$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: 9npvH/x/2wxhin7ycdpyNZ24O7RlZ2WxNK2k6heR6Yw= Subject key identifier: E0:56:48:DE:F3:60:7D:1A:C7:90:06:D6:96:17:3D:2F:FE:71:1A:0A Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 1AEC1D34952F66D29E817333B5C880AB3BD0A389 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 57 Signing time: Mon 05 May 2025 04:20:04 +0000 Manifest this update: Mon 05 May 2025 04:15:04 +0000 Manifest next update: Thu 08 May 2025 12:33:04 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: 4hk7qKUmuiUjzDT5mzLfDJg98sFAYo8X2HWy9smTyi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 12:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ec:1d:34:95:2f:66:d2:9e:81:73:33:b5:c8:80:ab:3b:d0:a3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: May 5 04:15:04 2025 GMT Not After : May 8 12:33:04 2025 GMT Subject: CN=E05648DEF3607D1AC79006D696173D2FFE711A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:88:a7:97:58:63:9b:04:8a:be:65:da:2a: 07:59:bf:27:5a:f3:52:89:02:d8:af:b4:97:27:60: 4a:ac:9c:29:bc:e8:58:af:a9:54:98:05:2a:56:d1: 58:fb:a4:26:b3:8b:81:bc:c2:77:eb:f4:82:7e:9f: 53:5b:10:cd:5e:a9:fd:54:72:99:0a:e1:80:c6:3e: e5:28:51:14:30:25:df:a5:8e:a4:6f:06:96:9a:10: dd:86:1a:b0:e8:75:3e:4a:fa:9f:1c:18:53:83:34: 53:99:a2:33:06:8d:d7:5b:51:5c:84:43:20:41:4b: 96:bf:ec:ed:83:77:98:da:0c:6c:3d:a3:3b:dc:de: 20:ef:c7:48:17:02:98:32:67:62:9b:8c:eb:18:1a: a0:06:55:22:42:f1:37:c0:58:54:e5:4c:77:28:92: 8d:2a:1b:98:63:33:70:97:c8:33:6b:1e:4d:24:d1: 69:9c:21:bb:59:3e:21:b4:db:a7:8b:42:20:6a:13: df:81:a4:09:7c:0b:fa:b1:86:3b:de:81:7c:14:6c: 2d:5a:c6:35:ee:15:b9:a5:2f:89:8e:e5:2a:73:18: 75:18:70:71:b8:66:d9:44:3d:ee:36:a3:ec:47:4d: 82:f1:47:4a:41:16:1e:93:90:59:ef:7f:61:8d:81: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:56:48:DE:F3:60:7D:1A:C7:90:06:D6:96:17:3D:2F:FE:71:1A:0A X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b3:5a:e0:3a:b9:89:e5:36:5a:de:32:1c:3a:5e:f2:ad:6a: 13:4d:c0:c9:d0:16:3b:f2:cc:a4:3c:34:65:b9:d7:77:0f:2e: ff:38:4c:51:92:84:b2:fe:89:6a:5d:5d:f3:c0:9c:8e:99:62: 71:59:60:aa:db:38:b2:6d:7b:c6:96:f5:cb:f6:1b:31:8a:c3: 35:39:ca:5a:02:81:52:4d:93:c5:bc:5f:98:03:48:a0:b5:cf: 47:30:c3:3d:29:82:7b:7b:f4:d3:70:86:8f:ff:5e:21:c0:93: ed:c9:d1:b4:e4:e5:02:2c:67:38:0d:95:8b:d1:0a:01:82:79: 03:4d:08:7b:73:2b:7f:fb:9b:1b:ea:e1:48:e0:57:f0:2e:1c: cd:6b:aa:9b:48:58:78:23:1a:9c:29:c1:ab:1f:86:82:20:16: 66:4b:cb:7a:6e:30:c4:5f:14:b8:48:32:5e:56:8f:65:01:59: d5:9c:e8:d6:d5:ea:4f:6f:80:54:15:18:56:72:f4:11:ca:4c: 96:ca:60:1f:e3:86:63:c9:d0:b9:d3:00:f8:49:d3:4d:ce:54: 5c:11:1f:ea:d0:c5:c5:ee:ee:7e:85:68:59:91:a3:7d:10:74: b6:be:3b:0e:1a:80:18:a2:be:20:e0:fe:95:98:a2:3e:80:89: 21:d1:94:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuwdNJUvZtKegXMztciAqzvQo4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA1MDUwNDE1MDRaFw0yNTA1MDgxMjMzMDRaMDMxMTAvBgNV BAMTKEUwNTY0OERFRjM2MDdEMUFDNzkwMDZENjk2MTczRDJGRkU3MTFBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6Yinl1hjmwSKvmXaKgdZvyda 81KJAtivtJcnYEqsnCm86FivqVSYBSpW0Vj7pCazi4G8wnfr9IJ+n1NbEM1eqf1U cpkK4YDGPuUoURQwJd+ljqRvBpaaEN2GGrDodT5K+p8cGFODNFOZojMGjddbUVyE QyBBS5a/7O2Dd5jaDGw9ozvc3iDvx0gXApgyZ2KbjOsYGqAGVSJC8TfAWFTlTHco ko0qG5hjM3CXyDNrHk0k0WmcIbtZPiG026eLQiBqE9+BpAl8C/qxhjvegXwUbC1a xjXuFbmlL4mO5SpzGHUYcHG4ZtlEPe42o+xHTYLxR0pBFh6TkFnvf2GNgQktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4FZI3vNgfRrHkAbWlhc9L/5xGgowHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+zWuA6uYnlNlreMhw6XvKtahNNwMnQFjvy zKQ8NGW513cPLv84TFGShLL+iWpdXfPAnI6ZYnFZYKrbOLJte8aW9cv2GzGKwzU5 yloCgVJNk8W8X5gDSKC1z0cwwz0pgnt79NNwho//XiHAk+3J0bTk5QIsZzgNlYvR CgGCeQNNCHtzK3/7mxvq4UjgV/AuHM1rqptIWHgjGpwpwasfhoIgFmZLy3puMMRf FLhIMl5Wj2UBWdWc6NbV6k9vgFQVGFZy9BHKTJbKYB/jhmPJ0LnTAPhJ003OVFwR H+rQxcXu7n6FaFmRo30QdLa+Ow4agBiiviDg/pWYoj6AiSHRlKE= -----END CERTIFICATE-----Generated at Tue May 6 06:50:25 2025 by rpki-client