr3ID4oCM/ZIeH5q vmW7Vl/W1bHHx4zXN3ywabJ4ekOlxJd9zBnZ3F6XPuJErQt5dvk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:49 2026 by rpki-client