$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: vef76MivGJnGLrTXmV2dXHl7Uis5NuieuAfJnVpbnew= Subject key identifier: D3:11:FE:28:AF:88:7E:7E:93:D4:63:16:55:F9:57:FF:07:4D:4F:77 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 36DBCC8F50987CAA464D42568094BC3455A478FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 69 Signing time: Sat 14 Jun 2025 08:00:05 +0000 Manifest this update: Sat 14 Jun 2025 07:55:05 +0000 Manifest next update: Tue 17 Jun 2025 13:03:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: N0GSL49vRRPZh1pjsoiTeNmzm/Rv7DLy00jYszfsOLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 13:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:db:cc:8f:50:98:7c:aa:46:4d:42:56:80:94:bc:34:55:a4:78:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Jun 14 07:55:05 2025 GMT Not After : Jun 17 13:03:05 2025 GMT Subject: CN=D311FE28AF887E7E93D4631655F957FF074D4F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5d:9c:55:83:d0:ea:e5:bb:a0:54:64:97:cf: 23:fc:26:aa:3f:62:ee:36:3e:0b:ac:b9:a5:88:1a: 1c:f6:c4:90:e2:34:72:91:df:03:87:e9:be:2c:f3: 21:a2:35:77:f0:15:f0:48:b3:d1:a7:ac:36:77:bb: 81:15:ba:37:46:bf:69:2d:66:31:9f:f1:57:22:af: ac:1e:15:1f:9b:a7:c6:ba:b3:e6:be:f6:c7:bf:a8: bc:14:e6:07:2a:2d:c9:28:4a:b7:2d:d5:f7:81:5b: e0:96:3f:c6:56:02:52:63:d4:2d:4d:b8:02:f6:dc: c4:2a:6f:03:79:84:5d:35:42:c0:a2:52:b8:5b:b8: 08:1f:2e:76:07:84:67:4a:aa:47:a8:a6:d9:8f:6b: 60:ee:28:66:40:a1:55:36:7a:ff:40:c9:55:df:ca: 8a:1d:e4:53:1d:e4:16:0f:93:ee:4a:ae:76:56:4d: 79:e3:6a:e1:81:99:e6:1a:63:93:62:b4:18:71:f6: 56:9b:f6:0e:8b:b2:7b:92:ae:4f:db:5d:06:be:9c: b4:5e:12:d4:89:ef:9c:c5:36:1b:36:fb:8c:20:a1: ba:8e:8c:ba:c8:83:47:2d:20:14:19:ad:73:a4:cb: da:1e:71:be:80:c0:4c:f0:42:c8:a9:10:51:96:e6: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:11:FE:28:AF:88:7E:7E:93:D4:63:16:55:F9:57:FF:07:4D:4F:77 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:28:df:62:54:5d:9d:5f:6a:6e:46:5b:76:f9:95:87:ef:89: dc:ee:0b:18:e2:d6:3e:2b:38:d0:7a:d5:d2:d6:bb:93:cf:70: e8:9b:93:59:99:27:9a:d5:7b:c1:6c:ab:ad:5f:52:dc:7c:37: 24:83:7d:3a:e6:67:92:2b:8d:3a:82:d2:b2:24:0c:cc:c3:fd: ff:8c:67:96:c0:76:e0:be:08:68:1f:e2:b4:43:bf:21:62:6e: 14:de:51:4b:88:15:7b:73:3e:ea:52:78:dd:ad:7a:33:19:ce: df:88:56:79:3e:d6:51:75:20:9b:96:fa:4c:34:27:98:3e:df: 36:87:7b:3d:53:50:ce:83:5e:99:1a:88:3b:20:df:2b:33:91: b2:87:94:4e:e6:96:e0:ef:61:cb:64:50:01:e5:fe:14:53:68: e4:c4:aa:74:3c:33:8b:a3:81:c3:11:0b:1b:62:f7:8b:0b:17: 05:62:2d:ea:82:07:a8:df:03:00:61:e7:a2:81:32:81:62:7b: b4:ad:02:3a:fa:7d:1b:8b:2d:37:68:51:f6:5d:fb:22:e9:69: e2:17:b8:61:a6:9a:60:1d:d4:55:4d:d9:fd:d3:bf:28:41:11: 87:81:6d:e3:3d:cd:84:5c:42:de:4b:26:69:9e:b0:d2:e0:df: 1e:8e:7f:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtvMj1CYfKpGTUJWgJS8NFWkePwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTA2MTQwNzU1MDVaFw0yNTA2MTcxMzAzMDVaMDMxMTAvBgNV BAMTKEQzMTFGRTI4QUY4ODdFN0U5M0Q0NjMxNjU1Rjk1N0ZGMDc0RDRGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXZxVg9Dq5bugVGSXzyP8Jqo/ Yu42PgusuaWIGhz2xJDiNHKR3wOH6b4s8yGiNXfwFfBIs9GnrDZ3u4EVujdGv2kt ZjGf8Vcir6weFR+bp8a6s+a+9se/qLwU5gcqLckoSrct1feBW+CWP8ZWAlJj1C1N uAL23MQqbwN5hF01QsCiUrhbuAgfLnYHhGdKqkeoptmPa2DuKGZAoVU2ev9AyVXf yood5FMd5BYPk+5KrnZWTXnjauGBmeYaY5NitBhx9lab9g6LsnuSrk/bXQa+nLRe EtSJ75zFNhs2+4wgobqOjLrIg0ctIBQZrXOky9oecb6AwEzwQsipEFGW5uK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xH+KK+Ifn6T1GMWVflX/wdNT3cwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4o32JUXZ1fam5GW3b5lYfvidzuCxji1j4r ONB61dLWu5PPcOibk1mZJ5rVe8Fsq61fUtx8NySDfTrmZ5IrjTqC0rIkDMzD/f+M Z5bAduC+CGgf4rRDvyFibhTeUUuIFXtzPupSeN2tejMZzt+IVnk+1lF1IJuW+kw0 J5g+3zaHez1TUM6DXpkaiDsg3yszkbKHlE7mluDvYctkUAHl/hRTaOTEqnQ8M4uj gcMRCxti94sLFwViLeqCB6jfAwBh56KBMoFie7StAjr6fRuLLTdoUfZd+yLpaeIX uGGmmmAd1FVN2f3TvyhBEYeBbeM9zYRcQt5LJmmesNLg3x6Of7Y= -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:09 2025 by rpki-client