$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: t9hXelUM05KgVFdfQA5RZ4atfchP9IZwkM7PqbEZRCc= Subject key identifier: 27:A7:33:57:6B:95:12:E5:E3:52:47:99:91:7A:54:5F:06:28:26:DA Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 22807F7E4609F4B8C676729DCD63F546063055FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 04:55:21 +0000 Manifest this update: Sat 14 Nov 2026 04:50:21 +0000 Manifest next update: Sun 15 Nov 2026 07:43:21 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: HqsH60T8SgljSKzYJ4Vu6rRgzT1YVGcM/5RnYYNWj6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:80:7f:7e:46:09:f4:b8:c6:76:72:9d:cd:63:f5:46:06:30:55:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Nov 14 04:50:21 2026 GMT Not After : Nov 15 07:43:21 2026 GMT Subject: CN=27A733576B9512E5E3524799917A545F062826DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:6d:1d:19:09:45:2e:c5:23:73:77:cc:33: 4b:32:f5:75:5e:f2:db:1b:4f:74:f8:bd:77:ad:5a: 6f:3a:36:fc:58:ba:96:5c:62:67:ec:7c:6e:ed:ed: 79:07:89:e2:61:48:6d:63:da:4f:9c:87:61:80:f7: ba:b8:c2:49:cb:63:99:b9:5f:14:7d:f8:53:61:2d: 08:8a:8c:11:27:8b:9f:ad:d4:54:2a:c7:3e:03:1a: 0d:c1:b9:ae:e0:ce:3d:94:7c:8d:88:7d:8b:77:70: 8a:97:9f:b8:1a:35:d6:e5:ba:b4:fc:1a:06:dd:8b: 8e:60:d5:20:20:08:05:68:87:99:06:c2:b6:1b:5b: d8:af:54:e1:29:32:f8:06:07:f6:a8:7b:93:db:74: 76:7d:0f:6a:ee:ff:7b:71:19:8f:98:9a:c9:25:7d: b4:cd:4d:5c:7c:6a:1a:ee:a5:dc:b9:be:33:24:07: 93:7f:69:9c:2a:b6:52:24:ff:b7:40:ec:7e:43:79: 32:27:13:2d:52:7a:56:75:6e:21:e5:0d:e3:c5:7e: d5:61:39:75:52:46:d7:4c:75:67:cc:dd:fc:58:b3: 13:4f:6f:a0:9c:77:e0:b7:a2:94:29:60:83:5b:f3: 71:45:f9:f2:86:b1:3b:2d:c1:3e:93:9b:96:ca:63: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A7:33:57:6B:95:12:E5:E3:52:47:99:91:7A:54:5F:06:28:26:DA X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:68:15:cd:fd:f9:6c:44:5b:a3:96:17:62:72:21:81:cf:c3: bc:c9:67:cf:12:2c:e5:18:87:74:63:b5:58:ea:16:9f:8a:b6: fd:d1:72:01:d5:48:b7:46:d9:0f:2a:b2:02:a2:3e:2f:75:23: c4:9b:57:eb:b2:bf:9b:33:92:1e:62:0c:eb:b5:fa:a0:57:f9: d0:e7:6f:a4:c6:28:dd:bd:ec:b9:57:e0:43:06:a8:4e:e8:81: 23:6a:b5:29:35:92:4b:19:46:b8:fd:74:b4:cc:b0:37:ee:33: a2:91:ce:57:f4:ce:18:5c:98:b7:d1:05:a0:d1:10:1e:4a:30: 42:43:04:84:91:a4:ed:31:99:cf:86:79:91:8e:7a:3a:6d:ad: fb:59:d0:87:4e:0f:ae:58:7f:bb:8f:45:3a:15:89:68:b8:6b: 6d:1e:10:d1:b3:09:ac:79:c3:1b:fa:09:5a:ad:0d:32:fc:49: cf:c4:42:f9:b3:6a:4d:9d:47:9e:52:85:50:a7:fc:62:9b:93: c4:cb:6b:7e:58:10:12:7a:ad:40:54:25:cf:a9:52:f1:41:42: c4:4a:5c:00:52:bd:71:e1:90:54:e4:14:11:8a:a4:c8:37:97: a2:bd:e0:5f:59:33:f5:4e:d5:39:d3:a3:d9:0e:38:f5:23:03: bf:9b:a7:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoB/fkYJ9LjGdnKdzWP1RgYwVf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjExMTQwNDUwMjFaFw0yNjExMTUwNzQzMjFaMDMxMTAvBgNV BAMTKDI3QTczMzU3NkI5NTEyRTVFMzUyNDc5OTkxN0E1NDVGMDYyODI2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClx20dGQlFLsUjc3fMM0sy9XVe 8tsbT3T4vXetWm86NvxYupZcYmfsfG7t7XkHieJhSG1j2k+ch2GA97q4wknLY5m5 XxR9+FNhLQiKjBEni5+t1FQqxz4DGg3Bua7gzj2UfI2IfYt3cIqXn7gaNdblurT8 Ggbdi45g1SAgCAVoh5kGwrYbW9ivVOEpMvgGB/aoe5PbdHZ9D2ru/3txGY+Ymskl fbTNTVx8ahrupdy5vjMkB5N/aZwqtlIk/7dA7H5DeTInEy1SelZ1biHlDePFftVh OXVSRtdMdWfM3fxYsxNPb6Ccd+C3opQpYINb83FF+fKGsTstwT6Tm5bKY7WdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ6czV2uVEuXjUkeZkXpUXwYoJtowHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxoFc39+WxEW6OWF2JyIYHPw7zJZ88SLOUY h3RjtVjqFp+Ktv3RcgHVSLdG2Q8qsgKiPi91I8SbV+uyv5szkh5iDOu1+qBX+dDn b6TGKN297LlX4EMGqE7ogSNqtSk1kksZRrj9dLTMsDfuM6KRzlf0zhhcmLfRBaDR EB5KMEJDBISRpO0xmc+GeZGOejptrftZ0IdOD65Yf7uPRToViWi4a20eENGzCax5 wxv6CVqtDTL8Sc/EQvmzak2dR55ShVCn/GKbk8TLa35YEBJ6rUBUJc+pUvFBQsRK XABSvXHhkFTkFBGKpMg3l6K94F9ZM/VO1TnTo9kOOPUjA7+bp58= -----END CERTIFICATE-----Generated at Sat Nov 14 22:37:37 2026 by rpki-client