$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: dx5VidkVL3odNthsjXIhF8z0dIrUlhwiDMKbrLHsVi4= Subject key identifier: CC:F6:DE:D6:8B:23:F3:BE:A8:E5:66:D8:74:DD:31:6A:8D:FE:47:71 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 7675BAA2E3B7BE6AE0C361A112939742CF413718 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: A9 Signing time: Sun 02 Nov 2025 14:00:05 +0000 Manifest this update: Sun 02 Nov 2025 13:55:05 +0000 Manifest next update: Wed 05 Nov 2025 16:01:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: QfbS8QP1znQnscluWjl6DEHNT8hT1zbRflgsT/+aJZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:75:ba:a2:e3:b7:be:6a:e0:c3:61:a1:12:93:97:42:cf:41:37:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Nov 2 13:55:05 2025 GMT Not After : Nov 5 16:01:05 2025 GMT Subject: CN=CCF6DED68B23F3BEA8E566D874DD316A8DFE4771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:00:95:13:a1:12:54:35:15:a7:96:53:3f: fe:7a:ef:6a:f5:05:84:88:5d:4f:c6:be:21:83:4b: 93:2a:ca:a7:45:e2:d5:35:03:60:85:53:c8:1f:80: f1:b8:40:d6:51:5b:b1:63:1e:e3:04:06:55:d5:fe: 3a:f3:f6:04:6a:fc:4f:72:2e:e1:0c:0d:fe:00:e2: 94:08:a5:10:e7:8a:ee:19:db:80:64:22:a2:54:08: 6e:c8:03:f5:52:26:ec:13:f8:af:a6:80:b6:94:5f: 69:8a:97:34:93:89:ce:92:f1:2e:ce:20:f5:72:47: cc:59:25:21:1d:15:97:bd:13:0f:fc:8a:11:5a:6a: 1b:08:04:75:73:5c:d1:88:1a:20:33:aa:23:54:14: 46:20:07:66:c1:71:d3:2c:d6:13:dc:3f:2f:a8:bb: bf:a9:70:d8:9a:68:d1:46:e9:96:e8:da:63:64:f1: 39:bd:f3:c1:59:b4:2e:37:96:ef:1d:83:86:9c:5b: 89:85:47:50:d4:38:2d:31:3d:be:02:b6:c8:44:bb: 4c:e2:4c:c4:bd:6c:c7:b3:15:0f:98:93:cb:4a:d6: e1:c6:42:61:b8:ab:dd:d7:b2:26:85:d0:71:8e:39: 45:cc:06:03:3d:63:a1:2d:aa:a8:e2:59:81:ed:4b: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F6:DE:D6:8B:23:F3:BE:A8:E5:66:D8:74:DD:31:6A:8D:FE:47:71 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:97:9c:11:11:6a:55:bc:08:95:74:dd:d0:bf:42:cb:be:30: 91:bf:99:42:47:5d:d4:19:0b:9f:31:d9:13:17:6e:bc:96:62: ed:e1:0e:c9:6d:a5:56:1a:08:73:0d:cb:76:0a:af:94:71:81: e8:35:5e:ab:f4:0a:c6:b0:c2:1e:55:de:8d:99:2c:9a:0a:07: f3:45:a6:d8:3c:80:40:7e:3c:42:80:59:a0:5a:6d:21:2b:22: 06:9f:56:3c:26:70:a1:1b:a6:90:05:05:67:95:ce:f0:3b:53: 5a:3c:85:03:c0:18:53:26:53:3f:cd:fe:e9:cc:9a:a0:89:ca: 6f:57:a4:2b:4c:97:f7:2e:61:aa:3a:e2:69:3a:32:70:e3:56: 01:5f:8d:b6:20:00:75:4a:4e:9c:04:51:45:d5:0c:cf:de:14: d9:8f:9a:4c:ad:f5:e1:27:6e:40:14:c1:3b:81:6e:11:d3:81: a0:2f:af:92:53:8e:8d:81:d3:3b:00:fb:3f:ec:13:7d:68:94: 6d:fb:de:13:df:13:61:d9:9d:db:af:eb:cc:fe:aa:ef:84:f5: 95:36:ad:dd:fe:79:86:a9:ff:35:41:db:c4:b5:25:a5:e6:bf: b7:3b:25:94:fa:e1:1d:64:1e:39:9d:61:89:0e:81:ac:04:37: 71:b4:c8:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnW6ouO3vmrgw2GhEpOXQs9BNxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTExMDIxMzU1MDVaFw0yNTExMDUxNjAxMDVaMDMxMTAvBgNV BAMTKENDRjZERUQ2OEIyM0YzQkVBOEU1NjZEODc0REQzMTZBOERGRTQ3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zgCVE6ESVDUVp5ZTP/5672r1 BYSIXU/GviGDS5MqyqdF4tU1A2CFU8gfgPG4QNZRW7FjHuMEBlXV/jrz9gRq/E9y LuEMDf4A4pQIpRDniu4Z24BkIqJUCG7IA/VSJuwT+K+mgLaUX2mKlzSTic6S8S7O IPVyR8xZJSEdFZe9Ew/8ihFaahsIBHVzXNGIGiAzqiNUFEYgB2bBcdMs1hPcPy+o u7+pcNiaaNFG6Zbo2mNk8Tm988FZtC43lu8dg4acW4mFR1DUOC0xPb4CtshEu0zi TMS9bMezFQ+Yk8tK1uHGQmG4q93XsiaF0HGOOUXMBgM9Y6EtqqjiWYHtS8a9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzPbe1osj876o5WbYdN0xao3+R3EwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCXnBERalW8CJV03dC/Qsu+MJG/mUJHXdQZ C58x2RMXbryWYu3hDsltpVYaCHMNy3YKr5Rxgeg1Xqv0Csawwh5V3o2ZLJoKB/NF ptg8gEB+PEKAWaBabSErIgafVjwmcKEbppAFBWeVzvA7U1o8hQPAGFMmUz/N/unM mqCJym9XpCtMl/cuYao64mk6MnDjVgFfjbYgAHVKTpwEUUXVDM/eFNmPmkyt9eEn bkAUwTuBbhHTgaAvr5JTjo2B0zsA+z/sE31olG373hPfE2HZnduv68z+qu+E9ZU2 rd3+eYap/zVB28S1JaXmv7c7JZT64R1kHjmdYYkOgawEN3G0yFk= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:28 2025 by rpki-client