$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: ygSjQw7ggg+Hoa1pZ1UvQ3Nt7YE5gq4TpNYAWYAl9QI= Subject key identifier: DF:83:71:F0:6B:1C:B7:52:F4:8B:EA:C1:B6:F4:4D:1B:D0:CC:8E:16 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 40B2CB24AA8FAF9C74473399188CDE5CDB082C96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 01FD Signing time: Mon 16 Jun 2025 05:11:13 +0000 Manifest this update: Mon 16 Jun 2025 05:06:13 +0000 Manifest next update: Thu 19 Jun 2025 17:05:13 +0000 Files and hashes: 1: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 2: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 3: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 4: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 5: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 6: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 7: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 8: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 9: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 10: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 11: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 12: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 13: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: aOJoCSIWDax2gX1fy896/fWH6luY7/qFTcBHvCIV28c=) 14: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 15: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 16: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) 17: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 18: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 19: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b2:cb:24:aa:8f:af:9c:74:47:33:99:18:8c:de:5c:db:08:2c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Jun 16 05:06:13 2025 GMT Not After : Jun 19 17:05:13 2025 GMT Subject: CN=DF8371F06B1CB752F48BEAC1B6F44D1BD0CC8E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:52:71:01:85:9d:6f:8e:98:64:b1:91:fb:55: 48:da:b2:90:a8:3c:59:9d:0f:a3:bf:08:87:77:53: 5b:27:e0:b4:cd:2c:12:67:14:b1:f1:f9:3b:d2:bc: 2e:7b:43:e4:d7:0e:16:76:df:81:6b:15:e6:0f:14: 72:fd:67:86:63:33:f8:7a:c4:98:e4:f2:98:52:a4: 0e:b2:20:00:30:00:1c:70:52:43:94:42:bd:64:10: e6:cb:5c:1f:86:dc:a2:b3:5c:07:12:d8:4e:d8:07: 8a:24:11:5f:d2:c1:cd:95:36:46:2e:e2:b5:00:27: 52:7b:d9:b6:4e:11:d5:19:a0:79:98:66:47:81:44: 7c:ab:2a:40:2b:1d:ea:0a:2a:b0:ad:c8:e4:a9:ee: 6e:c3:92:78:ee:59:5d:74:65:d3:68:88:24:9a:2b: 8a:39:b0:c3:37:db:8e:d5:bc:86:9c:83:7f:98:6b: 66:8d:5e:bf:3c:73:db:ad:7a:fa:da:d4:4d:1a:c8: ad:26:69:23:37:67:ea:1a:6b:b1:f1:53:ad:57:e5: 2a:ec:59:d0:46:c6:c2:e5:5d:6e:68:5a:5d:1b:a4: 49:3d:27:22:c8:b3:11:7d:55:f1:36:fb:6f:2e:bd: 20:55:c9:73:70:9f:a0:c1:e6:f7:4d:23:61:ca:70: 34:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:83:71:F0:6B:1C:B7:52:F4:8B:EA:C1:B6:F4:4D:1B:D0:CC:8E:16 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4c:44:13:58:1b:a6:06:8d:77:36:5b:54:e8:4a:9c:43:a5: 0a:c7:b0:2a:2a:36:90:b6:fa:c2:9a:8c:4f:82:d7:37:32:ee: 54:45:18:4f:ef:36:19:27:ab:7e:bb:3d:2a:0e:db:ec:4b:c0: f1:74:b5:78:1c:fa:34:5c:a1:9b:18:29:43:95:5a:c8:18:80: ab:8e:af:af:5e:f7:3b:13:db:f4:a6:0d:92:5d:9b:da:75:c3: 19:42:b6:8d:d6:9b:95:f1:93:f9:79:69:66:65:f0:cf:8e:4c: 00:6f:ff:de:3f:ee:e5:07:ea:9c:f8:2a:e3:66:c6:f1:79:ad: 48:34:b8:a7:9e:da:64:ee:10:2b:3d:7c:f9:a9:76:22:af:95: d8:24:f7:12:b6:2e:89:05:a3:b6:34:d7:b8:a3:13:74:be:a5: 6c:10:34:08:d8:13:d1:9d:f0:36:cf:58:84:4e:ee:06:81:86: 90:09:d5:6a:fd:7d:b6:ec:89:8c:5b:db:a5:f9:70:89:ea:68: a7:bc:a8:9d:22:56:e1:a6:3f:99:89:3a:6d:22:a9:0b:56:40: 32:11:46:57:7e:a8:79:e6:9c:72:ec:80:8b:ee:ea:79:d0:b7: d0:f4:a5:38:4a:81:25:b9:97:67:63:d0:b7:b3:59:c8:91:8e: 70:85:95:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLLLJKqPr5x0RzOZGIzeXNsILJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA2MTYwNTA2MTNaFw0yNTA2MTkxNzA1MTNaMDMxMTAvBgNV BAMTKERGODM3MUYwNkIxQ0I3NTJGNDhCRUFDMUI2RjQ0RDFCRDBDQzhFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxUnEBhZ1vjphksZH7VUjaspCo PFmdD6O/CId3U1sn4LTNLBJnFLHx+TvSvC57Q+TXDhZ234FrFeYPFHL9Z4ZjM/h6 xJjk8phSpA6yIAAwABxwUkOUQr1kEObLXB+G3KKzXAcS2E7YB4okEV/Swc2VNkYu 4rUAJ1J72bZOEdUZoHmYZkeBRHyrKkArHeoKKrCtyOSp7m7DknjuWV10ZdNoiCSa K4o5sMM3247VvIacg3+Ya2aNXr88c9utevra1E0ayK0maSM3Z+oaa7HxU61X5Srs WdBGxsLlXW5oWl0bpEk9JyLIsxF9VfE2+28uvSBVyXNwn6DB5vdNI2HKcDQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU34Nx8Gsct1L0i+rBtvRNG9DMjhYwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVMRBNYG6YGjXc2W1ToSpxDpQrHsCoqNpC2 +sKajE+C1zcy7lRFGE/vNhknq367PSoO2+xLwPF0tXgc+jRcoZsYKUOVWsgYgKuO r69e9zsT2/SmDZJdm9p1wxlCto3Wm5Xxk/l5aWZl8M+OTABv/94/7uUH6pz4KuNm xvF5rUg0uKee2mTuECs9fPmpdiKvldgk9xK2LokFo7Y017ijE3S+pWwQNAjYE9Gd 8DbPWIRO7gaBhpAJ1Wr9fbbsiYxb26X5cInqaKe8qJ0iVuGmP5mJOm0iqQtWQDIR Rld+qHnmnHLsgIvu6nnQt9D0pThKgSW5l2dj0LezWciRjnCFlbc= -----END CERTIFICATE-----Generated at Tue Jun 17 18:00:07 2025 by rpki-client