$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: 2IVPYmgrdCMLSh/UvECo/n+00vo/ThFScnGwRff+LJk= Subject key identifier: 91:17:44:DA:DE:E2:7D:F0:A6:4C:EF:90:E6:94:FD:B4:6F:D3:4B:DF Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 674E4400772208545895ECA0D1746A7BB08EC0CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 0240 Signing time: Mon 02 Mar 2026 03:41:40 +0000 Manifest this update: Mon 02 Mar 2026 03:36:40 +0000 Manifest next update: Thu 05 Mar 2026 08:26:40 +0000 Files and hashes: 1: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 2: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: c6yaO6fnqtPiksRqXCfu6P2Fpy8FIlspypH9tGaDGFw=) 3: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 4: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4e:44:00:77:22:08:54:58:95:ec:a0:d1:74:6a:7b:b0:8e:c0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Mar 2 03:36:40 2026 GMT Not After : Mar 5 08:26:40 2026 GMT Subject: CN=911744DADEE27DF0A64CEF90E694FDB46FD34BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c1:84:5b:e2:e0:0a:e2:23:76:66:9b:62:b6: 84:f6:ae:97:6a:cb:d0:cc:a1:2e:f2:88:dc:89:54: 44:50:e9:a2:02:0f:4c:d9:fe:7a:5f:c7:0a:0c:35: 78:fe:ed:25:d0:a1:c2:4c:d0:9e:b9:46:b0:4f:c1: b1:bf:54:8d:dd:1e:05:dc:5f:41:e3:c3:28:72:d8: 91:14:c8:62:8f:8f:b6:f1:62:93:74:da:bf:7e:29: 0e:f7:a1:e5:74:40:dd:9b:42:18:90:13:23:bf:b7: b9:9f:5d:4e:02:21:4f:0c:8d:62:ab:b2:ed:a5:24: f6:ee:26:21:3f:5b:0e:a9:c4:70:39:5f:52:f4:b2: 31:56:dd:4c:f1:8d:93:32:1c:96:2a:f2:8c:13:27: a2:02:f1:be:99:31:e5:71:b1:d4:2a:6a:e1:ba:0f: 05:9d:75:15:59:89:2f:3b:90:43:6f:07:91:1f:4c: 4c:e5:ad:0e:3e:df:3f:bb:32:ab:a1:d1:dd:1f:22: 57:27:5c:e9:05:37:97:68:3e:f2:58:b8:7e:c9:b2: 3d:51:6f:6b:77:5c:50:ec:ae:4c:9f:6e:f0:d4:fb: cf:dd:b6:43:f7:df:96:e8:da:e4:94:26:34:fc:fb: a4:38:6d:db:94:5f:17:ac:ca:6c:96:72:fb:b6:76: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:17:44:DA:DE:E2:7D:F0:A6:4C:EF:90:E6:94:FD:B4:6F:D3:4B:DF X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7b:50:0b:42:c9:60:8b:47:3e:62:83:96:58:32:b4:4f:4b: e4:e9:f1:44:b8:b5:83:7d:3d:46:9d:72:3e:b8:9a:52:c1:9f: c3:c7:9c:d6:0e:85:ae:bd:95:b4:41:ae:bd:84:92:ff:97:20: e5:bf:12:20:c0:f0:e7:15:07:70:69:6a:f0:8d:3f:32:c0:87: 43:a8:9a:2a:2f:04:df:8e:93:95:dc:46:e3:af:f7:b3:de:4f: 3c:fa:53:94:11:fc:34:98:68:58:d3:cf:14:06:af:66:6c:95: 11:0f:e9:ec:a3:0c:17:8a:b6:9c:21:41:35:a5:2b:dc:ba:cf: 12:40:42:f1:59:6e:2c:66:d9:a3:22:55:25:aa:60:a1:88:3b: 77:f4:70:61:9d:23:79:53:18:e0:8c:52:ab:31:a2:c3:89:4b: e1:8d:67:20:72:3b:34:b4:66:df:6c:34:41:b5:26:3a:36:35: 63:c1:27:73:2d:f5:40:dc:8d:fe:b4:50:93:6f:c4:a9:25:7b: e9:8b:1f:c6:18:da:4a:49:80:79:28:96:2f:47:fa:ff:b4:58: cf:63:b5:b8:15:c9:9b:96:65:6c:45:46:b6:00:68:87:fb:08: ea:b4:7d:de:c8:cd:95:e1:d2:b3:36:cc:3c:88:6e:57:a1:c9: 3a:0d:57:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ05EAHciCFRYleyg0XRqe7COwMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNjAzMDIwMzM2NDBaFw0yNjAzMDUwODI2NDBaMDMxMTAvBgNV BAMTKDkxMTc0NERBREVFMjdERjBBNjRDRUY5MEU2OTRGREI0NkZEMzRCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvwYRb4uAK4iN2ZptitoT2rpdq y9DMoS7yiNyJVERQ6aICD0zZ/npfxwoMNXj+7SXQocJM0J65RrBPwbG/VI3dHgXc X0Hjwyhy2JEUyGKPj7bxYpN02r9+KQ73oeV0QN2bQhiQEyO/t7mfXU4CIU8MjWKr su2lJPbuJiE/Ww6pxHA5X1L0sjFW3UzxjZMyHJYq8owTJ6IC8b6ZMeVxsdQqauG6 DwWddRVZiS87kENvB5EfTEzlrQ4+3z+7Mquh0d0fIlcnXOkFN5doPvJYuH7Jsj1R b2t3XFDsrkyfbvDU+8/dtkP335bo2uSUJjT8+6Q4bduUXxesymyWcvu2dst3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkRdE2t7iffCmTO+Q5pT9tG/TS98wHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl7UAtCyWCLRz5ig5ZYMrRPS+Tp8US4tYN9 PUadcj64mlLBn8PHnNYOha69lbRBrr2Ekv+XIOW/EiDA8OcVB3BpavCNPzLAh0Oo miovBN+Ok5XcRuOv97PeTzz6U5QR/DSYaFjTzxQGr2ZslREP6eyjDBeKtpwhQTWl K9y6zxJAQvFZbixm2aMiVSWqYKGIO3f0cGGdI3lTGOCMUqsxosOJS+GNZyByOzS0 Zt9sNEG1Jjo2NWPBJ3Mt9UDcjf60UJNvxKkle+mLH8YY2kpJgHkoli9H+v+0WM9j tbgVyZuWZWxFRrYAaIf7COq0fd7IzZXh0rM2zDyIblehyToNV0U= -----END CERTIFICATE-----Generated at Mon Mar 2 07:09:56 2026 by rpki-client