$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: boGKebQoQvzof/TmlqrGvrrSYqgLtBsfi87cGNU3JMY= Subject key identifier: 3B:3C:3C:26:E8:42:EF:2D:64:23:9E:16:C4:1F:B8:57:75:CF:15:8A Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 56279B86D5B791D5BF2C6F7349C36BC8796C8081 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 06:17:02 +0000 Manifest this update: Fri 24 Jul 2026 06:12:02 +0000 Manifest next update: Sat 25 Jul 2026 08:37:02 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: rAaj7ZpCkN9gI1+XFnkUmFWcAoPCiUY5oFIf+p8bZm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:27:9b:86:d5:b7:91:d5:bf:2c:6f:73:49:c3:6b:c8:79:6c:80:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Jul 24 06:12:02 2026 GMT Not After : Jul 25 08:37:02 2026 GMT Subject: CN=3B3C3C26E842EF2D64239E16C41FB85775CF158A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:5f:81:04:b4:85:f6:39:8b:56:c1:d1:5a: 96:b3:9b:3d:3c:af:9c:95:1f:25:81:3b:d1:ce:15: 5f:a6:b4:4f:9e:53:7d:8e:1d:71:99:f0:ff:53:7b: 8e:21:19:d4:47:3a:f0:fb:99:fb:4e:da:6b:88:9f: f5:91:0c:ca:26:04:b9:e2:29:82:f1:7c:c1:3a:ab: b6:de:da:cd:28:49:ef:29:eb:b1:8f:33:cc:ff:9e: 25:9e:d6:19:ee:91:f7:9f:8e:1b:18:f2:8b:81:4e: 76:96:b1:f1:e7:ce:52:76:58:1a:f8:60:5d:b3:78: 5b:ae:87:f4:4f:2e:77:13:ce:fa:ee:a4:1b:40:fb: b1:84:7d:47:e5:3f:02:1a:ea:d2:65:f0:e4:53:c8: 87:9f:4b:62:0c:8f:53:46:fd:6c:a1:90:1c:c6:e1: 20:47:c8:2e:6a:2e:0b:d6:21:3a:21:73:78:5f:a5: 0d:23:67:7b:08:1b:09:53:47:26:6a:c5:2d:c6:f1: 48:84:7c:d3:4a:9b:c1:9d:4c:60:63:17:40:21:7e: 2f:22:7b:ef:c5:e8:34:e7:1d:1f:7e:f7:76:be:82: 42:8c:af:b9:1e:43:d5:42:db:4c:eb:93:fb:0d:20: 8d:15:21:63:00:97:dc:d4:8f:e1:0b:b3:4e:f1:74: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3C:3C:26:E8:42:EF:2D:64:23:9E:16:C4:1F:B8:57:75:CF:15:8A X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b1:bb:fe:1c:17:25:d3:b1:7e:a5:cb:47:8e:be:b6:5b:b0: 2f:9a:af:38:e1:42:46:70:9d:22:f5:92:92:bd:c2:ba:63:f5: 9f:00:b0:7f:c8:e2:22:66:07:44:93:6f:51:b5:68:c9:1e:06: ef:65:33:4a:55:df:0c:ce:9a:cc:da:22:6d:79:a1:f4:49:3b: b2:20:c8:92:52:ce:80:37:ea:bf:86:ab:cd:7c:42:e0:32:42: 15:b0:c1:3f:0e:c2:8e:5b:18:2c:3c:6a:3e:ff:df:c2:41:c6: d3:e8:a8:c4:fe:91:ee:29:85:e1:0c:6c:c4:a9:1d:b2:9c:f1: f0:10:ed:6b:f0:6c:38:8f:29:dc:e1:9d:b7:97:62:3f:7d:1b: 34:9c:ea:1e:a6:30:c1:70:9b:0e:9c:12:30:fb:98:b1:85:10: ab:86:54:1b:99:57:62:a3:fe:2b:58:9c:af:cb:61:e7:ac:49: 8f:f6:ab:52:83:d9:16:5d:63:eb:2d:0f:d0:09:66:8d:29:3b: fa:09:d3:51:7e:d3:80:4c:64:9d:f2:7e:b0:1f:5b:e2:58:0e: 18:ba:99:b8:d2:90:50:eb:df:5f:84:d8:b5:6a:f6:c1:40:2f: 52:40:78:d5:88:21:71:79:0b:a6:d1:51:a1:4d:22:fb:55:9a: bb:1b:79:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViebhtW3kdW/LG9zScNryHlsgIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjA3MjQwNjEyMDJaFw0yNjA3MjUwODM3MDJaMDMxMTAvBgNV BAMTKDNCM0MzQzI2RTg0MkVGMkQ2NDIzOUUxNkM0MUZCODU3NzVDRjE1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrH1+BBLSF9jmLVsHRWpazmz08 r5yVHyWBO9HOFV+mtE+eU32OHXGZ8P9Te44hGdRHOvD7mftO2muIn/WRDMomBLni KYLxfME6q7be2s0oSe8p67GPM8z/niWe1hnukfefjhsY8ouBTnaWsfHnzlJ2WBr4 YF2zeFuuh/RPLncTzvrupBtA+7GEfUflPwIa6tJl8ORTyIefS2IMj1NG/WyhkBzG 4SBHyC5qLgvWITohc3hfpQ0jZ3sIGwlTRyZqxS3G8UiEfNNKm8GdTGBjF0Ahfi8i e+/F6DTnHR9+93a+gkKMr7keQ9VC20zrk/sNII0VIWMAl9zUj+ELs07xdHvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzw8JuhC7y1kI54WxB+4V3XPFYowHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6xu/4cFyXTsX6ly0eOvrZbsC+arzjhQkZw nSL1kpK9wrpj9Z8AsH/I4iJmB0STb1G1aMkeBu9lM0pV3wzOmszaIm15ofRJO7Ig yJJSzoA36r+Gq818QuAyQhWwwT8Owo5bGCw8aj7/38JBxtPoqMT+ke4pheEMbMSp HbKc8fAQ7WvwbDiPKdzhnbeXYj99GzSc6h6mMMFwmw6cEjD7mLGFEKuGVBuZV2Kj /itYnK/LYeesSY/2q1KD2RZdY+stD9AJZo0pO/oJ01F+04BMZJ3yfrAfW+JYDhi6 mbjSkFDr31+E2LVq9sFAL1JAeNWIIXF5C6bRUaFNIvtVmrsbeYE= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:40 2026 by rpki-client