$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: cei+oVeeDb0kfvvx5wF8ZdeQEMPOfCVuDXqUOfLhzSI= Subject key identifier: 9A:7D:02:F1:49:7A:AC:84:0E:19:15:C2:05:7B:04:E3:BE:47:B4:75 Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 7DB27BCCE86DAFA60B4D3070B8A5A4D726A3AFF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: BF Signing time: Tue 22 Sep 2026 22:34:27 +0000 Manifest this update: Tue 22 Sep 2026 22:29:27 +0000 Manifest next update: Thu 24 Sep 2026 01:20:27 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: 9nZDoYevF8eg//JMfkKCga/AAlcfHkYOHbxKdefwhFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b2:7b:cc:e8:6d:af:a6:0b:4d:30:70:b8:a5:a4:d7:26:a3:af:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Sep 22 22:29:27 2026 GMT Not After : Sep 24 01:20:27 2026 GMT Subject: CN=9A7D02F1497AAC840E1915C2057B04E3BE47B475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:f4:ff:84:e9:6f:04:18:90:c9:a4:2c:48: db:6d:31:d3:d2:6b:a0:d8:ad:ca:49:37:c5:3a:82: c7:bc:57:6c:b9:13:41:89:ce:1c:7e:9f:2b:d6:c8: 02:6f:d2:33:c2:54:0c:16:49:94:ed:b9:61:1d:89: 83:76:e1:e8:a6:65:6a:b6:a0:05:af:5e:c4:1a:b7: 54:7f:69:c0:1f:6c:56:f4:c6:42:a8:a6:5e:2e:f6: 5f:ab:5a:2c:ba:40:36:85:70:70:a9:66:5f:c8:5b: 65:65:2d:40:a1:2b:16:70:f7:45:68:2c:75:0c:d8: 2f:e0:85:2e:91:40:84:0f:fd:d2:36:64:5a:b7:18: 1b:a8:0a:45:f2:50:c0:ef:83:53:b8:2c:c3:18:b6: 8a:6d:52:40:65:8b:04:e5:df:52:df:f6:65:b4:94: 40:2b:c4:f2:ba:8c:91:e9:12:57:4e:f1:be:db:24: c4:92:d8:88:68:fb:db:73:5e:81:63:0e:2c:3f:9a: 47:76:6a:63:7c:6e:d7:32:94:3a:ad:16:8a:56:0f: 25:9a:82:83:d9:fd:bc:b6:1c:92:9e:9b:db:a9:f6: 74:a6:97:b2:08:3b:a7:70:36:21:73:b5:0e:38:06: b9:29:0b:56:cc:a1:05:89:a9:e3:6c:5f:86:c0:12: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7D:02:F1:49:7A:AC:84:0E:19:15:C2:05:7B:04:E3:BE:47:B4:75 X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:af:7d:99:9f:3c:2d:4c:aa:8d:b9:45:1c:23:d4:6b:e7:d3: 8e:e9:69:93:ce:20:cd:55:fa:ed:6d:5c:e7:3f:fb:4a:c6:d8: 60:51:9c:67:69:b6:a5:ef:e8:25:36:76:b2:fc:ef:dd:72:86: bb:aa:e8:65:f2:be:24:4e:12:c3:02:07:6d:e4:df:d4:cf:d3: be:17:33:65:e4:bf:1d:94:b6:a2:0d:03:52:03:23:64:09:1e: d3:eb:98:fb:70:94:ba:fc:b5:c9:fa:b5:7f:c4:10:a8:c5:5e: 8f:af:7c:48:52:7c:ad:d8:1f:dc:89:90:50:51:22:65:da:f1: c3:1c:c2:84:6c:0b:c4:98:a2:cc:a1:5f:41:51:bb:ac:bc:f8: bb:2e:fe:6c:e0:6d:c3:5f:0b:e2:cc:c8:d5:83:f4:28:ea:c2: da:53:19:82:42:84:48:8c:d1:e5:b1:ca:09:27:59:f3:fe:2e: cf:f4:e5:32:0e:31:d1:68:2c:8d:05:2c:eb:7b:4a:4a:fb:31: 17:cd:5a:81:bc:cc:c4:0d:d8:44:15:88:5c:36:e9:d6:1f:aa: df:6d:0e:58:8a:c8:91:66:55:b2:7f:9f:9b:bc:16:da:1e:45: ef:9b:ff:b3:53:15:e3:f5:c7:29:86:76:a1:cb:f8:1a:97:48: a6:1c:9a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbJ7zOhtr6YLTTBwuKWk1yajr/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjA5MjIyMjI5MjdaFw0yNjA5MjQwMTIwMjdaMDMxMTAvBgNV BAMTKDlBN0QwMkYxNDk3QUFDODQwRTE5MTVDMjA1N0IwNEUzQkU0N0I0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIvT/hOlvBBiQyaQsSNttMdPS a6DYrcpJN8U6gse8V2y5E0GJzhx+nyvWyAJv0jPCVAwWSZTtuWEdiYN24eimZWq2 oAWvXsQat1R/acAfbFb0xkKopl4u9l+rWiy6QDaFcHCpZl/IW2VlLUChKxZw90Vo LHUM2C/ghS6RQIQP/dI2ZFq3GBuoCkXyUMDvg1O4LMMYtoptUkBliwTl31Lf9mW0 lEArxPK6jJHpEldO8b7bJMSS2Iho+9tzXoFjDiw/mkd2amN8btcylDqtFopWDyWa goPZ/by2HJKem9up9nSml7IIO6dwNiFztQ44BrkpC1bMoQWJqeNsX4bAEpNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmn0C8Ul6rIQOGRXCBXsE475HtHUwHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6vfZmfPC1Mqo25RRwj1Gvn047paZPOIM1V +u1tXOc/+0rG2GBRnGdptqXv6CU2drL8791yhruq6GXyviROEsMCB23k39TP074X M2Xkvx2UtqINA1IDI2QJHtPrmPtwlLr8tcn6tX/EEKjFXo+vfEhSfK3YH9yJkFBR ImXa8cMcwoRsC8SYosyhX0FRu6y8+Lsu/mzgbcNfC+LMyNWD9CjqwtpTGYJChEiM 0eWxygknWfP+Ls/05TIOMdFoLI0FLOt7Skr7MRfNWoG8zMQN2EQViFw26dYfqt9t DliKyJFmVbJ/n5u8FtoeRe+b/7NTFeP1xymGdqHL+BqXSKYcmuE= -----END CERTIFICATE-----Generated at Wed Sep 23 14:38:06 2026 by rpki-client