$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: h+u/fOgYagaiJ0ILrU1eKTxY0vL7ICP5s3mImTho/ls= Subject key identifier: E6:D6:47:8E:17:8A:A7:E1:E4:09:E0:08:B1:E2:84:D6:8E:41:CC:0A Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 7D041D88859A5611C3E1DA4BB328407862507EDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 0254 Signing time: Thu 16 Apr 2026 22:11:42 +0000 Manifest this update: Thu 16 Apr 2026 22:06:42 +0000 Manifest next update: Mon 20 Apr 2026 08:13:42 +0000 Files and hashes: 1: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: xgTim1JGcH8qSo+MXzyONfwzFAujwts4PZHjuk1s9lo=) 2: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 3: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) 4: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:1d:88:85:9a:56:11:c3:e1:da:4b:b3:28:40:78:62:50:7e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Apr 16 22:06:42 2026 GMT Not After : Apr 20 08:13:42 2026 GMT Subject: CN=E6D6478E178AA7E1E409E008B1E284D68E41CC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3e:f9:e6:5a:2b:ea:56:a7:d3:2e:7a:b2:9a: d1:40:c5:23:ee:63:f0:8c:65:68:bf:fd:00:88:60: cc:a6:16:4a:63:4c:94:98:c3:2a:d0:92:db:d9:23: eb:76:12:8e:db:33:4f:a2:4a:c4:11:61:7a:da:7e: 5b:89:2d:24:48:bf:17:5a:fa:68:f4:23:97:3b:55: 74:3d:ed:b5:ae:3c:d4:b2:6f:06:2b:51:67:c4:b6: 1f:06:ba:ed:58:00:47:96:ec:26:65:b4:c9:b2:11: 5c:16:49:ca:4d:89:ee:00:57:ce:98:4f:15:bd:bd: a6:50:e7:14:20:d5:6d:04:6c:43:83:6e:d2:fa:35: ad:ae:86:de:10:b3:96:9c:1c:2a:29:16:3d:25:6f: 0b:11:ce:d1:53:2b:ab:db:42:65:09:6f:1d:55:c9: 0d:92:1e:87:4f:d1:17:12:a9:62:75:95:31:50:5a: 53:1f:f3:ca:55:dc:08:fb:1f:a4:b4:cb:bc:f0:3b: cd:0d:c9:56:0e:78:8d:a8:3e:0f:ba:f4:33:1e:74: 2a:d5:54:16:45:31:13:5a:1d:88:ee:f7:24:c3:0a: c8:b4:31:84:1b:6c:d8:b9:21:01:a8:30:1b:5d:31: c7:65:96:ea:d1:d7:91:7f:82:98:fd:a5:d6:2b:84: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D6:47:8E:17:8A:A7:E1:E4:09:E0:08:B1:E2:84:D6:8E:41:CC:0A X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0b:68:63:81:46:30:94:f4:80:4f:48:ca:da:3d:c5:85:bb: b9:5c:0a:ab:84:ce:bb:b9:fb:07:93:75:b7:f9:62:56:aa:41: 9e:12:8d:7f:83:09:a8:b6:97:5d:9c:30:da:e7:9f:17:1d:77: 97:7a:ca:5b:6f:81:c9:a0:34:8c:ae:78:05:db:be:01:d8:ae: fb:1a:7b:e7:a9:b2:af:9a:60:b1:20:fc:ad:f2:1f:d6:fb:11: 28:7e:a8:94:c8:8d:ea:b8:3b:16:a8:1b:24:93:d8:67:68:dc: ea:9c:6d:a0:b6:b6:d2:0b:3d:19:8a:33:63:a0:a0:d7:41:c9: 5a:a6:ee:62:82:f8:75:be:ae:ad:7d:83:d4:b6:5d:ca:ee:e4: 6c:a6:0c:25:c7:73:f8:94:36:e3:b4:83:f1:b2:cc:c6:dc:61: 97:d4:10:20:46:77:19:07:0a:5c:f6:90:56:3c:ea:98:0d:28: 98:52:b4:dd:01:7e:e6:20:0a:99:d4:d3:04:4d:eb:e8:be:f9: 74:4e:4c:fb:d5:85:dd:b1:24:b6:23:c5:84:a9:84:7b:b0:ce: 5c:f0:72:12:8d:3f:8f:70:16:be:9c:56:bd:a2:d1:33:43:37: da:3a:60:40:18:d1:32:d6:92:33:dd:d0:0d:1c:0f:ed:4b:85: 7a:b8:7b:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQQdiIWaVhHD4dpLsyhAeGJQftswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNjA0MTYyMjA2NDJaFw0yNjA0MjAwODEzNDJaMDMxMTAvBgNV BAMTKEU2RDY0NzhFMTc4QUE3RTFFNDA5RTAwOEIxRTI4NEQ2OEU0MUNDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2PvnmWivqVqfTLnqymtFAxSPu Y/CMZWi//QCIYMymFkpjTJSYwyrQktvZI+t2Eo7bM0+iSsQRYXrafluJLSRIvxda +mj0I5c7VXQ97bWuPNSybwYrUWfEth8Guu1YAEeW7CZltMmyEVwWScpNie4AV86Y TxW9vaZQ5xQg1W0EbEODbtL6Na2uht4Qs5acHCopFj0lbwsRztFTK6vbQmUJbx1V yQ2SHodP0RcSqWJ1lTFQWlMf88pV3Aj7H6S0y7zwO80NyVYOeI2oPg+69DMedCrV VBZFMRNaHYju9yTDCsi0MYQbbNi5IQGoMBtdMcdllurR15F/gpj9pdYrhP5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5tZHjheKp+HkCeAIseKE1o5BzAowHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJULaGOBRjCU9IBPSMraPcWFu7lcCquEzru5 +weTdbf5YlaqQZ4SjX+DCai2l12cMNrnnxcdd5d6yltvgcmgNIyueAXbvgHYrvsa e+epsq+aYLEg/K3yH9b7ESh+qJTIjeq4OxaoGyST2Gdo3OqcbaC2ttILPRmKM2Og oNdByVqm7mKC+HW+rq19g9S2Xcru5GymDCXHc/iUNuO0g/GyzMbcYZfUECBGdxkH Clz2kFY86pgNKJhStN0BfuYgCpnU0wRN6+i++XROTPvVhd2xJLYjxYSphHuwzlzw chKNP49wFr6cVr2i0TNDN9o6YEAY0TLWkjPd0A0cD+1LhXq4e64= -----END CERTIFICATE-----Generated at Fri Apr 17 12:14:34 2026 by rpki-client