$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: xCW+70C24EKWj5TWx89uMgon4wA5QS3ny9TZbiw+bNw= Subject key identifier: EB:79:42:70:00:3C:53:9E:A0:B1:2F:99:EA:19:54:88:8C:80:C8:DB Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 0A6F286645330396026E7BCA4B21B5D8E489D8C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 0215 Signing time: Fri 08 Aug 2025 04:11:14 +0000 Manifest this update: Fri 08 Aug 2025 04:06:14 +0000 Manifest next update: Mon 11 Aug 2025 12:08:14 +0000 Files and hashes: 1: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 2: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) 3: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 4: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 5: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 6: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 7: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 8: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 9: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=) 10: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: PNd16N0Bjoi6q0a1cLTqmrpJLSVZW+N+wlg9lq2KB4g=) 11: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: zVab73uYL3wcGqKb3SN5yTP95BDjc662xSHQ6Rg5+bs=) 12: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 13: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 14: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 15: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 16: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 17: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 18: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 19: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6f:28:66:45:33:03:96:02:6e:7b:ca:4b:21:b5:d8:e4:89:d8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Aug 8 04:06:14 2025 GMT Not After : Aug 11 12:08:14 2025 GMT Subject: CN=EB794270003C539EA0B12F99EA1954888C80C8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:bc:7d:e7:9c:5f:c5:46:7f:3e:6d:34:03: 55:73:13:86:2d:58:b5:3c:6b:b8:be:d0:cc:f3:be: 29:7d:52:27:0b:e1:25:b4:81:ee:5a:4e:31:a9:1a: 43:b8:69:1c:1d:4f:4f:4c:0f:90:e0:bd:6d:87:71: 02:f3:06:03:2c:57:a6:6e:93:4a:56:7f:72:7e:42: b4:c6:11:60:b7:be:ba:23:81:56:fb:b2:cf:04:6c: d4:c7:38:d8:6e:59:5a:50:62:bd:3d:76:51:be:41: 8a:48:a5:ec:48:e1:ad:85:c5:d1:92:20:90:c2:4f: 4f:ef:ef:74:00:dc:7a:de:75:46:ae:43:98:57:50: 41:0e:00:40:bf:95:f8:ed:a7:e8:c4:da:c9:ef:82: ca:72:1b:8e:41:7b:3a:0f:f2:06:9a:a5:a8:a7:c7: 36:61:47:63:5b:52:85:11:78:ac:82:6d:f3:44:ed: 98:a7:1a:94:2b:98:09:35:2b:0d:88:95:a4:8a:ec: 21:91:a5:94:42:16:ea:03:73:b4:ab:65:ab:f7:e4: 80:93:fe:ec:06:64:80:a2:4b:87:e1:9c:a5:d4:9b: c3:40:91:7a:75:48:69:f6:25:71:ad:4b:d0:e0:1a: 03:cb:66:67:f5:67:4c:5c:52:2b:61:98:37:31:89: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:42:70:00:3C:53:9E:A0:B1:2F:99:EA:19:54:88:8C:80:C8:DB X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b3:4a:84:a1:32:81:c1:c1:a7:6a:98:c2:24:2f:e3:df:00: f8:bc:de:c2:20:8e:f2:5d:b4:93:54:74:b4:0f:41:4c:a0:6f: 33:43:f9:24:a4:88:21:92:64:eb:66:74:ec:b8:d5:0b:0b:9e: f1:16:e8:ab:ed:87:2a:db:99:5e:49:7b:29:7a:df:3b:c0:37: cf:63:52:a5:66:3c:45:e3:ff:d7:6d:4f:05:dc:db:a1:f8:9b: 02:33:4f:51:63:17:96:ab:9f:c7:14:02:3a:d3:66:5f:c8:f3: e0:e7:63:be:9b:8a:12:e0:fd:3a:d9:ee:03:b9:41:93:4f:d1: 9e:32:65:3f:44:8d:2a:8e:0a:4e:8c:fe:b7:99:6b:05:18:e4: a4:9a:cc:9c:02:61:e2:e0:14:d5:69:ab:12:d1:93:7f:9e:e6: 36:35:6c:58:d9:b3:da:d0:2a:78:e5:21:18:0a:35:85:da:5c: d9:59:ad:3c:dc:6a:e5:13:e8:dc:a5:6e:1f:67:98:b4:f1:39: a2:c5:65:99:05:44:c8:72:ab:46:7e:8b:2a:64:32:37:fb:4b: d9:39:a4:75:21:26:70:64:47:6e:d9:26:da:dd:e9:a9:c1:6f: fb:f7:b4:f4:e6:ef:c1:4e:4e:84:b7:f0:79:23:93:b5:20:bb: d5:d4:4f:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCm8oZkUzA5YCbnvKSyG12OSJ2MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA4MDgwNDA2MTRaFw0yNTA4MTExMjA4MTRaMDMxMTAvBgNV BAMTKEVCNzk0MjcwMDAzQzUzOUVBMEIxMkY5OUVBMTk1NDg4OEM4MEM4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdM7x955xfxUZ/Pm00A1VzE4Yt WLU8a7i+0Mzzvil9UicL4SW0ge5aTjGpGkO4aRwdT09MD5DgvW2HcQLzBgMsV6Zu k0pWf3J+QrTGEWC3vrojgVb7ss8EbNTHONhuWVpQYr09dlG+QYpIpexI4a2FxdGS IJDCT0/v73QA3HredUauQ5hXUEEOAEC/lfjtp+jE2snvgspyG45BezoP8gaapain xzZhR2NbUoUReKyCbfNE7ZinGpQrmAk1Kw2IlaSK7CGRpZRCFuoDc7SrZav35ICT /uwGZICiS4fhnKXUm8NAkXp1SGn2JXGtS9DgGgPLZmf1Z0xcUithmDcxibFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63lCcAA8U56gsS+Z6hlUiIyAyNswHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCzSoShMoHBwadqmMIkL+PfAPi83sIgjvJd tJNUdLQPQUygbzND+SSkiCGSZOtmdOy41QsLnvEW6KvthyrbmV5Jeyl63zvAN89j UqVmPEXj/9dtTwXc26H4mwIzT1FjF5arn8cUAjrTZl/I8+DnY76bihLg/TrZ7gO5 QZNP0Z4yZT9EjSqOCk6M/reZawUY5KSazJwCYeLgFNVpqxLRk3+e5jY1bFjZs9rQ KnjlIRgKNYXaXNlZrTzcauUT6Nylbh9nmLTxOaLFZZkFRMhyq0Z+iypkMjf7S9k5 pHUhJnBkR27ZJtrd6anBb/v3tPTm78FOToS38Hkjk7Ugu9XUT7g= -----END CERTIFICATE-----Generated at Fri Aug 8 13:05:11 2025 by rpki-client