$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: 7UTrc0EjWsLWVoQjABZnA1tMDpvu3ftWMo7z6ysnr5Y= Subject key identifier: 1D:73:1E:10:E6:75:C0:4A:ED:C0:A7:F3:DA:C6:EB:15:8E:64:15:91 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 189644C51C9DC6660F8044B5EEB2CDC744F4B037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 4A Signing time: Sat 05 Apr 2025 09:40:05 +0000 Manifest this update: Sat 05 Apr 2025 09:35:05 +0000 Manifest next update: Tue 08 Apr 2025 18:06:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: XxgpndJf/zHBE+QDANKy/shWPRejeNg2U/V0jEgCC9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:96:44:c5:1c:9d:c6:66:0f:80:44:b5:ee:b2:cd:c7:44:f4:b0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Apr 5 09:35:05 2025 GMT Not After : Apr 8 18:06:05 2025 GMT Subject: CN=1D731E10E675C04AEDC0A7F3DAC6EB158E641591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:aa:e3:78:06:20:e8:d5:29:55:89:78:6a: 1d:0e:63:a5:7e:3e:d7:09:45:ff:95:cc:76:56:da: 8a:98:34:e7:d1:59:a3:14:65:45:6f:ad:46:00:68: 5e:5f:d6:0b:99:b9:58:28:42:21:a7:31:1e:52:4c: 51:78:26:bb:9a:e8:96:51:9e:e5:36:c2:06:a4:b7: 9c:cd:3e:83:47:1e:bd:63:7a:95:b9:7c:a6:2c:0d: 97:63:83:82:98:65:bf:9b:5f:08:90:d1:ee:9c:f2: f7:f4:a1:c7:c6:29:b4:7b:16:dd:43:a0:fb:bb:8b: 9c:47:91:8e:6a:ee:fb:76:d6:3c:87:4f:23:f0:c2: 38:32:10:33:be:7b:2c:6d:a3:32:cf:98:02:64:4f: 84:90:a7:3c:95:a0:29:56:7f:28:0e:09:c6:c2:9d: c2:48:4c:60:d4:0d:fe:d1:f0:02:1c:cb:e3:fb:0a: c8:5f:c3:b4:e2:9e:b1:e2:e8:9d:28:42:de:50:65: 52:ae:8f:98:44:c8:b0:f2:23:de:9f:d1:29:9b:cc: 33:9a:4e:fa:4a:f7:74:28:2c:e8:d0:90:78:f1:ef: e0:79:79:38:e5:e9:e7:c6:75:e5:34:b6:bb:36:87: e8:3b:b2:03:13:ab:ac:0d:e4:03:2a:6b:5f:37:cc: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:73:1E:10:E6:75:C0:4A:ED:C0:A7:F3:DA:C6:EB:15:8E:64:15:91 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4a:ed:a5:4b:51:c9:13:9e:21:78:59:67:22:42:26:00:cf: b1:c9:15:17:6c:3d:e4:5f:c2:ab:51:e5:58:7a:40:9b:36:ba: 9c:d3:47:44:d2:df:16:14:af:dd:42:8a:1c:08:73:76:3d:ca: a3:2a:ba:1a:46:8f:fd:42:d4:70:4d:06:bd:a5:d1:f1:a0:70: 29:a4:52:ff:04:36:92:5d:c5:9a:22:94:f3:e5:2d:d7:07:f8: ba:66:4a:23:a6:af:ab:ea:17:1e:8a:f4:d1:6c:41:3c:a7:f2: e0:05:e0:86:5e:24:cb:7b:8e:0b:7c:88:90:df:b4:8e:fb:85: 34:93:52:60:58:c7:cc:6b:35:70:53:50:78:24:0e:88:40:7b: f4:2d:99:a8:90:a5:75:f3:d9:4b:a4:54:32:ed:30:3d:a1:b1: c5:7e:b4:12:b9:c9:85:91:d4:b8:03:9e:16:e0:f9:c8:66:28: b7:65:97:80:b5:4a:40:1a:e5:64:04:a0:ba:bd:17:80:f2:ba: fa:5d:ad:30:ba:2a:6f:69:62:ff:10:d0:10:33:6d:09:2e:93: eb:16:60:1d:3d:8c:74:ee:63:73:c4:87:dd:c1:ff:15:bc:36: 11:c3:25:91:a9:5a:64:70:3e:4d:df:5b:6f:9b:19:f6:82:ff: b9:26:ca:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJZExRydxmYPgES17rLNx0T0sDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA0MDUwOTM1MDVaFw0yNTA0MDgxODA2MDVaMDMxMTAvBgNV BAMTKDFENzMxRTEwRTY3NUMwNEFFREMwQTdGM0RBQzZFQjE1OEU2NDE1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmqrjeAYg6NUpVYl4ah0OY6V+ PtcJRf+VzHZW2oqYNOfRWaMUZUVvrUYAaF5f1guZuVgoQiGnMR5STFF4Jrua6JZR nuU2wgakt5zNPoNHHr1jepW5fKYsDZdjg4KYZb+bXwiQ0e6c8vf0ocfGKbR7Ft1D oPu7i5xHkY5q7vt21jyHTyPwwjgyEDO+eyxtozLPmAJkT4SQpzyVoClWfygOCcbC ncJITGDUDf7R8AIcy+P7Cshfw7TinrHi6J0oQt5QZVKuj5hEyLDyI96f0SmbzDOa TvpK93QoLOjQkHjx7+B5eTjl6efGdeU0trs2h+g7sgMTq6wN5AMqa183zHFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHXMeEOZ1wErtwKfz2sbrFY5kFZEwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5K7aVLUckTniF4WWciQiYAz7HJFRdsPeRf wqtR5Vh6QJs2upzTR0TS3xYUr91CihwIc3Y9yqMquhpGj/1C1HBNBr2l0fGgcCmk Uv8ENpJdxZoilPPlLdcH+LpmSiOmr6vqFx6K9NFsQTyn8uAF4IZeJMt7jgt8iJDf tI77hTSTUmBYx8xrNXBTUHgkDohAe/QtmaiQpXXz2UukVDLtMD2hscV+tBK5yYWR 1LgDnhbg+chmKLdll4C1SkAa5WQEoLq9F4DyuvpdrTC6Km9pYv8Q0BAzbQkuk+sW YB09jHTuY3PEh93B/xW8NhHDJZGpWmRwPk3fW2+bGfaC/7kmyi0= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:33 2025 by rpki-client