$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: 1VKCKLJ0pI9feG26cz1/wY4v9lJKM9RpyKhx/dptEgQ= Subject key identifier: 8F:41:D3:D2:DB:A5:9F:C4:98:17:8F:7B:D1:01:01:53:EB:39:D5:17 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 2CE4633597F3CB9A2872784ED72D8AA67030DB42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 0235 Signing time: Sun 19 Oct 2025 17:21:14 +0000 Manifest this update: Sun 19 Oct 2025 17:16:14 +0000 Manifest next update: Thu 23 Oct 2025 04:19:14 +0000 Files and hashes: 1: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 2: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 3: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 4: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 5: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 6: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 7: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 8: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 9: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 10: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 11: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: riQokUqN+acXB7cXScEVacxt9qorvGTJtSQS+J21Ilg=) 12: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 13: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 14: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 15: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 16: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 17: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 18: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 19: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e4:63:35:97:f3:cb:9a:28:72:78:4e:d7:2d:8a:a6:70:30:db:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Oct 19 17:16:14 2025 GMT Not After : Oct 23 04:19:14 2025 GMT Subject: CN=8F41D3D2DBA59FC498178F7BD1010153EB39D517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:56:a5:f5:12:72:93:8e:83:14:31:74:5f: 00:c8:d6:ed:3f:bc:ca:28:e3:92:14:65:52:e1:dd: 48:39:a3:60:33:74:06:de:7e:27:e4:9b:4c:84:ee: 02:f9:57:39:44:38:4b:02:b0:2b:b5:44:ab:a7:2a: aa:07:7d:84:1f:ca:f1:48:41:c1:ee:09:f1:11:4c: 88:1a:36:ab:a0:b9:07:40:5b:3c:59:a9:8b:3d:fb: 15:4b:e2:62:66:0b:76:29:32:8d:93:31:a1:f4:1b: f1:a8:62:a7:f0:d7:01:b0:3d:d8:b1:bc:21:a7:aa: 74:cd:44:6b:75:98:80:98:75:d3:e7:a6:4f:40:81: 9a:de:6a:ad:eb:5e:ba:c2:90:ab:8f:4c:3a:6d:99: a4:cb:44:6c:f1:5e:dc:68:ec:e7:2a:cb:f3:6c:7d: 59:85:f0:db:c9:8e:2c:26:eb:ba:2d:8d:50:a5:db: de:56:00:48:2f:7e:34:6b:7c:d2:23:7f:2b:a9:c5: 7c:83:56:71:0d:66:86:3f:f0:53:47:3e:d4:4c:54: 4d:15:b0:ec:55:7a:24:56:fa:3c:0f:7c:42:7e:9f: 59:fb:c0:93:ce:5b:3c:a1:a2:7b:c0:46:34:74:fd: a5:50:09:5f:be:52:5c:ed:d1:52:6f:8a:a9:3b:90: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:D3:D2:DB:A5:9F:C4:98:17:8F:7B:D1:01:01:53:EB:39:D5:17 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:81:60:d3:ff:1d:22:f1:99:49:bf:ae:0a:94:37:e8:e5:40: 22:4c:c5:d4:0a:91:fd:93:c0:0a:5a:08:7b:d5:f7:e6:6d:6e: a0:f3:62:c9:42:2b:ab:33:71:6e:38:32:14:65:71:82:38:ac: c0:6b:c3:3a:30:fc:fc:d9:95:a1:35:1a:5b:b3:88:31:2a:41: 01:ac:e6:5e:c3:09:74:5d:a0:ff:23:50:2d:9d:6a:df:57:20: 60:fa:12:64:89:81:15:9e:df:5b:c1:d3:56:93:ff:24:11:11: 1e:6a:35:3c:20:5c:78:89:75:86:4e:09:63:69:fd:11:f3:62: a5:ea:35:26:2a:d1:2d:b5:1c:fa:70:e9:ee:9f:62:d7:9e:4b: 1b:19:f7:52:b3:a9:ea:df:a9:93:49:c1:16:5d:3a:c6:82:2c: 1f:4e:56:a2:55:4f:07:f0:a0:89:84:3d:64:ef:4b:f8:3d:93: 75:19:06:c2:d2:60:bb:c8:03:4b:70:90:a3:7a:cd:a9:40:6f: 91:1f:82:e8:76:35:0b:c8:33:9a:52:8d:35:b0:e5:c9:9b:bb: 6b:e4:f8:dd:55:74:11:48:20:04:54:39:d7:65:51:93:b1:ae: 99:ee:9f:f2:1f:b3:f1:f1:cc:af:33:1e:a8:f1:aa:f7:5c:c1: a9:e9:6a:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULORjNZfzy5oocnhO1y2KpnAw20IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTEwMTkxNzE2MTRaFw0yNTEwMjMwNDE5MTRaMDMxMTAvBgNV BAMTKDhGNDFEM0QyREJBNTlGQzQ5ODE3OEY3QkQxMDEwMTUzRUIzOUQ1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIVal9RJyk46DFDF0XwDI1u0/ vMoo45IUZVLh3Ug5o2AzdAbefifkm0yE7gL5VzlEOEsCsCu1RKunKqoHfYQfyvFI QcHuCfERTIgaNquguQdAWzxZqYs9+xVL4mJmC3YpMo2TMaH0G/GoYqfw1wGwPdix vCGnqnTNRGt1mICYddPnpk9AgZreaq3rXrrCkKuPTDptmaTLRGzxXtxo7Ocqy/Ns fVmF8NvJjiwm67otjVCl295WAEgvfjRrfNIjfyupxXyDVnENZoY/8FNHPtRMVE0V sOxVeiRW+jwPfEJ+n1n7wJPOWzyhonvARjR0/aVQCV++Ulzt0VJviqk7kBvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj0HT0tuln8SYF4970QEBU+s51RcwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmBYNP/HSLxmUm/rgqUN+jlQCJMxdQKkf2T wApaCHvV9+ZtbqDzYslCK6szcW44MhRlcYI4rMBrwzow/PzZlaE1GluziDEqQQGs 5l7DCXRdoP8jUC2dat9XIGD6EmSJgRWe31vB01aT/yQRER5qNTwgXHiJdYZOCWNp /RHzYqXqNSYq0S21HPpw6e6fYteeSxsZ91KzqerfqZNJwRZdOsaCLB9OVqJVTwfw oImEPWTvS/g9k3UZBsLSYLvIA0twkKN6zalAb5Efguh2NQvIM5pSjTWw5cmbu2vk +N1VdBFIIARUOddlUZOxrpnun/Ifs/HxzK8zHqjxqvdcwanpagA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:49 2025 by rpki-client