$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: pn/+2H8DYISNjBYIcgfXnyyIzIyC013GA/PPLfST7Dg= Subject key identifier: AB:F9:08:BA:40:15:8E:86:FF:7E:3C:C9:8A:78:A1:8C:CE:B6:CE:AE Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 7C49F429F7002BF5CF4AD4EAB224D0B6C5BBE121 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: E9 Signing time: Wed 25 Mar 2026 21:50:06 +0000 Manifest this update: Wed 25 Mar 2026 21:45:06 +0000 Manifest next update: Sun 29 Mar 2026 05:07:06 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: PhF2/qDVSDSGg6jdeLxt/hiNeIPPScmpc0uOaTXOEcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:49:f4:29:f7:00:2b:f5:cf:4a:d4:ea:b2:24:d0:b6:c5:bb:e1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Mar 25 21:45:06 2026 GMT Not After : Mar 29 05:07:06 2026 GMT Subject: CN=ABF908BA40158E86FF7E3CC98A78A18CCEB6CEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:d2:26:66:bb:c8:5c:17:a9:16:7d:98:69: 69:3f:46:04:38:64:66:74:47:0c:6c:fd:c9:7b:b1: 8a:58:4f:aa:1a:2f:fa:9b:2e:54:45:c1:ba:b3:68: aa:e2:fb:28:f2:b3:14:6b:30:c2:b1:95:f7:f3:7e: 08:63:1c:71:a6:c0:37:56:b2:38:3c:c1:17:e8:17: 1f:12:57:6b:62:68:26:f1:9c:6d:59:f9:e7:00:5b: 8b:3a:8c:ed:fa:25:60:b7:60:e1:a5:73:da:4c:3a: 61:f1:04:f4:5c:74:cc:e4:7d:3a:29:f5:17:5d:25: 2e:e9:4c:7a:4e:39:cb:0d:af:c5:70:d0:a2:ce:cb: de:2e:16:93:e0:c4:63:7e:b4:c7:b5:01:0e:4a:68: 4a:d1:3d:95:ac:9c:70:d9:a9:ef:61:e9:0c:80:96: f7:9d:80:5b:bc:29:a4:e1:67:0e:c5:65:37:bf:28: bb:d5:52:0d:be:2d:1c:6b:6c:40:be:b0:8f:43:e4: c4:bc:59:66:a1:43:d8:57:70:02:e6:80:30:fb:00: b4:cf:f5:71:d9:ff:2e:22:0b:20:54:91:bb:da:13: 3d:60:44:3a:f0:7f:b6:e6:65:ee:51:8e:a3:f2:91: 59:93:9a:b2:d1:b6:82:13:30:ff:60:b4:2a:29:7c: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F9:08:BA:40:15:8E:86:FF:7E:3C:C9:8A:78:A1:8C:CE:B6:CE:AE X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1f:08:91:62:72:21:cf:bd:72:b7:41:a4:90:be:7f:aa:ff: 7a:e9:e5:4f:32:21:08:3d:07:dc:76:34:d5:6a:59:69:8e:4d: 89:00:a5:76:a2:69:97:ca:67:39:a2:c8:c6:66:7a:3f:5c:cb: f0:ef:a3:e8:e5:e3:ce:d8:be:95:05:5c:db:3f:a1:2b:6f:de: 64:d5:cb:65:f6:aa:45:40:c6:25:eb:b4:0b:ac:e1:16:19:8b: f3:1c:7e:75:ad:76:eb:ae:5e:70:cc:5c:d5:38:b7:e6:17:26: 90:fa:45:cf:9f:7c:79:ae:0d:9c:fd:4b:3c:20:40:95:45:09: 6a:d3:2c:a4:6f:57:9c:0d:86:dd:82:3a:d1:3d:94:0c:be:55: e8:3a:0f:62:2d:a8:a4:76:6e:c5:77:61:98:07:5d:7a:32:4b: d6:22:c1:d7:bd:69:02:60:fb:cf:4a:23:dd:12:dc:33:9c:45: 18:72:d0:5f:51:6f:f9:d2:bb:a9:95:2f:c4:93:71:bd:73:fd: 87:97:e9:8c:eb:c6:53:2c:1c:e6:6a:a1:d3:0f:4a:8e:ff:e9: 9b:79:ca:7b:8c:80:88:9f:9f:65:a8:9b:dd:dd:2f:7b:6e:9c: f9:b6:91:20:5e:c0:65:cd:1d:22:e2:d3:83:29:5a:1e:5c:5b: 97:4f:e0:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEn0KfcAK/XPStTqsiTQtsW74SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNjAzMjUyMTQ1MDZaFw0yNjAzMjkwNTA3MDZaMDMxMTAvBgNV BAMTKEFCRjkwOEJBNDAxNThFODZGRjdFM0NDOThBNzhBMThDQ0VCNkNFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56tImZrvIXBepFn2YaWk/RgQ4 ZGZ0Rwxs/cl7sYpYT6oaL/qbLlRFwbqzaKri+yjysxRrMMKxlffzfghjHHGmwDdW sjg8wRfoFx8SV2tiaCbxnG1Z+ecAW4s6jO36JWC3YOGlc9pMOmHxBPRcdMzkfTop 9RddJS7pTHpOOcsNr8Vw0KLOy94uFpPgxGN+tMe1AQ5KaErRPZWsnHDZqe9h6QyA lvedgFu8KaThZw7FZTe/KLvVUg2+LRxrbEC+sI9D5MS8WWahQ9hXcALmgDD7ALTP 9XHZ/y4iCyBUkbvaEz1gRDrwf7bmZe5RjqPykVmTmrLRtoITMP9gtCopfKY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/kIukAVjob/fjzJinihjM62zq4wHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEfCJFiciHPvXK3QaSQvn+q/3rp5U8yIQg9 B9x2NNVqWWmOTYkApXaiaZfKZzmiyMZmej9cy/Dvo+jl487YvpUFXNs/oStv3mTV y2X2qkVAxiXrtAus4RYZi/McfnWtduuuXnDMXNU4t+YXJpD6Rc+ffHmuDZz9Szwg QJVFCWrTLKRvV5wNht2COtE9lAy+Veg6D2ItqKR2bsV3YZgHXXoyS9Yiwde9aQJg +89KI90S3DOcRRhy0F9Rb/nSu6mVL8STcb1z/YeX6YzrxlMsHOZqodMPSo7/6Zt5 ynuMgIifn2Wom93dL3tunPm2kSBewGXNHSLi04MpWh5cW5dP4Ac= -----END CERTIFICATE-----Generated at Thu Mar 26 05:57:37 2026 by rpki-client