
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier: pNW+FMece2P4F29TMMHaNFHPRuPug9uoxyNs26mgRGE=
Subject key identifier: 75:78:9C:A0:0F:79:91:EA:3A:5C:B2:5A:2D:99:79:9C:63:40:45:81
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 0969219E96D946A53BB6A48B45AF9B088A4F892F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number: 013A
Signing time: Thu 16 Apr 2026 03:51:39 +0000
Manifest this update: Thu 16 Apr 2026 03:46:39 +0000
Manifest next update: Sun 19 Apr 2026 14:34:39 +0000
Files and hashes: 1: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
2: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
3: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
4: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
5: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
6: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
7: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
8: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
9: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
10: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
11: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
12: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
13: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
14: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
15: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
16: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
17: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
18: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
19: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
20: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: h+yXqxUDnmIbbZfyE/mvhI4cbmOrxXKo2UodsdReAN8=)
21: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
22: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
23: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
24: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
25: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
26: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
27: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
28: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
29: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
30: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
31: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: SOe6CNGwh7AV/ME3NGZRGYorNCiEvzdLsEvnR8QiyAQ=)
32: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
33: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
34: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
35: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
36: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
37: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
38: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 14:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:69:21:9e:96:d9:46:a5:3b:b6:a4:8b:45:af:9b:08:8a:4f:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Apr 16 03:46:39 2026 GMT
Not After : Apr 19 14:34:39 2026 GMT
Subject: CN=75789CA00F7991EA3A5CB25A2D99799C63404581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:ac:b8:1a:18:72:99:80:ae:c6:0d:3c:aa:
05:c5:5b:7d:80:af:54:02:14:fd:fd:a4:0d:9d:da:
79:5b:01:41:fb:0d:fe:d8:8c:dd:4b:ad:88:f0:99:
a0:1f:40:d1:19:54:7e:77:c0:7f:c0:1a:44:96:22:
0c:b7:a3:57:a9:9f:d5:0a:0a:b9:d3:eb:d0:5f:18:
3c:60:b0:a7:27:32:94:0f:88:ec:25:5c:e9:ec:ec:
e9:89:31:e3:3a:2c:db:cb:04:d3:e2:10:61:f9:f3:
8e:23:e5:ef:49:a9:e3:9c:2f:59:93:18:9a:50:65:
a9:26:6b:5f:48:7a:7d:4f:38:24:2f:64:38:43:6c:
5f:63:1f:6a:32:a4:79:0a:d9:0c:7a:ad:ea:b4:13:
3a:e0:2b:15:20:52:c8:08:35:37:6c:4e:cc:b5:23:
ba:96:3b:ea:46:1f:8e:f3:0a:ff:3b:e1:25:8b:ef:
2a:33:1d:7e:03:62:ed:de:87:3e:c7:e8:53:45:af:
72:49:1a:82:15:44:b7:ad:37:3c:f1:02:b9:3e:b2:
46:0e:2a:4d:f1:26:1f:5f:29:07:87:27:47:2d:00:
77:28:4c:64:d1:23:d3:01:24:04:69:a0:c4:7a:6b:
59:ea:a9:9b:67:69:06:29:f1:65:b5:c3:0a:24:5a:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:78:9C:A0:0F:79:91:EA:3A:5C:B2:5A:2D:99:79:9C:63:40:45:81
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:11:5f:bb:85:41:a6:ff:f3:79:53:53:49:d4:9b:81:e1:
a1:5d:eb:e0:f8:ab:65:e9:e4:ef:3e:c9:15:d4:b9:e4:15:a8:
f6:ff:ea:d6:dc:cf:8a:07:fd:4b:41:d3:f7:07:03:d7:18:7e:
30:8a:16:c6:1c:fe:d7:f8:64:ec:6d:8d:23:ca:70:52:1a:17:
5d:83:c3:b8:d1:1e:49:ca:20:26:80:8f:6b:39:f2:99:f3:f4:
40:8f:64:35:3a:5a:9b:75:71:4c:03:9d:2d:17:69:a0:b2:96:
ea:75:11:ca:c2:1a:51:39:fb:9a:e7:cc:75:63:95:78:7e:77:
77:fd:9c:2e:74:16:ec:de:8f:3c:a3:a1:9b:30:08:6c:91:a2:
78:1a:17:c5:17:cd:81:cc:6b:7d:77:4d:c1:5c:d4:ff:fc:9e:
7e:1f:73:b1:b1:5d:30:f9:56:f0:51:6f:9e:08:a9:50:25:70:
f5:68:85:73:02:eb:40:6e:6d:fb:0c:8f:0f:cd:6e:c9:50:90:
d1:84:53:3a:29:86:64:a4:9d:db:ea:c6:29:55:2d:6d:5f:05:
d0:34:4c:d5:e8:77:c0:07:74:06:f0:35:38:7d:91:3e:84:11:
dd:6f:4d:0a:e4:24:6f:33:20:48:a3:6a:3b:57:11:a1:a5:0c:
da:af:3d:66
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCWkhnpbZRqU7tqSLRa+bCIpPiS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4
QzFENTE1ODAeFw0yNjA0MTYwMzQ2MzlaFw0yNjA0MTkxNDM0MzlaMDMxMTAvBgNV
BAMTKDc1Nzg5Q0EwMEY3OTkxRUEzQTVDQjI1QTJEOTk3OTlDNjM0MDQ1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbb6y4GhhymYCuxg08qgXFW32A
r1QCFP39pA2d2nlbAUH7Df7YjN1LrYjwmaAfQNEZVH53wH/AGkSWIgy3o1epn9UK
CrnT69BfGDxgsKcnMpQPiOwlXOns7OmJMeM6LNvLBNPiEGH5844j5e9JqeOcL1mT
GJpQZakma19Ien1POCQvZDhDbF9jH2oypHkK2Qx6req0EzrgKxUgUsgINTdsTsy1
I7qWO+pGH47zCv874SWL7yozHX4DYu3ehz7H6FNFr3JJGoIVRLetNzzxArk+skYO
Kk3xJh9fKQeHJ0ctAHcoTGTRI9MBJARpoMR6a1nqqZtnaQYp8WW1wwokWsWpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdXicoA95keo6XLJaLZl5nGNARYEwHwYDVR0j
BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy
MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE
NTE1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm
OTYtNjNkMzcyMDMxMWRlLzEvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NC
MDQ4QzFENTE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACZPEV+7hUGm//N5U1NJ1JuB4aFd6+D4q2Xp
5O8+yRXUueQVqPb/6tbcz4oH/UtB0/cHA9cYfjCKFsYc/tf4ZOxtjSPKcFIaF12D
w7jRHknKICaAj2s58pnz9ECPZDU6Wpt1cUwDnS0XaaCylup1EcrCGlE5+5rnzHVj
lXh+d3f9nC50FuzejzyjoZswCGyRongaF8UXzYHMa313TcFc1P/8nn4fc7GxXTD5
VvBRb54IqVAlcPVohXMC60BubfsMjw/NbslQkNGEUzophmSkndvqxilVLW1fBdA0
TNXod8AHdAbwNTh9kT6EEd1vTQrkJG8zIEijajtXEaGlDNqvPWY=
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:54 2026 by rpki-client