$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: JQEweBwEzovhuvPzyHMWloLfI6BaM0FXMHirjIR5qa8= Subject key identifier: 16:FC:DC:D7:31:F2:B5:43:EC:85:F8:CE:44:0F:DB:85:B7:E9:25:36 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 27FE367BAE1438E3ADB302521200EFED07A7B4D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 01F9 Signing time: Sat 07 Jun 2025 01:11:13 +0000 Manifest this update: Sat 07 Jun 2025 01:06:13 +0000 Manifest next update: Tue 10 Jun 2025 12:10:13 +0000 Files and hashes: 1: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 2: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 3: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) 4: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 5: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 6: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 7: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 8: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 9: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 10: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 11: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 12: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 13: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 14: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 15: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 16: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 17: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 18: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 19: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: ZsQomM+f+yKPq/UIGilwvnBDr+2uU60Vd/7/KkM6hD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 12:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fe:36:7b:ae:14:38:e3:ad:b3:02:52:12:00:ef:ed:07:a7:b4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jun 7 01:06:13 2025 GMT Not After : Jun 10 12:10:13 2025 GMT Subject: CN=16FCDCD731F2B543EC85F8CE440FDB85B7E92536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:de:c8:87:50:76:5a:89:7f:bc:f3:76:52: a1:2f:66:d5:72:41:8f:c5:65:fd:84:b0:43:57:5b: a7:9e:e1:4f:bf:73:8e:b0:7f:fb:5d:19:8a:4d:3b: 62:6b:4c:3e:5c:a1:fd:6e:a8:60:8e:09:52:a8:1c: 38:4b:ef:e0:5a:e1:12:33:9a:e3:d3:0d:57:d0:67: 12:b2:8b:64:0e:96:f0:63:04:01:21:91:4a:de:c5: 25:56:ed:be:77:f8:65:5f:7a:5e:ce:90:1d:0a:3e: 62:40:ec:e2:59:82:5f:c1:6b:85:4f:9c:0b:d9:33: 9a:a9:af:cb:72:7f:02:6b:b7:12:e0:17:ea:dd:d8: a8:97:7d:bf:40:4a:f9:b6:bc:26:c2:2a:0c:e5:ff: 66:1f:ab:bd:7a:78:91:1f:4a:04:4c:82:85:78:11: 72:bd:85:1f:3e:3a:ee:61:34:c8:bb:a9:43:7b:ef: 51:4b:11:67:32:a7:34:f6:ec:1b:db:b9:32:02:e8: 69:e6:d2:ef:a9:bb:13:ff:d0:17:7d:99:6b:62:a7: 95:4c:46:4b:55:5e:38:f5:52:e6:a1:b1:43:c1:34: 2f:9e:de:50:6b:fb:78:6b:0f:aa:9b:2c:88:fa:67: 21:1f:1c:e7:09:75:01:b6:87:33:62:13:f5:0c:40: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FC:DC:D7:31:F2:B5:43:EC:85:F8:CE:44:0F:DB:85:B7:E9:25:36 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:59:56:cf:46:3a:5f:ec:bd:16:bd:af:8f:fc:26:e5:7e:99: e0:87:35:38:5e:56:46:5b:ff:3c:a4:15:fd:06:c0:2c:77:c0: 38:fb:ba:ba:e2:14:42:d8:e0:3e:0d:55:26:af:ff:7b:c5:51: e5:e3:88:32:99:d4:27:29:83:64:5f:6d:26:9a:ab:ae:91:72: 73:15:86:70:9c:9b:46:93:6d:b3:3a:21:65:42:af:b3:09:fe: 13:22:4d:79:f4:0a:d8:9d:5b:e4:73:fb:ac:2f:c9:6c:85:a8: 46:c4:aa:b0:50:73:f3:cb:54:a8:03:e7:9d:98:1a:6e:f8:74: 99:9a:13:1a:cc:81:fe:57:dc:48:64:a0:9b:23:5a:f6:a2:e2: 10:15:19:25:42:fa:55:ed:56:65:76:07:da:fb:24:ff:60:66: 0b:ac:59:01:98:43:08:16:2d:ae:d4:8a:a8:5f:83:19:14:47: de:a1:f3:7c:42:fb:63:2f:85:fb:02:78:7f:01:fb:1c:04:b5: e5:6e:94:0c:3a:24:e9:8d:dd:53:1f:93:a5:ef:7b:66:09:92: 1b:cc:cb:e8:48:e2:a1:61:ab:2a:ae:e5:9b:c9:1e:2f:3d:fc: 40:ad:15:03:96:74:09:d1:72:85:43:4f:fb:39:cb:af:78:7c: f5:66:68:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/42e64UOOOtswJSEgDv7QentNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA2MDcwMTA2MTNaFw0yNTA2MTAxMjEwMTNaMDMxMTAvBgNV BAMTKDE2RkNEQ0Q3MzFGMkI1NDNFQzg1RjhDRTQ0MEZEQjg1QjdFOTI1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiu97Ih1B2Wol/vPN2UqEvZtVy QY/FZf2EsENXW6ee4U+/c46wf/tdGYpNO2JrTD5cof1uqGCOCVKoHDhL7+Ba4RIz muPTDVfQZxKyi2QOlvBjBAEhkUrexSVW7b53+GVfel7OkB0KPmJA7OJZgl/Ba4VP nAvZM5qpr8tyfwJrtxLgF+rd2KiXfb9ASvm2vCbCKgzl/2Yfq716eJEfSgRMgoV4 EXK9hR8+Ou5hNMi7qUN771FLEWcypzT27BvbuTIC6Gnm0u+puxP/0Bd9mWtip5VM RktVXjj1UuahsUPBNC+e3lBr+3hrD6qbLIj6ZyEfHOcJdQG2hzNiE/UMQCTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvzc1zHytUPshfjORA/bhbfpJTYwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxZVs9GOl/svRa9r4/8JuV+meCHNTheVkZb /zykFf0GwCx3wDj7urriFELY4D4NVSav/3vFUeXjiDKZ1Ccpg2RfbSaaq66RcnMV hnCcm0aTbbM6IWVCr7MJ/hMiTXn0CtidW+Rz+6wvyWyFqEbEqrBQc/PLVKgD552Y Gm74dJmaExrMgf5X3EhkoJsjWvai4hAVGSVC+lXtVmV2B9r7JP9gZgusWQGYQwgW La7UiqhfgxkUR96h83xC+2MvhfsCeH8B+xwEteVulAw6JOmN3VMfk6Xve2YJkhvM y+hI4qFhqyqu5ZvJHi89/ECtFQOWdAnRcoVDT/s5y694fPVmaGE= -----END CERTIFICATE-----Generated at Sun Jun 8 11:15:39 2025 by rpki-client