$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: Rly5Hcw6rzq/eIm6gaRUL7w6NIuXUdnrgbQwLDr4e2E= Subject key identifier: 2D:F8:AD:41:F4:95:4F:77:73:B1:B0:5C:64:0F:32:8E:59:75:F1:46 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 45CAB0DF379BB968F2F21B2C9A6386C2327BED9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 79 Signing time: Sun 20 Jul 2025 01:10:05 +0000 Manifest this update: Sun 20 Jul 2025 01:05:05 +0000 Manifest next update: Wed 23 Jul 2025 04:58:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: /ARoXWHjHKwZLd/zUdCLvZJaDYfFr7Og7fEJnxQ2k44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ca:b0:df:37:9b:b9:68:f2:f2:1b:2c:9a:63:86:c2:32:7b:ed:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Jul 20 01:05:05 2025 GMT Not After : Jul 23 04:58:05 2025 GMT Subject: CN=2DF8AD41F4954F7773B1B05C640F328E5975F146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:8e:ed:5e:80:1d:25:c5:28:02:ea:07:19: a0:8f:fb:99:e1:a3:ab:86:52:03:26:5c:7d:1e:20: d3:52:c5:30:58:5f:aa:e6:74:7c:32:86:e3:9c:17: dd:39:db:d4:8b:b7:c0:37:af:3b:5a:44:99:4f:3d: da:7b:31:a1:6d:d9:3f:7f:13:1a:08:76:d9:73:f7: 3a:b4:22:d1:97:fb:40:59:10:65:61:2c:d3:06:df: fb:22:8f:d0:fc:37:44:01:d3:07:88:98:a4:17:33: e0:ab:b2:0f:1c:55:5b:16:c1:26:a3:5f:31:db:cb: 38:f3:7b:ff:f2:41:74:76:f7:ea:cb:0e:ef:9a:69: 1f:16:8c:0a:e4:9c:8c:b5:a7:fc:47:88:93:7a:61: 64:9d:6a:c7:ea:12:0d:56:2a:63:63:a4:6b:db:66: cf:62:b3:1d:c8:a2:e0:f6:c8:8b:38:ab:31:bb:ff: ba:72:15:54:8e:69:b4:1a:0d:90:5a:96:62:8a:5b: ca:5b:4c:09:ec:14:ad:eb:7b:7d:f3:e9:3a:82:05: f9:d4:cd:a4:99:de:e9:9c:e3:6f:01:39:e3:08:c1: ad:9b:9e:2f:a9:55:91:c7:fc:ea:bd:88:81:54:e3: de:52:f6:8e:00:a9:25:25:c7:66:02:0c:01:c8:10: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:AD:41:F4:95:4F:77:73:B1:B0:5C:64:0F:32:8E:59:75:F1:46 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b8:6b:95:59:28:04:03:b7:26:5d:90:a6:48:b8:66:82:5e: 89:9b:dd:75:e5:25:5a:5c:cd:fb:51:0b:f3:37:2b:d6:26:1f: 02:66:f4:7f:d1:3b:2a:95:78:54:6c:05:43:55:bc:17:3a:c9: 16:5c:92:3d:b5:98:3e:9c:b7:61:c3:22:28:8b:a9:44:dd:25: 90:5f:cf:f1:8e:02:6d:08:9c:c0:d7:7d:f3:19:c4:d8:19:1a: 92:34:eb:51:d4:0b:d8:dc:74:38:28:5f:39:ea:77:94:37:24: d1:8c:7e:81:e2:d9:d5:36:42:c0:bb:49:92:95:f7:e6:71:ab: c0:96:23:d0:f6:2f:7a:04:99:ad:93:6e:6e:66:a6:f7:68:a9: 9f:da:dc:9d:93:9d:29:21:92:c0:bd:f7:49:32:f3:b6:04:cf: b0:f0:f9:17:7b:db:0b:1f:ec:ef:2e:64:27:40:5f:88:0a:e5: 6c:9f:fc:3b:9e:34:3d:c8:cc:b7:93:60:ac:b0:4b:c8:2c:64: 1e:a0:c0:a2:b8:5b:73:e7:70:63:79:1e:3c:62:66:2c:8a:31: 54:f0:7d:d3:24:ec:a0:c9:80:ed:8b:af:dd:13:1c:3f:7b:57: 2e:d1:8b:ce:84:15:29:3f:88:e9:89:9b:12:f8:35:61:13:a8: a1:b3:31:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcqw3zebuWjy8hssmmOGwjJ77ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA3MjAwMTA1MDVaFw0yNTA3MjMwNDU4MDVaMDMxMTAvBgNV BAMTKDJERjhBRDQxRjQ5NTRGNzc3M0IxQjA1QzY0MEYzMjhFNTk3NUYxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGY7tXoAdJcUoAuoHGaCP+5nh o6uGUgMmXH0eINNSxTBYX6rmdHwyhuOcF90529SLt8A3rztaRJlPPdp7MaFt2T9/ ExoIdtlz9zq0ItGX+0BZEGVhLNMG3/sij9D8N0QB0weImKQXM+Crsg8cVVsWwSaj XzHbyzjze//yQXR29+rLDu+aaR8WjArknIy1p/xHiJN6YWSdasfqEg1WKmNjpGvb Zs9isx3IouD2yIs4qzG7/7pyFVSOabQaDZBalmKKW8pbTAnsFK3re33z6TqCBfnU zaSZ3umc428BOeMIwa2bni+pVZHH/Oq9iIFU495S9o4AqSUlx2YCDAHIEB/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULfitQfSVT3dzsbBcZA8yjll18UYwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa4a5VZKAQDtyZdkKZIuGaCXomb3XXlJVpc zftRC/M3K9YmHwJm9H/ROyqVeFRsBUNVvBc6yRZckj21mD6ct2HDIiiLqUTdJZBf z/GOAm0InMDXffMZxNgZGpI061HUC9jcdDgoXznqd5Q3JNGMfoHi2dU2QsC7SZKV 9+Zxq8CWI9D2L3oEma2Tbm5mpvdoqZ/a3J2TnSkhksC990ky87YEz7Dw+Rd72wsf 7O8uZCdAX4gK5Wyf/DueND3IzLeTYKywS8gsZB6gwKK4W3PncGN5HjxiZiyKMVTw fdMk7KDJgO2Lr90THD97Vy7Ri86EFSk/iOmJmxL4NWETqKGzMcE= -----END CERTIFICATE-----Generated at Mon Jul 21 10:30:57 2025 by rpki-client