$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: D1KCzaVieVvUS1I77ZHYduq6gf45mZIBJaLOh2utoKQ= Subject key identifier: 8F:D0:5B:87:A3:3A:F3:B1:0E:75:F7:A2:E3:BC:B0:6F:6B:13:3D:51 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 2FD490338A4EA427CD9685E4F795F8CF4B12394F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 88 Signing time: Fri 22 Aug 2025 09:00:05 +0000 Manifest this update: Fri 22 Aug 2025 08:55:05 +0000 Manifest next update: Mon 25 Aug 2025 13:46:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: FyOVpXP2M9O2oJvOvonRU9ZdkSoJsyTEqpxs+b/hYAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d4:90:33:8a:4e:a4:27:cd:96:85:e4:f7:95:f8:cf:4b:12:39:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Aug 22 08:55:05 2025 GMT Not After : Aug 25 13:46:05 2025 GMT Subject: CN=8FD05B87A33AF3B10E75F7A2E3BCB06F6B133D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:02:3d:aa:ca:e6:f9:dd:ef:7f:c9:99:53:21: b7:0b:39:2b:45:a6:82:77:89:ac:9f:b2:96:26:72: 65:26:03:b2:51:63:e0:24:c5:1e:b4:c5:de:88:a8: c1:0c:8f:83:8c:b5:d0:99:31:36:a3:97:24:4b:37: 99:5d:af:e1:ee:1a:71:07:99:6d:af:e2:0e:37:c5: 8f:ee:e5:9c:71:2a:0c:91:fe:d4:c1:92:f8:fe:a5: 7f:3e:b3:d7:7b:58:d8:3c:6b:72:58:38:e2:b2:0f: b1:30:8a:89:c3:47:eb:1c:33:a6:ad:7a:48:6b:f4: 0c:7a:74:74:95:f0:04:2c:d2:d8:37:49:36:e5:46: ab:02:86:8d:61:b5:6a:17:e0:cd:0f:dc:10:4b:3c: c1:6d:17:17:9a:e8:0c:2a:56:8c:65:b9:60:c7:47: fb:d0:f6:4b:c2:eb:8a:42:bd:5c:ee:77:2d:ae:c5: 9e:f1:8a:66:9b:ed:df:49:d4:e7:6c:52:cc:91:76: 80:0e:c2:cf:23:84:e9:e0:b1:9b:98:06:84:66:64: 45:c2:01:79:f9:9b:7f:8f:e0:46:5f:7a:bf:c5:08: 83:ca:74:2b:2f:a1:8a:89:4c:9a:bb:6f:7c:3d:fe: 0f:f5:60:c4:aa:7b:7c:0f:0b:93:70:b2:ab:0b:36: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D0:5B:87:A3:3A:F3:B1:0E:75:F7:A2:E3:BC:B0:6F:6B:13:3D:51 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f6:c4:05:ec:97:b2:61:da:6e:9f:c4:9d:ed:0a:a0:4e:b8: 6f:d8:96:39:f9:23:30:f2:5c:f8:7b:f4:8d:54:df:9d:11:74: 21:4f:0e:49:22:90:29:c1:4d:f5:32:02:53:a7:a3:80:b2:24: ed:39:7f:ce:54:1e:b3:34:20:1c:8e:49:8c:f5:11:c4:e0:38: 4e:d0:c4:7d:94:b0:51:d4:82:b4:3e:7c:9e:9e:61:16:7b:90: 38:a6:0f:78:9c:ec:cc:de:90:90:7c:12:99:49:08:ba:69:e9: 9c:3e:48:43:de:bd:fc:eb:3a:c5:02:8d:c9:6e:14:80:b9:e3: 5d:f1:61:e0:7b:5f:8a:62:8c:bc:ef:45:88:9c:eb:16:d3:81: 52:e7:15:52:76:ec:32:62:1b:c3:65:12:73:35:82:77:ec:43: 64:ed:4f:8a:d7:32:ef:5d:b6:92:9b:b9:ec:ab:69:74:02:09: 7e:20:8c:c2:6f:19:bf:5e:01:6e:10:aa:3f:06:e2:fa:ab:e1: c8:5f:a2:88:7d:c1:e7:c4:b1:c9:5e:2f:5a:9d:b3:5f:c2:74: 8e:dc:a4:9d:1d:cb:c4:9e:1d:30:3c:14:ea:3f:db:4c:93:48: e1:25:3a:84:f1:16:1b:e2:bb:51:79:45:8f:3a:9f:e6:79:47: ce:30:ac:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9SQM4pOpCfNloXk95X4z0sSOU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA4MjIwODU1MDVaFw0yNTA4MjUxMzQ2MDVaMDMxMTAvBgNV BAMTKDhGRDA1Qjg3QTMzQUYzQjEwRTc1RjdBMkUzQkNCMDZGNkIxMzNENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpAj2qyub53e9/yZlTIbcLOStF poJ3iayfspYmcmUmA7JRY+AkxR60xd6IqMEMj4OMtdCZMTajlyRLN5ldr+HuGnEH mW2v4g43xY/u5ZxxKgyR/tTBkvj+pX8+s9d7WNg8a3JYOOKyD7EwionDR+scM6at ekhr9Ax6dHSV8AQs0tg3STblRqsCho1htWoX4M0P3BBLPMFtFxea6AwqVoxluWDH R/vQ9kvC64pCvVzudy2uxZ7ximab7d9J1OdsUsyRdoAOws8jhOngsZuYBoRmZEXC AXn5m3+P4EZfer/FCIPKdCsvoYqJTJq7b3w9/g/1YMSqe3wPC5NwsqsLNuuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9Bbh6M687EOdfei47ywb2sTPVEwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABf2xAXsl7Jh2m6fxJ3tCqBOuG/Yljn5IzDy XPh79I1U350RdCFPDkkikCnBTfUyAlOno4CyJO05f85UHrM0IByOSYz1EcTgOE7Q xH2UsFHUgrQ+fJ6eYRZ7kDimD3ic7MzekJB8EplJCLpp6Zw+SEPevfzrOsUCjclu FIC5413xYeB7X4pijLzvRYic6xbTgVLnFVJ27DJiG8NlEnM1gnfsQ2TtT4rXMu9d tpKbueyraXQCCX4gjMJvGb9eAW4Qqj8G4vqr4chfooh9wefEscleL1qds1/CdI7c pJ0dy8SeHTA8FOo/20yTSOElOoTxFhviu1F5RY86n+Z5R84wrBc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:24 2025 by rpki-client