$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: w45IeA+9pVTtAm1/Ps+HmURmS/RDwyYH9Bm/s17mTIw= Subject key identifier: FD:85:AA:27:46:5D:58:E2:6B:43:AA:C8:AE:CD:93:81:38:1A:88:02 Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 7A730C9F22DFC07FE186A67322172E8DB5752C33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 13:55:25 +0000 Manifest this update: Mon 02 Nov 2026 13:50:25 +0000 Manifest next update: Tue 03 Nov 2026 16:17:25 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: o7GsJfJStmwPKa2EoLq9jB5ClmPHcGo/KemwR08MFrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:73:0c:9f:22:df:c0:7f:e1:86:a6:73:22:17:2e:8d:b5:75:2c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Nov 2 13:50:25 2026 GMT Not After : Nov 3 16:17:25 2026 GMT Subject: CN=FD85AA27465D58E26B43AAC8AECD9381381A8802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:f1:e6:18:5e:6a:ec:ea:85:07:6a:20:1d: b1:b8:00:4c:d9:19:f6:24:e1:bd:b2:37:a9:b3:7b: 72:fd:13:69:05:0e:bc:54:7f:04:22:11:fc:71:b2: 73:17:9d:1a:00:57:91:cc:37:df:2d:a7:4e:e4:f9: bf:73:cf:e2:8b:1e:c6:b3:f6:5f:2c:2d:b3:a7:46: 86:72:fb:d9:df:d5:84:63:eb:e0:5e:05:70:b6:2c: f6:4a:6a:fb:2b:96:b0:56:b7:d2:c9:69:56:e8:46: 7e:4b:4f:0b:8c:75:7d:c1:3d:bb:76:01:6e:e7:de: 84:f8:f8:1c:c8:69:7c:2f:1d:f1:13:7f:4b:fd:3b: ed:34:be:dc:3e:9a:d2:95:9a:f8:6b:ca:ad:82:52: a7:06:66:f9:39:af:9e:6b:7a:a2:76:dc:27:27:63: b4:5b:fd:5f:1c:8c:b0:ff:d6:3c:6c:aa:06:48:5f: e9:79:19:94:7b:cf:53:20:27:7a:ec:ef:f1:a9:7b: 19:e6:bd:6e:be:84:f3:d1:af:04:f1:49:d8:9b:44: 9f:97:3e:e6:a3:5e:9e:6b:8a:6e:98:4f:48:5d:73: 79:31:66:b0:a4:1c:36:07:8e:42:4f:66:78:83:d6: 97:39:74:df:f0:1c:62:8e:07:10:eb:c9:98:1c:31: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:85:AA:27:46:5D:58:E2:6B:43:AA:C8:AE:CD:93:81:38:1A:88:02 X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0d:ef:bb:84:48:2f:9a:44:02:c0:17:db:c6:a0:fa:3b:63: c2:75:4e:56:94:f6:38:79:43:fa:cb:15:26:fb:e8:9f:51:75: 20:4c:54:d0:d9:dc:a6:76:7b:8b:32:79:54:a0:ac:48:78:a7: 9b:88:f8:78:ec:82:df:9f:b0:bb:aa:0d:a6:ec:f6:ed:25:7a: c9:8a:0d:0f:fc:9c:19:bb:74:8e:0f:95:77:16:1a:6c:be:a4: 2c:c8:c4:55:5e:e0:d0:e6:37:ed:82:79:a8:1e:8f:c4:5a:8c: 09:7d:87:d0:a0:5b:bb:27:4b:62:b5:a3:59:36:68:07:0b:d8: a2:8b:a8:84:b7:14:99:03:d2:de:b5:27:f8:48:95:5e:49:24: d6:3b:fa:1e:91:05:b7:25:9f:63:39:a1:a6:d7:17:b0:bc:c6: 66:74:17:83:3c:05:9e:74:32:14:03:bc:2d:0c:c4:6c:0a:ce: f0:5c:4a:f9:6d:a8:87:36:58:d3:51:df:0d:e3:e3:13:17:1f: 7f:b1:fb:22:43:fc:44:37:a3:42:fb:1a:af:e3:ed:5c:fd:2c: 81:c6:ac:c4:a7:af:6e:54:d3:0a:17:4f:43:0a:d2:40:72:7e: 87:ab:fd:c0:10:4c:ec:f5:3f:b3:22:77:61:83:47:58:f3:2b: fa:0b:ff:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenMMnyLfwH/hhqZzIhcujbV1LDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjExMDIxMzUwMjVaFw0yNjExMDMxNjE3MjVaMDMxMTAvBgNV BAMTKEZEODVBQTI3NDY1RDU4RTI2QjQzQUFDOEFFQ0Q5MzgxMzgxQTg4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCws/HmGF5q7OqFB2ogHbG4AEzZ GfYk4b2yN6mze3L9E2kFDrxUfwQiEfxxsnMXnRoAV5HMN98tp07k+b9zz+KLHsaz 9l8sLbOnRoZy+9nf1YRj6+BeBXC2LPZKavsrlrBWt9LJaVboRn5LTwuMdX3BPbt2 AW7n3oT4+BzIaXwvHfETf0v9O+00vtw+mtKVmvhryq2CUqcGZvk5r55reqJ23Ccn Y7Rb/V8cjLD/1jxsqgZIX+l5GZR7z1MgJ3rs7/GpexnmvW6+hPPRrwTxSdibRJ+X PuajXp5rim6YT0hdc3kxZrCkHDYHjkJPZniD1pc5dN/wHGKOBxDryZgcMfQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/YWqJ0ZdWOJrQ6rIrs2TgTgaiAIwHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUN77uESC+aRALAF9vGoPo7Y8J1TlaU9jh5 Q/rLFSb76J9RdSBMVNDZ3KZ2e4syeVSgrEh4p5uI+Hjsgt+fsLuqDabs9u0lesmK DQ/8nBm7dI4PlXcWGmy+pCzIxFVe4NDmN+2Ceagej8RajAl9h9CgW7snS2K1o1k2 aAcL2KKLqIS3FJkD0t61J/hIlV5JJNY7+h6RBbcln2M5oabXF7C8xmZ0F4M8BZ50 MhQDvC0MxGwKzvBcSvltqIc2WNNR3w3j4xMXH3+x+yJD/EQ3o0L7Gq/j7Vz9LIHG rMSnr25U0woXT0MK0kByfoer/cAQTOz1P7Mid2GDR1jzK/oL/+4= -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:10 2026 by rpki-client