$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: qgYSWK3ab0T/O5h01Fl+E85sD23oopPPLFbpRYGYzgY= Subject key identifier: 0A:41:87:B1:8C:44:9E:C7:82:3A:92:AB:5C:E9:65:7C:52:C3:24:C2 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 6EAC9BBA9B0F8CCB2D74FCC7307298F5B5B30975 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 023C Signing time: Tue 04 Nov 2025 11:21:15 +0000 Manifest this update: Tue 04 Nov 2025 11:16:15 +0000 Manifest next update: Fri 07 Nov 2025 19:32:15 +0000 Files and hashes: 1: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 2: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 3: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 4: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) 5: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 6: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 7: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 8: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 9: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 10: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 11: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 12: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: E+VX5+Fit3LI8y/SPNKSe451iQ+af03CYTTmhluvBRU=) 13: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 14: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 15: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 16: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 17: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 18: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 19: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ac:9b:ba:9b:0f:8c:cb:2d:74:fc:c7:30:72:98:f5:b5:b3:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Nov 4 11:16:15 2025 GMT Not After : Nov 7 19:32:15 2025 GMT Subject: CN=0A4187B18C449EC7823A92AB5CE9657C52C324C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:67:20:62:ed:da:20:32:90:e4:ef:45:87: ea:98:f5:b8:2d:2b:48:d4:c2:91:ee:39:36:e3:7a: eb:9c:b5:db:5e:c1:1e:ef:c6:fc:f0:a1:19:cf:a0: d6:c7:1a:9b:fc:34:34:ec:1e:aa:ce:22:68:db:22: 8c:3d:d9:04:bb:9a:17:2b:04:ed:21:56:13:5a:60: 0e:56:c0:b8:63:60:1b:95:ae:88:b3:7b:cf:ce:d4: ae:ba:ca:ec:8c:2d:30:f1:b3:43:00:61:2c:e5:a9: 94:93:b3:37:dd:23:7c:b0:0a:2e:21:a7:2a:a5:81: 75:cc:6b:71:3c:69:91:cc:da:69:07:1d:64:fa:d9: 95:51:14:cf:45:9f:3a:56:8d:8b:66:4d:a6:7c:ea: 74:59:4b:7b:ed:d4:0c:e2:c9:2e:86:5f:e1:d3:3a: 17:78:10:6e:be:15:9c:91:a3:a5:57:2b:eb:0a:45: 27:2c:2c:ea:72:6f:f2:2f:7d:af:cf:83:a4:72:e9: ae:a0:93:c4:99:bb:53:1f:fb:c6:29:d2:1d:eb:42: 22:0a:26:46:20:39:54:29:c8:02:53:59:70:8a:ec: a4:43:cb:ef:ec:e2:60:7a:24:3b:78:08:63:82:91: fd:62:c7:ea:99:cf:fa:78:2c:d3:87:00:97:50:1f: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:41:87:B1:8C:44:9E:C7:82:3A:92:AB:5C:E9:65:7C:52:C3:24:C2 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1b:8f:eb:ca:3c:d1:33:51:9d:be:5c:8a:b8:00:70:9c:9d: d4:6d:d5:d0:bd:00:33:f9:43:26:bf:4d:96:0d:05:c3:c4:40: 56:b4:c6:ba:9e:65:2c:47:b9:8b:ab:5e:cb:ef:ee:41:a6:eb: 4a:ec:60:9f:d2:45:66:c7:a1:80:6c:8f:4a:c1:cc:9a:c1:b9: da:01:c0:ff:36:a2:a7:97:d6:c4:6b:a7:4d:da:af:4d:76:77: 68:0e:53:a8:cf:46:44:c0:6a:da:4a:5f:4f:80:01:b9:bd:77: d5:f0:60:e9:78:5d:30:e6:c9:10:86:16:67:06:2d:40:dc:19: 9f:34:81:67:0a:32:47:e7:1d:b1:ad:71:8c:fb:1a:5f:4b:d2: 77:a9:ea:62:9d:75:f6:4b:bc:4e:13:7e:44:c4:9d:aa:cf:11: cd:c1:03:b1:7b:a3:12:96:15:62:52:7c:82:bd:93:b9:ba:69: 23:47:b0:3f:0d:93:c1:53:ca:d2:36:d5:16:f5:d0:c8:e8:6b: 7e:7a:85:d8:05:f4:06:5d:34:32:b2:f7:f3:3e:59:d9:3e:3a: 48:98:dc:f0:e3:cb:63:69:4b:6d:12:95:1e:2d:94:ed:aa:f5: 6f:e2:1f:8e:7b:92:cd:a1:57:3a:18:23:66:50:2d:2f:5d:5d: 29:76:64:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqybupsPjMstdPzHMHKY9bWzCXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTExMDQxMTE2MTVaFw0yNTExMDcxOTMyMTVaMDMxMTAvBgNV BAMTKDBBNDE4N0IxOEM0NDlFQzc4MjNBOTJBQjVDRTk2NTdDNTJDMzI0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd6GcgYu3aIDKQ5O9Fh+qY9bgt K0jUwpHuOTbjeuuctdtewR7vxvzwoRnPoNbHGpv8NDTsHqrOImjbIow92QS7mhcr BO0hVhNaYA5WwLhjYBuVroize8/O1K66yuyMLTDxs0MAYSzlqZSTszfdI3ywCi4h pyqlgXXMa3E8aZHM2mkHHWT62ZVRFM9FnzpWjYtmTaZ86nRZS3vt1AziyS6GX+HT Ohd4EG6+FZyRo6VXK+sKRScsLOpyb/Ivfa/Pg6Ry6a6gk8SZu1Mf+8Yp0h3rQiIK JkYgOVQpyAJTWXCK7KRDy+/s4mB6JDt4CGOCkf1ix+qZz/p4LNOHAJdQHxvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCkGHsYxEnseCOpKrXOllfFLDJMIwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcbj+vKPNEzUZ2+XIq4AHCcndRt1dC9ADP5 Qya/TZYNBcPEQFa0xrqeZSxHuYurXsvv7kGm60rsYJ/SRWbHoYBsj0rBzJrBudoB wP82oqeX1sRrp03ar012d2gOU6jPRkTAatpKX0+AAbm9d9XwYOl4XTDmyRCGFmcG LUDcGZ80gWcKMkfnHbGtcYz7Gl9L0nep6mKddfZLvE4TfkTEnarPEc3BA7F7oxKW FWJSfIK9k7m6aSNHsD8Nk8FTytI21Rb10Mjoa356hdgF9AZdNDKy9/M+Wdk+OkiY 3PDjy2NpS20SlR4tlO2q9W/iH457ks2hVzoYI2ZQLS9dXSl2ZDc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:45 2025 by rpki-client