$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: 5QEgZJYGFHxbbe77ofRGm0RExOxxmYq7qAj26/fIDSU= Subject key identifier: 69:39:9D:7C:B7:F2:EA:0E:D9:E1:AF:FE:B0:8D:97:A6:ED:A4:2C:AD Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 72F8BFFFEC4F3CB88292C5A79218D09966A904C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: A2 Signing time: Sat 18 Oct 2025 02:10:05 +0000 Manifest this update: Sat 18 Oct 2025 02:05:05 +0000 Manifest next update: Tue 21 Oct 2025 10:26:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: xrdmcMZ9//pXFDHtY/VNl9rnpf5AvQbB2SxxX0XQf2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f8:bf:ff:ec:4f:3c:b8:82:92:c5:a7:92:18:d0:99:66:a9:04:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Oct 18 02:05:05 2025 GMT Not After : Oct 21 10:26:05 2025 GMT Subject: CN=69399D7CB7F2EA0ED9E1AFFEB08D97A6EDA42CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:17:a8:3d:1a:7a:80:0f:42:0e:7a:bf:9a: d6:60:54:a0:88:1e:79:c4:b0:04:ff:46:10:2c:ae: 44:47:65:9c:51:15:af:aa:fe:db:42:db:40:0d:db: 0c:7b:a3:3f:f7:2e:30:4d:23:ff:c9:a0:ba:b0:fd: b0:a6:92:17:46:5e:35:5d:07:13:69:4a:a7:67:fd: c8:90:5c:7e:d9:39:77:ba:94:9c:b2:f6:ce:0d:4b: ce:4b:e1:84:49:5e:98:56:b8:ad:03:6c:ac:21:5b: 96:99:e9:20:8c:ac:a4:37:6f:38:a1:58:b8:8f:e0: 43:73:ec:cf:3d:82:ab:e2:30:82:7e:b4:c8:7a:5e: c1:d0:be:2b:1b:fa:a6:a7:5d:c8:8c:c6:f1:7b:a7: 5c:ce:9f:25:8f:c9:da:7c:25:97:45:30:26:92:41: 05:17:95:53:fb:ec:53:fb:8d:ec:92:98:8a:d5:85: a2:2f:c1:28:83:7f:ba:6d:8b:74:55:b3:2a:ab:ba: 0f:8d:b3:8c:16:ba:bc:72:b6:28:dd:dd:91:d1:3c: 8f:ce:2d:58:07:b7:47:75:1c:e4:27:c4:3a:d9:8c: e5:db:f6:0f:79:22:eb:53:29:d8:0f:22:b0:0c:78: 09:0d:78:0a:15:f8:6b:54:c1:e4:94:1f:f3:cc:7d: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:39:9D:7C:B7:F2:EA:0E:D9:E1:AF:FE:B0:8D:97:A6:ED:A4:2C:AD X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b3:9a:24:a0:9e:ce:90:70:b3:12:f0:5e:25:37:e3:ce:11: c8:29:2d:80:be:25:67:bb:dd:57:a5:fc:1f:aa:42:78:25:92: 13:77:38:98:0a:12:11:f6:9d:27:89:45:b4:c9:d3:0e:a8:81: f4:8c:16:06:13:10:4d:a1:50:fd:9e:b7:49:d1:4c:56:05:2a: f5:63:89:37:fe:de:4f:6e:1e:2b:69:d4:25:51:e0:09:9f:ed: 32:45:c5:f2:40:ed:a8:27:dc:72:b5:21:47:66:7d:19:18:cb: 14:2d:3f:b4:68:f8:7e:15:3f:8a:2a:fb:98:79:6a:85:7b:61: c6:e4:1d:60:24:15:b0:cd:d7:6a:5b:7d:d2:f1:af:30:54:5d: 96:5a:4d:e1:9e:4f:5d:2f:7c:57:f8:40:70:7f:99:78:03:f9: aa:2c:1a:db:ff:d8:05:1b:c6:20:e3:0d:1a:fa:e9:83:e4:14: 5b:81:e9:84:18:1f:2e:ef:0a:f7:bc:e4:5c:9c:4a:75:b7:d3: 52:2a:5f:4c:87:0c:aa:37:f4:1f:24:5e:59:fd:ad:dd:5e:50: b4:2c:29:85:e6:4d:a6:e6:eb:e1:67:49:04:1e:12:b0:6f:87: 89:47:29:b4:e3:a9:0b:f3:ae:32:0d:5c:79:ef:28:fb:57:6b: c6:95:63:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvi//+xPPLiCksWnkhjQmWapBMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTEwMTgwMjA1MDVaFw0yNTEwMjExMDI2MDVaMDMxMTAvBgNV BAMTKDY5Mzk5RDdDQjdGMkVBMEVEOUUxQUZGRUIwOEQ5N0E2RURBNDJDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsBeoPRp6gA9CDnq/mtZgVKCI HnnEsAT/RhAsrkRHZZxRFa+q/ttC20AN2wx7oz/3LjBNI//JoLqw/bCmkhdGXjVd BxNpSqdn/ciQXH7ZOXe6lJyy9s4NS85L4YRJXphWuK0DbKwhW5aZ6SCMrKQ3bzih WLiP4ENz7M89gqviMIJ+tMh6XsHQvisb+qanXciMxvF7p1zOnyWPydp8JZdFMCaS QQUXlVP77FP7jeySmIrVhaIvwSiDf7pti3RVsyqrug+Ns4wWurxytijd3ZHRPI/O LVgHt0d1HOQnxDrZjOXb9g95IutTKdgPIrAMeAkNeAoV+GtUweSUH/PMfQ07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTmdfLfy6g7Z4a/+sI2Xpu2kLK0wHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGzmiSgns6QcLMS8F4lN+POEcgpLYC+JWe7 3Vel/B+qQnglkhN3OJgKEhH2nSeJRbTJ0w6ogfSMFgYTEE2hUP2et0nRTFYFKvVj iTf+3k9uHitp1CVR4Amf7TJFxfJA7agn3HK1IUdmfRkYyxQtP7Ro+H4VP4oq+5h5 aoV7YcbkHWAkFbDN12pbfdLxrzBUXZZaTeGeT10vfFf4QHB/mXgD+aosGtv/2AUb xiDjDRr66YPkFFuB6YQYHy7vCve85FycSnW301IqX0yHDKo39B8kXln9rd1eULQs KYXmTabm6+FnSQQeErBvh4lHKbTjqQvzrjINXHnvKPtXa8aVY98= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:24 2025 by rpki-client