$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: LiaVvfQs9dm66OIvd3AmKmCWOB8OB2rDS8Kq1opFvhU= Subject key identifier: 59:5A:AF:B6:DE:3C:C9:90:31:5F:BD:20:12:97:BF:DB:73:A1:3B:80 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 151B5F0ACC8CED1DC21FFE5C3C402526E8758457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 8F Signing time: Sat 06 Sep 2025 14:30:05 +0000 Manifest this update: Sat 06 Sep 2025 14:25:05 +0000 Manifest next update: Tue 09 Sep 2025 14:41:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: G87IP4BQuo8v1bZpSIaZtPYr7Noct3/U4ej35PF7dqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1b:5f:0a:cc:8c:ed:1d:c2:1f:fe:5c:3c:40:25:26:e8:75:84:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Sep 6 14:25:05 2025 GMT Not After : Sep 9 14:41:05 2025 GMT Subject: CN=595AAFB6DE3CC990315FBD201297BFDB73A13B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:d7:b1:56:62:1f:e6:47:82:5b:50:79:66: e6:ea:c1:93:e6:1c:87:65:25:aa:ca:7e:3b:6a:fc: 75:56:79:fb:66:36:6d:aa:97:aa:f1:5e:2e:b8:bb: e5:7e:c6:3c:2c:dd:08:49:f2:e6:cc:59:0b:78:e2: f7:06:76:a6:0e:14:da:04:f6:93:66:fd:88:85:17: 31:5e:a4:26:d2:87:ba:08:c3:ce:54:d4:9e:0a:a6: e2:56:5d:9c:1e:ad:83:dc:2b:81:d9:2e:8d:eb:7f: 43:0c:0a:44:42:c8:ae:71:41:b0:36:a4:4a:3e:13: 63:7f:08:ae:04:db:a1:e9:07:c0:5b:04:57:4b:67: 53:36:ca:33:d9:57:44:6d:48:48:05:94:70:7d:d9: 74:04:20:f4:85:b3:d9:6c:df:45:00:3d:8f:80:51: 78:66:49:0e:53:53:46:db:cc:b8:66:73:13:e0:2b: fe:15:f0:2c:7d:28:f4:4f:ff:d1:e5:67:84:43:bb: d7:e9:30:8d:b3:82:a7:0d:d4:a4:f3:2c:d4:29:a9: 90:c5:62:b4:eb:d7:bd:7d:60:ca:42:0b:63:d2:4e: 74:0d:eb:26:8a:51:d8:03:ba:1f:a8:4c:bf:2c:1a: 89:9a:31:78:24:e5:ff:2a:e8:25:dc:6f:0b:db:58: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5A:AF:B6:DE:3C:C9:90:31:5F:BD:20:12:97:BF:DB:73:A1:3B:80 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8b:b7:ad:74:e2:ed:11:74:76:62:b4:d3:0a:83:94:35:90: 30:aa:9d:76:0b:88:6f:ba:33:4e:bf:72:1c:a6:f6:c8:ee:cd: 8a:7d:04:5b:42:26:77:d3:ce:c6:76:20:59:a9:ff:a0:fe:3f: 1e:d2:f6:59:d0:03:57:9b:8a:db:c5:9a:4b:ed:14:66:e5:e8: 66:04:a2:cf:67:0f:cc:03:5a:a5:bb:61:fd:5b:79:e7:5a:37: f8:a2:07:4c:de:7d:88:73:ad:4e:2f:66:de:6c:a4:fb:a9:1f: e4:5a:3b:d8:f1:0b:63:b2:52:f1:f7:70:c9:a3:f6:7f:60:51: 61:70:b1:83:9d:26:53:32:52:91:05:c7:cb:db:a6:4f:dd:45: 41:e8:ee:04:9f:02:1b:4b:bf:0d:2f:38:87:fe:7d:82:99:6a: 1c:19:19:e4:a4:fe:bc:59:b8:1b:1f:24:16:95:ff:c3:a9:c8: d3:54:32:0e:9a:58:f9:ca:8c:5c:c8:05:7f:80:dc:f7:6c:ac: 57:13:62:b2:9a:6e:64:e7:63:47:67:9c:7a:0f:80:cc:3e:84: 68:34:a7:5f:a5:d3:ff:25:ec:86:3c:9c:9e:e6:21:a9:da:ee: 41:23:c6:0d:89:f1:12:3f:e4:f1:d6:53:d3:2f:8d:c4:68:e9: 1b:a2:5c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRtfCsyM7R3CH/5cPEAlJuh1hFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA5MDYxNDI1MDVaFw0yNTA5MDkxNDQxMDVaMDMxMTAvBgNV BAMTKDU5NUFBRkI2REUzQ0M5OTAzMTVGQkQyMDEyOTdCRkRCNzNBMTNCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBM9exVmIf5keCW1B5ZubqwZPm HIdlJarKfjtq/HVWeftmNm2ql6rxXi64u+V+xjws3QhJ8ubMWQt44vcGdqYOFNoE 9pNm/YiFFzFepCbSh7oIw85U1J4KpuJWXZwerYPcK4HZLo3rf0MMCkRCyK5xQbA2 pEo+E2N/CK4E26HpB8BbBFdLZ1M2yjPZV0RtSEgFlHB92XQEIPSFs9ls30UAPY+A UXhmSQ5TU0bbzLhmcxPgK/4V8Cx9KPRP/9HlZ4RDu9fpMI2zgqcN1KTzLNQpqZDF YrTr1719YMpCC2PSTnQN6yaKUdgDuh+oTL8sGomaMXgk5f8q6CXcbwvbWG0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWVqvtt48yZAxX70gEpe/23OhO4AwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyLt6104u0RdHZitNMKg5Q1kDCqnXYLiG+6 M06/chym9sjuzYp9BFtCJnfTzsZ2IFmp/6D+Px7S9lnQA1ebitvFmkvtFGbl6GYE os9nD8wDWqW7Yf1beedaN/iiB0zefYhzrU4vZt5spPupH+RaO9jxC2OyUvH3cMmj 9n9gUWFwsYOdJlMyUpEFx8vbpk/dRUHo7gSfAhtLvw0vOIf+fYKZahwZGeSk/rxZ uBsfJBaV/8OpyNNUMg6aWPnKjFzIBX+A3PdsrFcTYrKabmTnY0dnnHoPgMw+hGg0 p1+l0/8l7IY8nJ7mIana7kEjxg2J8RI/5PHWU9MvjcRo6RuiXDU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:48 2025 by rpki-client