$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: fYSBcIBSmGZhiN917QeUMLIH9M51pgtZvlEgtl8y1ok= Subject key identifier: 71:2B:E6:E5:F1:11:F1:EE:80:7F:42:4B:6F:AA:DD:7C:2C:78:E3:52 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 320BDEEEC254B18CA8D3154D95F6D641698929DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 0221 Signing time: Thu 04 Sep 2025 06:21:13 +0000 Manifest this update: Thu 04 Sep 2025 06:16:13 +0000 Manifest next update: Sun 07 Sep 2025 14:14:13 +0000 Files and hashes: 1: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 2: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 3: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 4: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 5: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 6: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 7: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 8: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 9: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 10: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) 11: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 12: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 13: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 14: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 15: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 16: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 17: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 18: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 19: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: ETG7isxvdgWVubDKiXORLsBMx751kamWzJvFqCud+8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0b:de:ee:c2:54:b1:8c:a8:d3:15:4d:95:f6:d6:41:69:89:29:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Sep 4 06:16:13 2025 GMT Not After : Sep 7 14:14:13 2025 GMT Subject: CN=712BE6E5F111F1EE807F424B6FAADD7C2C78E352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:bf:8c:a4:a0:4c:3c:e3:c2:24:30:0b:b2: 3f:3e:a6:51:e4:b9:54:62:2d:a7:a4:22:25:73:f9: 37:4f:fc:b8:62:61:74:46:56:e7:2e:9c:77:be:5d: d8:74:5d:96:cb:44:e7:86:93:f1:b0:6b:8e:d0:e3: a3:d3:1a:7a:d4:25:49:40:81:b9:a0:db:be:cf:8b: 01:f0:d1:1e:d3:c6:68:33:1f:df:41:4d:07:43:19: 5e:6c:81:c7:3e:99:2c:11:f1:18:98:e1:81:25:0a: 21:64:01:7f:5f:b1:c7:e5:1c:8a:ed:43:83:e1:c2: b9:7c:06:c1:e0:cb:9f:34:ff:f9:1a:62:91:3e:68: ea:7b:db:27:33:36:ac:ef:35:3c:52:bc:ff:3b:80: f4:60:bd:ce:30:fa:e9:c8:43:f3:d0:ed:f4:b0:88: cd:d0:37:ab:ba:98:0f:11:2c:4e:53:8e:bd:5c:69: 68:7d:17:6e:18:e4:07:41:01:49:23:a8:a6:db:fb: a8:2f:38:d7:26:8a:96:ce:19:47:c8:77:2f:f7:9e: 66:a3:71:db:b6:20:62:83:ba:b8:5c:04:d5:c6:38: 3a:86:a0:f9:a5:d4:97:b2:da:e0:6f:a4:bb:50:ad: dd:21:3d:02:d7:7b:92:f0:a9:86:ac:6d:96:9f:7e: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:E6:E5:F1:11:F1:EE:80:7F:42:4B:6F:AA:DD:7C:2C:78:E3:52 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:bf:ed:d3:0b:1b:f2:80:ef:93:7d:67:ac:40:be:cc:50:47: 77:4c:43:84:aa:de:a0:09:31:c5:cd:38:69:60:7f:ba:08:b1: b9:3a:10:99:52:00:01:1e:ef:9b:e5:12:4f:e6:8e:07:79:03: 12:fe:98:32:8c:a5:40:5b:c3:65:97:93:0d:7d:60:18:06:b7: 6d:cc:72:99:f5:63:d2:f9:16:91:7d:b6:8d:cb:d0:92:79:92: 91:ee:d9:f9:f4:54:2f:24:b9:7b:0b:cc:da:b8:42:6c:f4:55: b9:47:23:b8:b5:32:7f:5d:38:59:8f:c1:62:9c:8e:99:1d:6b: 91:18:5d:f0:58:6b:f1:51:63:55:bd:94:67:5c:a3:ef:1a:d2: a6:7e:4a:8c:88:0d:6c:e5:f3:d2:2c:40:8c:3f:7f:1d:20:37: 84:cd:d1:21:87:29:57:41:28:20:2c:da:94:36:49:02:3c:5f: c3:a4:89:b6:b4:e3:4e:74:e3:d3:37:52:70:5f:33:da:33:ef: d5:11:05:8e:9a:01:a5:d2:d3:ae:4e:15:ae:61:66:54:01:ab: e5:e1:85:c7:d8:05:e6:8d:87:35:f1:fe:b2:67:5c:4a:eb:e5: ae:49:0c:a8:6c:03:8d:41:b5:f9:11:3f:6a:04:ad:82:95:45: c1:da:c1:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgve7sJUsYyo0xVNlfbWQWmJKd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA5MDQwNjE2MTNaFw0yNTA5MDcxNDE0MTNaMDMxMTAvBgNV BAMTKDcxMkJFNkU1RjExMUYxRUU4MDdGNDI0QjZGQUFERDdDMkM3OEUzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYL+MpKBMPOPCJDALsj8+plHk uVRiLaekIiVz+TdP/LhiYXRGVucunHe+Xdh0XZbLROeGk/Gwa47Q46PTGnrUJUlA gbmg277PiwHw0R7TxmgzH99BTQdDGV5sgcc+mSwR8RiY4YElCiFkAX9fscflHIrt Q4Phwrl8BsHgy580//kaYpE+aOp72yczNqzvNTxSvP87gPRgvc4w+unIQ/PQ7fSw iM3QN6u6mA8RLE5Tjr1caWh9F24Y5AdBAUkjqKbb+6gvONcmipbOGUfIdy/3nmaj cdu2IGKDurhcBNXGODqGoPml1Jey2uBvpLtQrd0hPQLXe5LwqYasbZaffhaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSvm5fER8e6Af0JLb6rdfCx441IwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKq/7dMLG/KA75N9Z6xAvsxQR3dMQ4Sq3qAJ McXNOGlgf7oIsbk6EJlSAAEe75vlEk/mjgd5AxL+mDKMpUBbw2WXkw19YBgGt23M cpn1Y9L5FpF9to3L0JJ5kpHu2fn0VC8kuXsLzNq4Qmz0VblHI7i1Mn9dOFmPwWKc jpkda5EYXfBYa/FRY1W9lGdco+8a0qZ+SoyIDWzl89IsQIw/fx0gN4TN0SGHKVdB KCAs2pQ2SQI8X8Okiba0405049M3UnBfM9oz79URBY6aAaXS065OFa5hZlQBq+Xh hcfYBeaNhzXx/rJnXErr5a5JDKhsA41BtfkRP2oErYKVRcHawcs= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:26 2025 by rpki-client