$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: mND0m9iuKZy3C8J/ivw/zS7yTKjLiUOdKPMBMHg36pA= Subject key identifier: B5:50:6B:76:99:4D:34:2F:CC:3D:01:24:37:A3:06:2F:69:21:0F:9F Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 5D965660859E4945B4B322010B21DD6F0B68682E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: F4 Signing time: Sun 19 Apr 2026 00:20:06 +0000 Manifest this update: Sun 19 Apr 2026 00:15:06 +0000 Manifest next update: Wed 22 Apr 2026 04:12:06 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: TCG7RBsioFNtQRBCulRzQY8ooY4qScs2AQsV84ZTn/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:96:56:60:85:9e:49:45:b4:b3:22:01:0b:21:dd:6f:0b:68:68:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Apr 19 00:15:06 2026 GMT Not After : Apr 22 04:12:06 2026 GMT Subject: CN=B5506B76994D342FCC3D012437A3062F69210F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:34:b1:06:2c:7b:7a:b5:50:21:38:2d:c7:7b: 98:02:37:98:34:af:48:b2:d2:e7:ef:38:14:89:75: 64:9e:68:d7:e4:89:30:0f:bf:5e:26:64:a0:db:d1: e2:a4:61:78:11:a4:55:ca:88:85:2a:59:dc:a6:58: 04:cf:57:7c:5e:8d:6a:cb:82:47:c8:25:43:cc:a5: bc:3c:e1:bd:47:58:f9:89:cf:af:c5:0c:4e:b3:ec: 4a:b0:74:a8:13:d4:27:df:dd:78:53:39:5a:93:e0: 7f:b8:da:2d:3e:ea:5e:07:31:de:fd:54:7f:61:5a: 2f:18:43:22:58:9d:de:6e:00:8b:e3:3c:1b:cd:7c: ef:b6:ed:9f:1c:8e:5f:b0:9a:35:70:9b:19:72:44: 9f:bc:65:81:2d:c7:ec:a9:48:57:2c:7b:34:61:46: 16:18:80:d2:b6:9f:f9:b0:86:2e:d5:d9:be:19:e9: ad:57:4d:55:bd:15:06:e3:ca:15:37:cc:00:2b:1b: 96:3c:ca:e7:12:68:6c:9b:b0:8a:e9:b6:d0:7e:48: ac:d0:28:e1:fe:6f:77:eb:91:2d:3d:4f:2f:12:b2: b2:0b:15:89:c9:fa:3d:a2:e3:95:9c:56:c8:00:38: 71:fd:1f:7d:09:b5:ea:52:8b:33:6f:b7:5e:c9:79: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:6B:76:99:4D:34:2F:CC:3D:01:24:37:A3:06:2F:69:21:0F:9F X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:41:9e:52:73:b5:b9:ec:e3:a3:ba:95:bf:3b:ff:fd:9a:88: 8f:65:fb:a8:77:e9:99:e5:9c:5a:f7:25:7d:b9:15:1c:fb:c7: 6e:60:79:91:c3:38:62:2f:64:4a:11:82:0e:4a:39:61:09:88: 98:ac:52:3d:d2:60:1a:1a:c8:16:3a:b2:91:54:02:10:38:d2: b7:2a:ee:20:c7:95:f0:7a:e2:6e:5e:93:82:6e:aa:17:2c:21: f8:af:c4:a4:9e:70:62:76:52:3a:32:5d:67:1e:cc:1f:e2:19: c9:60:cf:eb:8e:03:db:b9:be:9a:53:e8:85:aa:79:13:71:32: cd:16:5f:1b:17:03:8d:92:37:a0:9f:b0:c7:bd:20:08:87:cb: b2:5d:36:7e:ed:71:ef:ca:5b:60:f8:b8:71:a2:08:f1:d2:36: b6:63:5f:4c:b2:da:81:eb:04:a9:c3:e2:58:a4:15:b5:fc:8b: bb:fd:ee:bf:86:c5:00:ea:6b:4c:30:05:0f:49:3e:34:c5:66: 1a:1d:8b:63:5b:df:c3:71:fb:08:e2:6e:00:a5:3b:ed:94:11: 98:21:3a:7e:19:f5:4f:14:ce:ca:2a:56:fb:4c:df:97:f7:12: e0:19:ef:56:8c:71:a2:73:1b:08:2e:34:d3:41:ca:2b:89:75: 2c:e1:04:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZZWYIWeSUW0syIBCyHdbwtoaC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNjA0MTkwMDE1MDZaFw0yNjA0MjIwNDEyMDZaMDMxMTAvBgNV BAMTKEI1NTA2Qjc2OTk0RDM0MkZDQzNEMDEyNDM3QTMwNjJGNjkyMTBGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrNLEGLHt6tVAhOC3He5gCN5g0 r0iy0ufvOBSJdWSeaNfkiTAPv14mZKDb0eKkYXgRpFXKiIUqWdymWATPV3xejWrL gkfIJUPMpbw84b1HWPmJz6/FDE6z7EqwdKgT1Cff3XhTOVqT4H+42i0+6l4HMd79 VH9hWi8YQyJYnd5uAIvjPBvNfO+27Z8cjl+wmjVwmxlyRJ+8ZYEtx+ypSFcsezRh RhYYgNK2n/mwhi7V2b4Z6a1XTVW9FQbjyhU3zAArG5Y8yucSaGybsIrpttB+SKzQ KOH+b3frkS09Ty8SsrILFYnJ+j2i45WcVsgAOHH9H30JtepSizNvt17JeUcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtVBrdplNNC/MPQEkN6MGL2khD58wHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApBnlJztbns46O6lb87//2aiI9l+6h36Znl nFr3JX25FRz7x25geZHDOGIvZEoRgg5KOWEJiJisUj3SYBoayBY6spFUAhA40rcq 7iDHlfB64m5ek4JuqhcsIfivxKSecGJ2UjoyXWcezB/iGclgz+uOA9u5vppT6IWq eRNxMs0WXxsXA42SN6CfsMe9IAiHy7JdNn7tce/KW2D4uHGiCPHSNrZjX0yy2oHr BKnD4likFbX8i7v97r+GxQDqa0wwBQ9JPjTFZhodi2Nb38Nx+wjibgClO+2UEZgh On4Z9U8UzsoqVvtM35f3EuAZ71aMcaJzGwguNNNByiuJdSzhBM4= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:41 2026 by rpki-client