$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: YUJJEPoXDtETTKZkCbI48T9dpsOeWnc9b7IpwGAmUHg= Subject key identifier: 47:0C:5A:7B:7E:78:49:F9:CA:B8:3D:51:E7:89:42:70:93:86:56:E9 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 3CA046C83D51AFAA91EBBF61225D25DEB8216BD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 6F Signing time: Fri 27 Jun 2025 22:30:05 +0000 Manifest this update: Fri 27 Jun 2025 22:25:05 +0000 Manifest next update: Tue 01 Jul 2025 01:27:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: MY5tNjofCoeucqinLHgGnJwLxqrWE4MmAXvmPlUteAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a0:46:c8:3d:51:af:aa:91:eb:bf:61:22:5d:25:de:b8:21:6b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Jun 27 22:25:05 2025 GMT Not After : Jul 1 01:27:05 2025 GMT Subject: CN=470C5A7B7E7849F9CAB83D51E7894270938656E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:23:93:b5:e2:da:7b:c1:c1:eb:d4:e2:e9: b0:d4:f8:0a:fa:f2:fa:70:37:dc:62:d6:ad:57:22: c4:9f:49:d0:58:7b:55:72:de:57:c2:76:44:00:43: 7f:49:12:89:d4:59:5a:38:e4:a2:28:e0:cd:f0:40: 72:04:33:b1:b1:2f:80:08:56:62:1e:d3:f6:d6:5f: df:e2:a7:0d:ee:d0:74:02:e0:26:d3:98:96:09:9b: 5e:39:72:78:24:aa:53:c3:6b:35:11:54:20:52:9d: 64:be:0a:23:1b:c4:f6:4a:75:dd:91:ae:75:76:00: 74:38:70:ce:8d:df:47:20:03:3f:34:e6:2c:85:fd: cb:0c:18:b0:0f:db:5f:20:bb:a5:22:fc:12:fe:22: d6:24:4c:a4:39:b8:06:6c:96:44:52:69:69:10:31: ff:80:fb:98:28:fd:f8:43:b7:21:f2:c2:7c:e8:c6: e3:cf:22:de:b2:ce:e1:5a:87:b2:dc:9f:76:29:46: 3d:aa:0f:59:da:99:86:5c:38:9c:5c:fa:be:73:2f: a2:5c:ac:2c:16:41:67:5e:9c:50:5c:35:5b:b3:a8: 72:9e:3f:bb:55:4a:02:3f:e4:f0:a1:c4:88:c1:1c: 7e:43:ec:c4:2e:fd:7d:43:aa:26:1b:7e:de:33:16: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0C:5A:7B:7E:78:49:F9:CA:B8:3D:51:E7:89:42:70:93:86:56:E9 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:de:7b:d6:fa:54:f6:9c:63:21:e9:fb:e6:89:68:5e:30:bb: 59:71:8d:cb:1f:65:af:ae:a8:7d:df:a0:7e:39:12:e1:d4:f6: 1a:3e:b5:1c:c0:d5:52:3d:15:95:8f:55:22:c3:64:18:e8:2a: dc:53:66:21:e6:8a:08:95:a2:52:8d:68:e1:77:8c:f2:86:f6: 7b:9c:f7:7e:0a:84:7a:34:fd:01:70:87:76:6b:95:7d:9b:c5: 9c:fe:67:b8:32:e9:a1:b2:d9:4d:d0:63:6f:62:ed:61:25:c1: fe:ac:6d:b6:73:b9:c3:ee:b6:3e:8b:de:f2:9e:a2:03:fe:51: e8:51:f9:55:b4:a9:2d:ed:68:eb:2c:c5:ce:b9:4e:59:fc:b2: 74:6f:24:db:f2:12:56:e9:99:1f:8b:38:75:85:a9:5b:b2:d2: 18:ab:d7:38:d2:eb:91:57:ab:de:37:b7:ce:6d:f9:06:da:26: db:1e:56:17:9b:cd:b8:6f:b9:de:a6:24:15:2a:62:6a:29:2d: bb:a5:cb:c9:fc:8f:05:94:18:a6:1a:8f:2c:d7:99:95:f3:30: 3b:82:2d:dd:13:53:94:fe:9b:43:bf:37:a3:a9:8b:96:a3:ac: 39:05:0b:38:e0:63:18:8f:30:cb:35:52:79:65:70:f1:95:8a: b9:83:48:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKBGyD1Rr6qR679hIl0l3rgha9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA2MjcyMjI1MDVaFw0yNTA3MDEwMTI3MDVaMDMxMTAvBgNV BAMTKDQ3MEM1QTdCN0U3ODQ5RjlDQUI4M0Q1MUU3ODk0MjcwOTM4NjU2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOyOTteLae8HB69Ti6bDU+Ar6 8vpwN9xi1q1XIsSfSdBYe1Vy3lfCdkQAQ39JEonUWVo45KIo4M3wQHIEM7GxL4AI VmIe0/bWX9/ipw3u0HQC4CbTmJYJm145cngkqlPDazURVCBSnWS+CiMbxPZKdd2R rnV2AHQ4cM6N30cgAz805iyF/csMGLAP218gu6Ui/BL+ItYkTKQ5uAZslkRSaWkQ Mf+A+5go/fhDtyHywnzoxuPPIt6yzuFah7Lcn3YpRj2qD1namYZcOJxc+r5zL6Jc rCwWQWdenFBcNVuzqHKeP7tVSgI/5PChxIjBHH5D7MQu/X1DqiYbft4zFhI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwxae354SfnKuD1R54lCcJOGVukwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzee9b6VPacYyHp++aJaF4wu1lxjcsfZa+u qH3foH45EuHU9ho+tRzA1VI9FZWPVSLDZBjoKtxTZiHmigiVolKNaOF3jPKG9nuc 934KhHo0/QFwh3ZrlX2bxZz+Z7gy6aGy2U3QY29i7WElwf6sbbZzucPutj6L3vKe ogP+UehR+VW0qS3taOssxc65Tln8snRvJNvyElbpmR+LOHWFqVuy0hir1zjS65FX q943t85t+QbaJtseVhebzbhvud6mJBUqYmopLbuly8n8jwWUGKYajyzXmZXzMDuC Ld0TU5T+m0O/N6Opi5ajrDkFCzjgYxiPMMs1UnllcPGVirmDSIs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:39 2025 by rpki-client