$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: XqgM3bUJqAVJRWsxOrrpZyqEHVKkJ+BpdQuiQx038yM= Subject key identifier: 1F:99:6B:7E:F6:D0:7E:4C:83:90:7C:4A:9F:65:18:87:08:9E:D8:76 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 2F18F2A2997D2DDF4B949D0FAD37797A9857C077 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: DE Signing time: Sun 01 Mar 2026 16:50:06 +0000 Manifest this update: Sun 01 Mar 2026 16:45:06 +0000 Manifest next update: Wed 04 Mar 2026 21:45:06 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: mF8X3iAy4TGH8KH5mdIZY8b38st5vQwyEtpsFVQbhBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:18:f2:a2:99:7d:2d:df:4b:94:9d:0f:ad:37:79:7a:98:57:c0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Mar 1 16:45:06 2026 GMT Not After : Mar 4 21:45:06 2026 GMT Subject: CN=1F996B7EF6D07E4C83907C4A9F651887089ED876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:3a:b9:a6:a1:ed:20:f7:6b:a2:99:6c:24: eb:08:6b:f4:9a:38:e4:07:f5:ba:eb:cb:f8:22:07: b1:4f:dd:62:7a:b4:61:1c:77:12:62:be:e5:49:bc: a2:30:59:23:21:23:f5:55:d2:f0:93:b9:04:3c:4a: d3:4a:f3:88:99:94:d2:96:a2:22:b1:f1:26:68:6e: 2c:94:8a:06:b5:78:77:8d:dc:ff:e2:59:e0:b2:cc: d8:53:d9:1d:f3:c3:c8:a6:4b:e0:62:2a:6a:d9:65: 26:2e:13:cf:b6:32:b1:34:0d:ff:fa:4b:bf:95:a5: 7f:58:28:fd:b3:cc:32:b1:ae:78:b2:3f:e9:b8:fc: 5b:0a:2f:3c:d8:b1:75:41:11:cc:f6:8e:39:84:b3: 22:44:db:6e:f9:f7:50:5b:13:d9:18:71:cf:ad:eb: 75:e9:25:86:19:6d:f4:49:b4:a6:44:39:26:38:ee: 76:99:82:63:5c:1e:af:c8:71:43:01:c9:85:e1:07: ce:ab:ee:fd:59:3b:e9:e1:61:2f:fd:46:cc:e8:e6: d9:3e:eb:88:77:3d:5b:8c:8e:6b:ab:f4:f2:35:ff: 5e:38:05:2c:06:ac:64:7a:6a:35:ac:69:af:11:e7: 34:38:56:36:81:f3:bd:98:da:35:81:f4:a0:cd:69: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:99:6B:7E:F6:D0:7E:4C:83:90:7C:4A:9F:65:18:87:08:9E:D8:76 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7c:13:4e:82:68:cd:99:41:57:b1:31:77:76:2e:fb:f2:8b: 7e:5b:52:d0:a5:a7:e5:a5:12:22:1f:50:6c:90:72:6d:e1:2f: 5b:ba:74:2a:4a:08:f0:f9:5b:b2:39:b0:22:f5:93:71:df:ea: 1c:a2:30:56:c1:c7:84:bc:35:92:12:ba:d1:37:87:3d:dd:12: 1d:92:1b:0a:0d:c0:4b:f1:d4:96:99:09:10:ec:5e:43:a0:5e: 06:98:55:e3:53:7e:23:f4:5c:26:bc:9b:67:4f:54:38:e9:55: 14:28:e1:21:1c:8b:cc:8c:e4:bb:45:d7:86:c8:f4:3c:0f:2b: 99:03:28:0e:22:25:3c:c6:d7:8a:0c:60:45:04:01:06:e7:2d: b3:9e:a8:6b:d7:45:8c:f7:33:c2:15:42:3b:65:15:1a:5c:8c: e1:b1:b4:bc:de:15:cc:c2:68:7e:fd:de:94:5e:2a:9d:f7:a4: b7:8f:7c:b8:08:c3:00:3f:f6:74:ac:0d:73:5b:52:cb:69:51: dc:13:26:60:b2:dd:ae:c6:bc:90:37:8c:97:41:a1:9f:76:01: f6:b7:52:bc:4e:23:72:aa:35:70:6b:c7:9e:52:ca:00:15:f1: c1:ea:72:19:8d:7d:e2:d8:91:33:79:c6:e4:02:61:52:e8:9f: cf:b0:23:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxjyopl9Ld9LlJ0PrTd5ephXwHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNjAzMDExNjQ1MDZaFw0yNjAzMDQyMTQ1MDZaMDMxMTAvBgNV BAMTKDFGOTk2QjdFRjZEMDdFNEM4MzkwN0M0QTlGNjUxODg3MDg5RUQ4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1djq5pqHtIPdroplsJOsIa/Sa OOQH9brry/giB7FP3WJ6tGEcdxJivuVJvKIwWSMhI/VV0vCTuQQ8StNK84iZlNKW oiKx8SZobiyUiga1eHeN3P/iWeCyzNhT2R3zw8imS+BiKmrZZSYuE8+2MrE0Df/6 S7+VpX9YKP2zzDKxrniyP+m4/FsKLzzYsXVBEcz2jjmEsyJE227591BbE9kYcc+t 63XpJYYZbfRJtKZEOSY47naZgmNcHq/IcUMByYXhB86r7v1ZO+nhYS/9Rszo5tk+ 64h3PVuMjmur9PI1/144BSwGrGR6ajWsaa8R5zQ4VjaB872Y2jWB9KDNad4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH5lrfvbQfkyDkHxKn2UYhwie2HYwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE18E06CaM2ZQVexMXd2Lvvyi35bUtClp+Wl EiIfUGyQcm3hL1u6dCpKCPD5W7I5sCL1k3Hf6hyiMFbBx4S8NZISutE3hz3dEh2S GwoNwEvx1JaZCRDsXkOgXgaYVeNTfiP0XCa8m2dPVDjpVRQo4SEci8yM5LtF14bI 9DwPK5kDKA4iJTzG14oMYEUEAQbnLbOeqGvXRYz3M8IVQjtlFRpcjOGxtLzeFczC aH793pReKp33pLePfLgIwwA/9nSsDXNbUstpUdwTJmCy3a7GvJA3jJdBoZ92Afa3 UrxOI3KqNXBrx55SygAV8cHqchmNfeLYkTN5xuQCYVLon8+wI1o= -----END CERTIFICATE-----Generated at Mon Mar 2 08:34:21 2026 by rpki-client