
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier: IYUFk6zjF0/oQv/9Oq/hD4pAnV6BFV4+hA5j8TqvrHY=
Subject key identifier: EB:65:DA:CD:7E:9D:C6:07:E0:E2:3A:D6:82:F0:2C:93:6D:AC:7F:CE
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 5F25A9D19F4BD4FAB685E4861283A1CD31F6672D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number: 013C
Signing time: Mon 20 Apr 2026 19:41:37 +0000
Manifest this update: Mon 20 Apr 2026 19:36:37 +0000
Manifest next update: Fri 24 Apr 2026 01:45:37 +0000
Files and hashes: 1: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
2: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
3: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
4: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
5: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
6: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
7: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
8: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
9: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
10: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
11: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
12: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
13: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
14: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
15: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: SOe6CNGwh7AV/ME3NGZRGYorNCiEvzdLsEvnR8QiyAQ=)
16: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
17: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
18: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
19: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
20: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
21: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: BkThGKq73/5/v5P6SRDGEI6ybTJllc7XsoRSg2Wub0o=)
22: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
23: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
24: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
25: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
26: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
27: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
28: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
29: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
30: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
31: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
32: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
33: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
34: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
35: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
36: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
37: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
38: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:25:a9:d1:9f:4b:d4:fa:b6:85:e4:86:12:83:a1:cd:31:f6:67:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Apr 20 19:36:37 2026 GMT
Not After : Apr 24 01:45:37 2026 GMT
Subject: CN=EB65DACD7E9DC607E0E23AD682F02C936DAC7FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:1c:64:0d:f0:ce:09:e0:91:8b:83:65:f7:
b8:0a:a7:99:14:a5:ba:e5:81:05:ef:99:53:ab:c7:
01:ba:90:75:14:00:91:d4:38:a6:89:30:47:d7:1f:
5e:55:d0:df:d8:58:4b:53:9f:fb:19:ab:64:dd:74:
6f:88:8e:26:54:b0:11:80:ab:44:cc:01:79:66:f8:
1f:c0:9d:d6:c8:ec:22:67:8f:0a:a4:a1:df:f8:3e:
09:9c:41:82:45:fa:a2:46:6d:fc:d3:1a:68:9c:79:
0e:00:f7:aa:ed:87:10:ba:52:a1:01:3c:44:fe:ae:
13:fd:35:3a:92:ba:fa:2b:37:9b:cc:37:37:c2:5c:
7e:0a:6e:ef:ca:05:83:d7:1d:02:47:d2:85:4f:cc:
e9:72:6f:1a:9b:42:d4:9f:89:fd:15:f3:61:d9:64:
11:ac:13:44:3c:b7:01:33:80:69:a5:4d:94:46:97:
4d:8e:75:75:e3:16:e3:41:e3:02:8e:2c:87:6d:e4:
0b:67:91:77:1a:50:2c:25:f8:c2:b2:51:0b:8c:02:
91:77:bf:78:6d:6e:f0:0a:32:fc:0e:b9:98:52:17:
0d:26:49:33:43:e6:21:8f:1e:33:65:35:c6:25:00:
00:fd:de:61:e4:c2:e8:b7:90:f0:e3:32:60:0a:c0:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:DA:CD:7E:9D:C6:07:E0:E2:3A:D6:82:F0:2C:93:6D:AC:7F:CE
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b2:54:41:e6:0f:e1:17:53:ff:fe:cb:1f:de:97:88:64:51:
94:20:c2:e3:c6:e1:93:63:ca:22:55:05:7e:d9:7d:e5:83:20:
57:70:bf:94:25:42:99:f5:ef:84:b5:74:d9:ab:1a:79:47:20:
6b:39:dd:47:30:8f:17:9d:c7:24:f5:19:f7:4d:51:50:d2:4e:
92:8f:ae:4a:d7:1a:db:42:3f:97:4f:34:73:d3:06:57:b6:c4:
3f:46:a9:85:ab:5b:81:49:30:fd:de:76:63:e5:d2:a8:5e:bb:
f8:d0:90:94:45:47:b8:96:00:82:b0:08:53:5c:a9:e3:0a:f1:
62:04:91:16:92:1b:33:cb:2e:fe:a6:e3:0d:31:21:e7:3f:81:
b9:40:c7:5e:00:99:43:8d:cc:a7:b5:dd:98:ad:e9:40:f3:db:
0f:18:f0:85:10:e9:a9:2d:d1:07:ad:33:63:cc:4a:99:42:ef:
f2:3b:50:44:b5:6c:4a:a0:04:5e:3c:12:3a:b2:6c:3d:fc:b7:
e9:e7:e5:2d:34:4e:ab:40:a2:c0:dc:dc:3d:14:e5:21:13:d7:
c3:d8:6d:f8:43:1e:f3:f1:39:ce:08:7f:e7:64:7a:cd:5a:f7:
e7:97:b9:7e:9c:1b:a0:c2:77:4a:5f:91:f6:88:74:71:6f:fc:
3f:c7:06:ff
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXyWp0Z9L1Pq2heSGEoOhzTH2Zy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4
QzFENTE1ODAeFw0yNjA0MjAxOTM2MzdaFw0yNjA0MjQwMTQ1MzdaMDMxMTAvBgNV
BAMTKEVCNjVEQUNEN0U5REM2MDdFMEUyM0FENjgyRjAyQzkzNkRBQzdGQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwBxkDfDOCeCRi4Nl97gKp5kU
pbrlgQXvmVOrxwG6kHUUAJHUOKaJMEfXH15V0N/YWEtTn/sZq2TddG+IjiZUsBGA
q0TMAXlm+B/AndbI7CJnjwqkod/4PgmcQYJF+qJGbfzTGmiceQ4A96rthxC6UqEB
PET+rhP9NTqSuvorN5vMNzfCXH4Kbu/KBYPXHQJH0oVPzOlybxqbQtSfif0V82HZ
ZBGsE0Q8twEzgGmlTZRGl02OdXXjFuNB4wKOLIdt5AtnkXcaUCwl+MKyUQuMApF3
v3htbvAKMvwOuZhSFw0mSTND5iGPHjNlNcYlAAD93mHkwui3kPDjMmAKwNVhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU62XazX6dxgfg4jrWgvAsk22sf84wHwYDVR0j
BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy
MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE
NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm
OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC
MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACWyVEHmD+EXU//+yx/el4hkUZQgwuPG4ZNj
yiJVBX7ZfeWDIFdwv5QlQpn174S1dNmrGnlHIGs53UcwjxedxyT1GfdNUVDSTpKP
rkrXGttCP5dPNHPTBle2xD9GqYWrW4FJMP3edmPl0qheu/jQkJRFR7iWAIKwCFNc
qeMK8WIEkRaSGzPLLv6m4w0xIec/gblAx14AmUONzKe13Zit6UDz2w8Y8IUQ6akt
0QetM2PMSplC7/I7UES1bEqgBF48EjqybD38t+nn5S00TqtAosDc3D0U5SET18PY
bfhDHvPxOc4If+dkes1a9+eXuX6cG6DCd0pfkfaIdHFv/D/HBv8=
-----END CERTIFICATE-----
Generated at Wed Apr 22 09:59:47 2026 by rpki-client