$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: 0vMzy6heT9Pzt0rxeHVjmbTdhF01vU2o6doxs2+QuQw= Subject key identifier: F7:DA:36:C1:A6:0F:24:D2:F8:87:DC:15:9E:3F:43:B5:34:3B:6A:BB Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 53D0B039CEEDB9C12C51C08A475416674DC225E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 80 Signing time: Mon 04 Aug 2025 23:00:05 +0000 Manifest this update: Mon 04 Aug 2025 22:55:05 +0000 Manifest next update: Fri 08 Aug 2025 08:00:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: fszSE8I61qIbGk+QQOwpdu3yH0vwLS7HcbY37+qMBMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d0:b0:39:ce:ed:b9:c1:2c:51:c0:8a:47:54:16:67:4d:c2:25:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Aug 4 22:55:05 2025 GMT Not After : Aug 8 08:00:05 2025 GMT Subject: CN=F7DA36C1A60F24D2F887DC159E3F43B5343B6ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:0d:99:ff:28:68:de:c0:92:8c:54:80:29: 07:54:3a:b8:b6:dc:b5:2d:7d:2f:ba:e2:b7:59:f5: 2e:6e:86:66:43:6a:37:14:38:de:22:e1:88:ae:e1: e1:2a:24:93:95:b1:de:07:9d:91:c8:e4:95:d7:e4: ab:d1:a7:3a:51:03:30:3e:7c:d6:e6:c5:e7:d5:ae: 26:8a:5b:e3:c9:69:81:22:8e:d9:84:2b:32:41:eb: 31:e9:76:c1:cd:23:68:54:a1:44:e1:8c:86:3b:74: a3:25:d7:0d:97:e3:41:4a:54:26:47:3b:30:1c:ae: 84:8e:96:bc:02:5b:a0:ce:98:5e:2a:fb:31:45:dc: 6f:7f:d6:f6:2e:97:f1:8f:a4:a9:88:98:36:0a:5f: 29:f0:db:5a:a5:a9:2c:ba:e6:56:c2:4c:16:24:f1: 62:9f:2a:e2:8e:3c:8c:a0:b9:25:6e:d4:e4:7e:0b: 46:3b:62:73:3b:f2:9a:fb:de:52:00:e9:02:c1:6d: f4:bf:ff:ba:e2:99:dd:fb:1f:28:d7:45:3e:24:92: 22:f7:a4:ef:26:fe:3b:30:2c:88:7b:93:37:48:a1: 16:2b:81:38:d5:26:2e:c1:8e:3b:60:c6:6b:f7:4e: 25:79:3b:94:a9:8e:c7:a0:b5:08:a4:07:5d:ea:e8: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:36:C1:A6:0F:24:D2:F8:87:DC:15:9E:3F:43:B5:34:3B:6A:BB X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a7:74:a5:c7:21:3f:a4:b4:8b:c7:ea:78:15:44:42:48:1e: 11:33:8b:0a:1c:ff:bd:49:e1:17:b1:c2:9f:00:67:38:75:9b: 0b:c3:73:18:00:d6:e8:b8:23:15:c0:f9:70:50:35:cf:e3:2e: af:50:e2:39:8d:1c:61:03:ca:01:c7:4a:22:d5:ff:1f:f6:84: eb:93:cc:08:7b:54:91:15:80:23:a3:1d:3e:81:35:80:31:08: c8:e2:ed:f4:bc:90:32:e1:36:40:46:a3:62:75:55:56:2e:3e: ba:c1:69:e1:53:0d:33:bc:df:f0:cd:ed:b2:2c:55:bd:1f:be: cd:b9:58:26:77:3f:63:14:2c:0f:36:e0:8d:b4:96:fc:49:70: 29:6b:44:20:12:fd:fc:b3:a2:c5:10:82:1a:f4:dd:ae:c1:ca: 4c:a8:42:e4:3a:73:bd:e7:e8:81:fd:91:7f:9e:fd:fb:65:0a: bc:cf:32:c8:6c:cd:bc:f8:3d:a4:b4:3b:1d:ac:26:3b:21:5e: 40:15:3b:37:0f:4d:46:16:42:4d:10:02:98:9c:49:ba:5f:f7: 07:17:0a:e6:3d:a0:83:bf:db:9e:fa:6b:1f:b6:72:8a:78:61: 2b:5f:68:fd:e0:49:d7:18:61:e1:8c:b4:12:05:27:d3:c2:c2: 1c:4b:77:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9CwOc7tucEsUcCKR1QWZ03CJeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA4MDQyMjU1MDVaFw0yNTA4MDgwODAwMDVaMDMxMTAvBgNV BAMTKEY3REEzNkMxQTYwRjI0RDJGODg3REMxNTlFM0Y0M0I1MzQzQjZBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzg2Z/yho3sCSjFSAKQdUOri2 3LUtfS+64rdZ9S5uhmZDajcUON4i4Yiu4eEqJJOVsd4HnZHI5JXX5KvRpzpRAzA+ fNbmxefVriaKW+PJaYEijtmEKzJB6zHpdsHNI2hUoUThjIY7dKMl1w2X40FKVCZH OzAcroSOlrwCW6DOmF4q+zFF3G9/1vYul/GPpKmImDYKXynw21qlqSy65lbCTBYk 8WKfKuKOPIyguSVu1OR+C0Y7YnM78pr73lIA6QLBbfS//7rimd37HyjXRT4kkiL3 pO8m/jswLIh7kzdIoRYrgTjVJi7Bjjtgxmv3TiV5O5SpjsegtQikB13q6KRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99o2waYPJNL4h9wVnj9DtTQ7arswHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2ndKXHIT+ktIvH6ngVREJIHhEziwoc/71J 4Rexwp8AZzh1mwvDcxgA1ui4IxXA+XBQNc/jLq9Q4jmNHGEDygHHSiLV/x/2hOuT zAh7VJEVgCOjHT6BNYAxCMji7fS8kDLhNkBGo2J1VVYuPrrBaeFTDTO83/DN7bIs Vb0fvs25WCZ3P2MULA824I20lvxJcClrRCAS/fyzosUQghr03a7BykyoQuQ6c73n 6IH9kX+e/ftlCrzPMshszbz4PaS0Ox2sJjshXkAVOzcPTUYWQk0QApicSbpf9wcX CuY9oIO/2576ax+2cop4YStfaP3gSdcYYeGMtBIFJ9PCwhxLdwU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:03 2025 by rpki-client