$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: 7amXJ+FEJdmaOk8+QRoknUhSvkeiHKNwsIMAlB3HKqs= Subject key identifier: 80:B0:08:42:C7:67:40:D0:C1:99:63:06:7D:C1:34:79:74:73:21:D1 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 3F8F663871272DBDBDE4DA59682ADE0B66BF6A60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 0204 Signing time: Wed 02 Jul 2025 07:01:12 +0000 Manifest this update: Wed 02 Jul 2025 06:56:12 +0000 Manifest next update: Sat 05 Jul 2025 15:45:12 +0000 Files and hashes: 1: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: edq1Kq8e2JKD6GdfePbjWPnqNj9WlFwvWZT9QKPjH58=) 2: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 3: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 4: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 5: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 6: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 7: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 8: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 9: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 10: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) 11: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 12: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 13: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 14: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 15: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 16: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 17: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 18: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 19: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8f:66:38:71:27:2d:bd:bd:e4:da:59:68:2a:de:0b:66:bf:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jul 2 06:56:12 2025 GMT Not After : Jul 5 15:45:12 2025 GMT Subject: CN=80B00842C76740D0C19963067DC13479747321D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:ef:f1:f8:2e:c6:85:a1:41:22:82:30:7a: d6:33:b0:fb:ac:b5:5f:0d:90:32:60:03:45:91:7f: 97:e1:b2:5e:25:ae:dc:0d:29:d7:20:a4:3f:b0:57: b3:95:d3:d8:e4:47:79:ae:43:ef:9f:b0:19:35:ee: 41:57:f1:dd:be:ae:ce:80:26:13:6d:f5:34:de:49: 0b:65:3e:9a:2c:d8:61:e0:d1:48:a6:c8:c6:7a:bb: 57:8b:64:98:94:9d:82:1e:49:17:bc:82:61:72:8c: 55:81:23:7f:e6:72:86:6f:4d:99:d8:0f:57:da:81: 41:a8:15:4f:80:d0:40:e2:2c:6d:a5:42:4f:bb:bd: 7d:9d:2d:aa:ac:64:d9:67:c6:0a:26:50:0b:cc:18: af:85:39:5b:31:31:43:4f:24:de:39:fd:0e:76:33: 60:a9:7b:ee:5c:28:97:3a:c7:de:19:b2:a8:d9:84: c9:6f:b9:23:64:57:a2:51:89:7c:40:0f:e8:e5:15: 60:bf:39:9e:aa:40:aa:fd:f5:88:b7:8b:7f:ca:3c: d6:50:8a:06:6a:a6:01:9e:89:a5:50:09:4b:94:3b: 7a:bb:a9:82:9e:91:68:7e:35:a6:3d:7e:3a:b8:c6: d4:9e:89:cf:4b:f7:07:d7:20:94:2c:33:d2:21:15: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B0:08:42:C7:67:40:D0:C1:99:63:06:7D:C1:34:79:74:73:21:D1 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:01:ce:66:63:95:73:ed:a6:6f:2c:d2:cf:34:4f:8d:73:39: 56:90:ab:56:02:7b:cf:8f:8c:52:cd:db:52:da:ae:6e:eb:f5: 78:14:a8:88:84:78:f3:71:56:d4:72:31:8b:15:ca:01:1d:20: 6b:01:4b:f2:2e:54:f9:40:fc:25:d2:0f:92:5b:6e:71:a5:24: be:04:0d:3e:dc:c1:2a:3a:0c:69:ea:b4:1f:ca:e5:3b:d6:9c: b3:d6:3f:43:71:ac:71:c5:a6:d7:d5:50:eb:55:6b:dd:6e:fa: f6:c0:71:ca:ad:7b:6c:73:49:f8:6e:d3:8e:a3:ce:c8:18:7d: 90:98:74:70:ce:6d:df:43:29:2f:49:31:0d:7d:34:18:e8:44: 40:89:27:bc:4c:fd:8d:d2:f2:31:ea:31:88:26:b6:ed:38:ee: 0b:48:9a:ba:36:ea:fa:fe:82:43:31:d7:fd:b7:39:86:40:f7: 7c:3a:02:b4:e2:8c:a5:09:71:91:5c:20:f4:ee:d7:6b:15:93: d2:61:d0:f3:d8:cc:9f:31:64:be:8a:3c:51:cd:33:6b:31:08: b5:83:9b:7e:0d:9d:be:81:d4:38:d2:e2:5a:97:ad:50:7c:f7: 52:87:2e:42:7f:f5:8e:b7:3f:b1:c4:1f:4a:fc:e1:eb:7b:a5: 63:83:f3:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP49mOHEnLb295NpZaCreC2a/amAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA3MDIwNjU2MTJaFw0yNTA3MDUxNTQ1MTJaMDMxMTAvBgNV BAMTKDgwQjAwODQyQzc2NzQwRDBDMTk5NjMwNjdEQzEzNDc5NzQ3MzIxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uu/x+C7GhaFBIoIwetYzsPus tV8NkDJgA0WRf5fhsl4lrtwNKdcgpD+wV7OV09jkR3muQ++fsBk17kFX8d2+rs6A JhNt9TTeSQtlPpos2GHg0UimyMZ6u1eLZJiUnYIeSRe8gmFyjFWBI3/mcoZvTZnY D1fagUGoFU+A0EDiLG2lQk+7vX2dLaqsZNlnxgomUAvMGK+FOVsxMUNPJN45/Q52 M2Cpe+5cKJc6x94ZsqjZhMlvuSNkV6JRiXxAD+jlFWC/OZ6qQKr99Yi3i3/KPNZQ igZqpgGeiaVQCUuUO3q7qYKekWh+NaY9fjq4xtSeic9L9wfXIJQsM9IhFfHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLAIQsdnQNDBmWMGfcE0eXRzIdEwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0BzmZjlXPtpm8s0s80T41zOVaQq1YCe8+P jFLN21Larm7r9XgUqIiEePNxVtRyMYsVygEdIGsBS/IuVPlA/CXSD5JbbnGlJL4E DT7cwSo6DGnqtB/K5TvWnLPWP0NxrHHFptfVUOtVa91u+vbAccqte2xzSfhu046j zsgYfZCYdHDObd9DKS9JMQ19NBjoRECJJ7xM/Y3S8jHqMYgmtu047gtImro26vr+ gkMx1/23OYZA93w6ArTijKUJcZFcIPTu12sVk9Jh0PPYzJ8xZL6KPFHNM2sxCLWD m34Nnb6B1DjS4lqXrVB891KHLkJ/9Y63P7HEH0r84et7pWOD88U= -----END CERTIFICATE-----Generated at Wed Jul 2 14:58:26 2025 by rpki-client