$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: Ha9l8Y2dLobaQhwvBDlhRJM2KhpXF1pZNMy75kMSMWo= Subject key identifier: FA:16:1C:AC:81:C1:C1:62:60:DB:11:EC:5E:02:27:C8:C6:D6:09:F9 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 18338C846902525FBB158A1B78D3E59977EF3F17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 021B Signing time: Thu 21 Aug 2025 15:11:13 +0000 Manifest this update: Thu 21 Aug 2025 15:06:13 +0000 Manifest next update: Sun 24 Aug 2025 21:20:13 +0000 Files and hashes: 1: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 2: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 3: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 4: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 5: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 6: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 7: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 8: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: tsuEtPod2G+T7FsKIsGPvUZY6CQLeic2GK+eklsmugw=) 9: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 10: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 11: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 12: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 13: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 14: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) 15: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 16: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 17: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 18: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 19: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:33:8c:84:69:02:52:5f:bb:15:8a:1b:78:d3:e5:99:77:ef:3f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Aug 21 15:06:13 2025 GMT Not After : Aug 24 21:20:13 2025 GMT Subject: CN=FA161CAC81C1C16260DB11EC5E0227C8C6D609F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:77:8b:4c:94:aa:66:ef:13:0c:7e:31:40: 54:9c:2d:12:86:18:ad:db:b1:f6:ae:9e:91:74:d2: 0b:a4:4a:eb:27:33:f5:4b:ba:cb:48:9f:ee:75:6d: dd:42:1e:4c:36:79:4d:06:dd:a8:0d:e7:9c:d2:dc: d6:95:4b:09:92:dc:cd:db:2c:59:3f:a4:0a:aa:25: d5:c7:a6:37:4f:8c:c0:eb:2a:47:ff:1a:88:4b:24: d9:40:85:78:a0:75:dd:10:4a:cf:22:69:8c:40:56: 25:c5:33:ed:41:37:e9:5a:86:eb:ed:fa:13:2e:98: d1:33:25:6f:de:9f:44:7e:a4:85:b1:58:d8:23:ee: 24:88:0f:99:e5:ed:7f:1a:84:e4:98:32:ad:01:d6: b7:39:27:21:33:0e:6a:59:61:b1:ac:d4:4a:49:15: 23:64:82:4e:5c:52:b7:89:c6:d2:b8:2c:dc:b3:05: 58:f4:1e:00:12:78:7f:73:5f:8d:e2:b3:e6:9b:b2: 05:87:f0:80:9b:5a:04:dd:6a:2d:8e:c6:3a:0a:46: 1b:0f:1a:3d:6c:9c:9d:2c:58:00:9b:44:ba:c4:ac: 66:df:eb:5f:7f:ca:09:49:89:87:d5:bd:d8:58:16: 1a:83:ed:a0:76:a0:bb:c4:32:60:4c:24:9d:ab:08: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:16:1C:AC:81:C1:C1:62:60:DB:11:EC:5E:02:27:C8:C6:D6:09:F9 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:37:a6:53:cf:02:1c:08:29:32:5d:77:84:fc:b2:f1:f6:28: 07:82:ba:f7:da:2b:13:7b:c6:88:8f:a3:03:19:26:1a:13:f7: e1:4e:61:8c:d5:59:ec:da:42:60:b0:2c:81:76:37:a7:01:bd: bb:f3:db:24:6f:05:e9:b2:20:1d:0f:04:f0:c1:2a:b7:b1:ff: cc:e6:e0:94:46:4a:2a:e8:60:bb:fd:a8:a1:cf:3b:74:39:29: 96:e7:47:b3:8c:7c:8f:e0:3c:ec:8f:fe:22:ee:63:ab:82:e5: d7:8a:51:4b:60:26:18:1e:1f:11:70:4b:0e:30:a8:9e:8d:8b: d4:dc:2f:68:6f:9f:64:a4:19:71:2c:d3:e8:a1:d2:52:5a:4d: f5:25:90:31:ec:fc:97:98:e0:3b:03:6b:49:75:2e:b4:ba:9c: 8e:91:6a:ed:e3:a2:56:53:a1:ae:bd:e8:b2:01:ba:97:ac:d6: 81:03:1c:b5:88:0d:0a:e4:82:15:99:4e:0f:a3:de:6d:58:c7: 9f:8d:82:70:58:5b:d8:e8:d9:23:b7:e8:92:25:c5:93:fa:07: 19:1f:50:32:2c:0a:c0:d1:61:5e:6d:f7:86:9d:e7:f5:78:b7: b7:72:86:38:75:4c:d1:96:92:57:ae:33:8f:cc:be:d1:33:0d: d4:b5:f9:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDOMhGkCUl+7FYobeNPlmXfvPxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA4MjExNTA2MTNaFw0yNTA4MjQyMTIwMTNaMDMxMTAvBgNV BAMTKEZBMTYxQ0FDODFDMUMxNjI2MERCMTFFQzVFMDIyN0M4QzZENjA5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcXeLTJSqZu8TDH4xQFScLRKG GK3bsfaunpF00gukSusnM/VLustIn+51bd1CHkw2eU0G3agN55zS3NaVSwmS3M3b LFk/pAqqJdXHpjdPjMDrKkf/GohLJNlAhXigdd0QSs8iaYxAViXFM+1BN+lahuvt +hMumNEzJW/en0R+pIWxWNgj7iSID5nl7X8ahOSYMq0B1rc5JyEzDmpZYbGs1EpJ FSNkgk5cUreJxtK4LNyzBVj0HgASeH9zX43is+absgWH8ICbWgTdai2OxjoKRhsP Gj1snJ0sWACbRLrErGbf619/yglJiYfVvdhYFhqD7aB2oLvEMmBMJJ2rCGTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+hYcrIHBwWJg2xHsXgInyMbWCfkwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH83plPPAhwIKTJdd4T8svH2KAeCuvfaKxN7 xoiPowMZJhoT9+FOYYzVWezaQmCwLIF2N6cBvbvz2yRvBemyIB0PBPDBKrex/8zm 4JRGSiroYLv9qKHPO3Q5KZbnR7OMfI/gPOyP/iLuY6uC5deKUUtgJhgeHxFwSw4w qJ6Ni9TcL2hvn2SkGXEs0+ih0lJaTfUlkDHs/JeY4DsDa0l1LrS6nI6Rau3jolZT oa696LIBupes1oEDHLWIDQrkghWZTg+j3m1Yx5+NgnBYW9jo2SO36JIlxZP6Bxkf UDIsCsDRYV5t94ad5/V4t7dyhjh1TNGWkleuM4/MvtEzDdS1+Yo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:38 2025 by rpki-client