$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft File: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json) Hash identifier: 1KiQbB1btnMJkgE+6THTjugxgvOZDvlECh7LAul9uNc= Subject key identifier: D1:E0:0E:0A:6A:40:72:09:40:6E:9E:D8:4A:6B:00:F4:75:38:D6:09 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 2F371F381D5D161E7176702866073C5157DAE9E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft Manifest number: 0286 Signing time: Fri 17 Apr 2026 14:32:34 +0000 Manifest this update: Fri 17 Apr 2026 14:27:34 +0000 Manifest next update: Mon 20 Apr 2026 16:12:34 +0000 Files and hashes: 1: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: 6zheKqrCdZndWfsaenxasp1xVK72MzP0++OcpVBLko0=) 2: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: 9ueNsf48SUY+xtp4ywCcHlMUOqR56TvW5HOOZ8L51Fc=) 3: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=) 4: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=) 5: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=) 6: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=) 7: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=) 8: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=) 9: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=) 10: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: MR5apkRFfEqJsMkq5oipA9pEvq1JhLUYoPwVR2eYhw4=) 11: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=) 12: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=) 13: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=) 14: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=) 15: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=) 16: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=) 17: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=) 18: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=) 19: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:37:1f:38:1d:5d:16:1e:71:76:70:28:66:07:3c:51:57:da:e9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Apr 17 14:27:34 2026 GMT Not After : Apr 20 16:12:34 2026 GMT Subject: CN=D1E00E0A6A407209406E9ED84A6B00F47538D609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:13:ea:5f:79:46:82:69:29:d0:b2:eb:7a: 53:72:9a:54:f3:b7:0f:34:05:7d:a6:7f:5a:ec:fe: 98:e7:43:26:e4:71:e9:16:60:8e:f5:a0:67:a9:e5: 05:33:e9:b1:50:b6:d2:8c:73:b3:40:74:bb:7a:6b: b3:1c:16:66:79:af:3e:dc:a9:ae:9e:34:b0:04:c7: bb:78:2b:67:cc:ef:ed:34:a3:51:53:87:fd:c4:27: 11:54:5a:bf:07:d7:4d:b6:84:b3:2f:3a:cc:7d:8d: f3:a8:a5:7e:af:c1:76:a3:a5:ed:73:ca:e8:38:71: 8e:81:01:7d:60:8f:00:e6:6b:47:4f:38:6a:b6:ba: 92:30:37:29:10:72:05:a3:cc:84:b6:3c:70:e0:3a: 43:a2:2e:eb:ab:0e:da:24:7e:9f:a4:d3:4f:64:42: 18:9b:4a:e1:a3:8e:0b:e3:37:da:84:66:db:87:85: 83:d8:bc:82:39:4c:f2:b4:bf:f6:f0:dd:ae:69:df: 9f:97:76:8f:83:f5:9a:f2:f3:99:08:57:8e:e2:9f: 46:e8:9b:1c:eb:32:57:42:8f:e7:5e:2e:0e:54:ea: 75:8a:e7:66:a4:b2:03:7c:f3:1b:35:a6:f4:fb:bd: 10:63:99:06:32:f0:95:b8:60:e2:75:53:6f:c1:3a: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:0E:0A:6A:40:72:09:40:6E:9E:D8:4A:6B:00:F4:75:38:D6:09 X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:87:df:dd:c7:cd:e1:84:ad:b4:e7:59:ce:13:ed:a0:fd:a8: 0d:66:29:88:bc:3b:4b:64:c9:3e:bd:98:fd:9f:cb:1b:16:1d: c4:49:a2:67:93:91:ba:f8:e8:15:4e:60:19:b3:09:94:b5:dd: f7:3c:ce:ea:08:97:b4:88:e1:cf:8b:b3:7a:1f:1c:cd:51:39: 1e:ea:9e:5b:a2:3c:75:8c:6b:4b:96:dd:96:d2:1c:86:19:ac: 69:64:34:b2:a6:0f:20:d9:4a:4a:72:d4:2c:05:47:2e:61:30: d7:2b:ef:e4:9a:7e:d6:94:3d:7c:ce:3e:26:9b:12:b2:f7:b9: 26:8f:8e:85:1b:51:60:67:d5:68:a0:a4:2d:6e:90:00:6f:ad: d8:2c:0e:25:22:32:5b:98:42:e7:e6:98:02:24:01:bc:80:6c: 05:6b:f8:ed:b0:85:d5:c2:e4:c6:ac:d9:41:92:fa:de:04:4b: 59:c1:c7:f3:39:cc:7e:21:22:b4:20:00:ef:ff:9e:2f:bc:0e: 6b:8d:19:3f:b4:75:7b:d1:d5:68:c2:04:df:30:b3:50:08:5c: c0:bc:64:3a:42:2b:c2:5c:92:60:ad:dc:77:4c:d7:0e:31:76: 52:95:52:a2:0c:d9:e8:13:90:d8:f5:c0:41:81:2d:b0:52:35: 4c:97:93:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzcfOB1dFh5xdnAoZgc8UVfa6eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNjA0MTcxNDI3MzRaFw0yNjA0MjAxNjEyMzRaMDMxMTAvBgNV BAMTKEQxRTAwRTBBNkE0MDcyMDk0MDZFOUVEODRBNkIwMEY0NzUzOEQ2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOhPqX3lGgmkp0LLrelNymlTz tw80BX2mf1rs/pjnQybkcekWYI71oGep5QUz6bFQttKMc7NAdLt6a7McFmZ5rz7c qa6eNLAEx7t4K2fM7+00o1FTh/3EJxFUWr8H1022hLMvOsx9jfOopX6vwXajpe1z yug4cY6BAX1gjwDma0dPOGq2upIwNykQcgWjzIS2PHDgOkOiLuurDtokfp+k009k QhibSuGjjgvjN9qEZtuHhYPYvII5TPK0v/bw3a5p35+Xdo+D9Zry85kIV47in0bo mxzrMldCj+deLg5U6nWK52aksgN88xs1pvT7vRBjmQYy8JW4YOJ1U2/BOuKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0eAOCmpAcglAbp7YSmsA9HU41gkwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNiOWE0YjktNGFlMy00NjdhLWI5 MTktNDEwZTE0MmI2NzlmLzAvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERD QkFCMUNFMDMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6H393HzeGErbTnWc4T7aD9qA1mKYi8O0tk yT69mP2fyxsWHcRJomeTkbr46BVOYBmzCZS13fc8zuoIl7SI4c+Ls3ofHM1ROR7q nluiPHWMa0uW3ZbSHIYZrGlkNLKmDyDZSkpy1CwFRy5hMNcr7+SaftaUPXzOPiab ErL3uSaPjoUbUWBn1WigpC1ukABvrdgsDiUiMluYQufmmAIkAbyAbAVr+O2whdXC 5Mas2UGS+t4ES1nBx/M5zH4hIrQgAO//ni+8DmuNGT+0dXvR1WjCBN8ws1AIXMC8 ZDpCK8JckmCt3HdM1w4xdlKVUqIM2egTkNj1wEGBLbBSNUyXk70= -----END CERTIFICATE-----Generated at Sat Apr 18 03:32:32 2026 by rpki-client