
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json)
Hash identifier: JCZxMQXdeLdWeSzS92TZ7kV2vfX2X2FJVLR6leh88o4=
Subject key identifier: 99:B3:DF:0D:B1:00:49:E0:C5:00:2D:29:CF:8C:62:CE:78:7F:18:2E
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial: 11AEE6BEA8540221D7EFB178219B40CD1F9CEA19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
Manifest number: 0270
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 18:56:23 +0000
Manifest next update: Thu 05 Mar 2026 03:10:23 +0000
Files and hashes: 1: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=)
2: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=)
3: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=)
4: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=)
5: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=)
6: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=)
7: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: EMGldSvqvR5LN20xist2ZnWfjlFgLVsBGAzbx2KbGYE=)
8: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=)
9: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=)
10: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=)
11: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=)
12: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=)
13: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=)
14: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=)
15: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=)
16: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: 9ueNsf48SUY+xtp4ywCcHlMUOqR56TvW5HOOZ8L51Fc=)
17: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=)
18: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=)
19: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 03:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ae:e6:be:a8:54:02:21:d7:ef:b1:78:21:9b:40:cd:1f:9c:ea:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Validity
Not Before: Mar 1 18:56:23 2026 GMT
Not After : Mar 5 03:10:23 2026 GMT
Subject: CN=99B3DF0DB10049E0C5002D29CF8C62CE787F182E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:49:69:d8:ab:21:84:60:25:7f:34:a6:6d:
d6:07:48:0f:de:b8:a6:25:37:e7:56:39:42:d1:e2:
79:ab:4b:4d:a7:20:6b:1e:f9:6c:10:18:35:9a:b9:
a0:ba:06:84:21:df:f6:37:c9:89:f1:99:dc:6c:76:
e6:97:10:02:47:21:f2:c0:c5:6f:bf:4d:03:d2:18:
e0:5c:31:96:1e:12:c4:01:52:3e:b8:e1:53:1f:85:
dc:59:27:48:71:ee:fb:ab:62:e8:21:73:de:79:d8:
75:27:da:74:2a:28:25:75:6a:06:80:03:a1:d5:9b:
69:37:93:0d:e2:5d:62:3d:19:d5:bc:54:a9:aa:0a:
ad:86:0b:2e:b7:81:d3:ad:01:46:be:db:52:e1:fa:
26:1a:eb:7d:00:81:59:bc:9b:e4:99:fb:ce:21:85:
fa:78:7f:a5:8c:f8:68:44:53:98:7a:c5:d4:5e:68:
be:b4:f4:4f:d0:e5:57:e2:52:f8:fb:27:15:99:45:
a1:80:d5:30:2d:b4:90:46:94:40:f6:4b:28:cc:60:
8f:29:1b:c6:84:28:c6:2a:74:ea:8c:9d:7c:bf:05:
02:a1:9e:14:46:f2:eb:2e:63:1f:9a:39:6c:22:99:
84:a2:35:47:14:a1:56:21:14:6d:fe:6e:ac:9f:13:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:DF:0D:B1:00:49:E0:C5:00:2D:29:CF:8C:62:CE:78:7F:18:2E
X509v3 Authority Key Identifier:
keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:31:d1:f2:53:1f:58:89:28:e0:8f:ae:04:37:49:10:94:90:
30:6d:01:6f:96:62:f0:f3:1b:d2:a8:91:d8:30:4e:44:f9:a1:
51:3d:b0:ef:40:de:5f:65:f5:20:98:c9:25:49:6e:b8:28:99:
be:a4:4d:03:cc:fb:10:82:b0:d4:e3:ab:93:64:ef:bc:f1:10:
10:e3:9b:c0:09:8a:25:95:d2:2d:0f:d0:07:91:b0:a0:8d:ce:
66:23:5a:3a:ec:df:3d:51:0a:5b:37:c5:af:cd:14:a4:6e:f0:
ef:a0:9c:55:01:04:00:7e:97:f9:8d:92:05:34:6e:fe:4c:43:
23:b2:af:ac:a5:ac:87:42:5e:13:de:8a:05:f1:0c:51:8e:48:
14:f4:98:73:04:93:2c:10:ab:20:ee:51:c7:68:71:03:29:e1:
6b:63:27:b0:9d:cd:51:6e:18:86:5e:a9:af:71:64:44:46:e4:
f0:ba:40:74:46:ec:d3:a2:90:fc:81:a2:6b:4d:5e:ee:18:2e:
df:02:28:8e:b0:ca:c4:9e:27:9e:71:33:cc:c8:99:0a:6b:4b:
77:af:42:ad:f8:e9:35:0e:e4:e7:b5:ee:0c:ee:2e:54:03:5d:
a1:0f:3b:8d:50:cb:c0:80:4c:1c:5a:84:d7:40:35:83:d9:45:
db:e0:a9:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEa7mvqhUAiHX77F4IZtAzR+c6hkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC
MUNFMDMyNTAeFw0yNjAzMDExODU2MjNaFw0yNjAzMDUwMzEwMjNaMDMxMTAvBgNV
BAMTKDk5QjNERjBEQjEwMDQ5RTBDNTAwMkQyOUNGOEM2MkNFNzg3RjE4MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lElp2KshhGAlfzSmbdYHSA/e
uKYlN+dWOULR4nmrS02nIGse+WwQGDWauaC6BoQh3/Y3yYnxmdxsduaXEAJHIfLA
xW+/TQPSGOBcMZYeEsQBUj644VMfhdxZJ0hx7vurYughc9552HUn2nQqKCV1agaA
A6HVm2k3kw3iXWI9GdW8VKmqCq2GCy63gdOtAUa+21Lh+iYa630AgVm8m+SZ+84h
hfp4f6WM+GhEU5h6xdReaL609E/Q5VfiUvj7JxWZRaGA1TAttJBGlED2SyjMYI8p
G8aEKMYqdOqMnXy/BQKhnhRG8usuYx+aOWwimYSiNUcUoVYhFG3+bqyfE1ZVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmbPfDbEASeDFAC0pz4xiznh/GC4wHwYDVR0j
BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG
Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF
MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5
MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD
QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACMx0fJTH1iJKOCPrgQ3SRCUkDBtAW+WYvDz
G9KokdgwTkT5oVE9sO9A3l9l9SCYySVJbrgomb6kTQPM+xCCsNTjq5Nk77zxEBDj
m8AJiiWV0i0P0AeRsKCNzmYjWjrs3z1RCls3xa/NFKRu8O+gnFUBBAB+l/mNkgU0
bv5MQyOyr6ylrIdCXhPeigXxDFGOSBT0mHMEkywQqyDuUcdocQMp4WtjJ7CdzVFu
GIZeqa9xZERG5PC6QHRG7NOikPyBomtNXu4YLt8CKI6wysSeJ55xM8zImQprS3ev
Qq346TUO5Oe17gzuLlQDXaEPO41Qy8CATBxahNdANYPZRdvgqZ0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:18 2026 by rpki-client