$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: GYab5C5TQ2NBdWNJquXEkmRMxIu+7xQAkmnvy6vLclI= Subject key identifier: 42:89:69:38:AC:DF:A1:6C:7A:D4:D6:3D:42:47:3A:60:47:23:EF:0A Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 5E3AD39B2225CF4FB8056FDADC700AC7A8ADD082 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 06:40:33 +0000 Manifest this update: Sun 02 Aug 2026 06:35:33 +0000 Manifest next update: Mon 03 Aug 2026 07:33:33 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: LbDmbcAAgumdli5p3ezsb4nvip9yKBuwYNg258uIPBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3a:d3:9b:22:25:cf:4f:b8:05:6f:da:dc:70:0a:c7:a8:ad:d0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Aug 2 06:35:33 2026 GMT Not After : Aug 3 07:33:33 2026 GMT Subject: CN=42896938ACDFA16C7AD4D63D42473A604723EF0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:66:e1:ec:2a:6d:f7:ee:87:14:5b:03:be: a6:5a:09:bb:07:e0:ab:19:47:52:a4:81:a9:e3:3f: e9:c7:6d:40:e7:31:c4:3a:a1:d3:fb:b7:08:be:fa: 2c:f4:dd:dd:40:56:96:34:fc:a1:18:76:a2:32:42: 9d:89:19:2d:bc:d7:e7:00:72:a7:4a:36:63:56:11: 2b:32:7d:c7:a2:41:bd:c6:f4:12:92:9e:8b:27:79: 4c:bb:2b:c6:14:73:01:07:e0:9e:71:c5:1d:16:d6: 12:75:1d:62:44:ac:92:00:dc:53:7c:85:db:27:78: 5d:a5:f9:54:ec:46:46:77:a5:a4:e6:ee:39:d7:df: 50:d4:12:ee:ec:2c:e4:41:6b:7c:ff:8b:07:e0:be: d2:c6:61:c9:18:1c:38:a6:d3:27:cc:90:b7:bf:33: 9d:fe:7d:75:c0:fc:a0:4b:da:d6:6d:eb:bb:dd:2c: 68:2f:e3:aa:8f:8d:c9:9c:a6:34:90:56:b2:a3:49: 31:70:c9:1c:ac:d9:0e:8b:33:43:b3:b1:5a:e5:d0: 2d:fe:75:12:5b:9d:b4:09:e4:22:df:ce:56:9f:11: ee:f9:03:a6:e5:04:36:9d:c2:66:34:79:bd:2d:57: 75:14:c4:ea:c4:18:8c:27:bd:e1:7c:d9:be:f5:69: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:69:38:AC:DF:A1:6C:7A:D4:D6:3D:42:47:3A:60:47:23:EF:0A X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fd:cc:63:4d:7a:aa:e6:a0:04:5d:ba:f5:ea:c2:c8:55:e7: 9f:2e:0d:c8:38:fa:61:a0:13:3f:a4:e1:6c:ba:cc:9f:29:4d: fe:24:ea:5d:55:d8:74:3e:90:45:74:a8:22:8e:99:b6:33:dd: c0:e6:9c:82:3a:3f:58:9c:8a:53:ea:a1:51:e7:10:47:4b:6b: 20:bc:82:ca:7d:42:a8:4a:01:e7:5e:11:84:05:ba:52:f4:49: ad:78:ea:fb:6e:b9:6b:97:d0:7d:3f:72:05:9c:34:3b:2f:fd: 22:87:5a:ba:c3:4b:2e:6c:a0:1e:82:1a:cc:ba:af:f4:d8:48: db:69:28:63:af:df:10:bb:a8:08:66:82:ec:0c:4b:89:30:33: 37:be:36:b9:52:94:99:aa:a0:d0:7d:5f:70:e8:bc:8a:17:7d: b1:dd:c6:5a:95:f5:ba:f6:d0:35:ec:8c:8c:a8:53:95:a5:f6: c5:01:a4:11:e8:12:08:3f:43:bc:15:00:60:74:93:73:67:9c: a4:76:1c:8a:b2:33:1e:2b:7f:8b:21:63:4a:ad:ff:6e:f4:06: 6c:df:17:cf:69:5c:20:17:1e:40:bd:97:2f:2a:82:09:17:6b: 9f:8d:8d:a4:f7:02:b5:eb:ad:98:8f:13:bc:cc:e0:8b:f2:a2: 46:28:77:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjrTmyIlz0+4BW/a3HAKx6it0IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjA4MDIwNjM1MzNaFw0yNjA4MDMwNzMzMzNaMDMxMTAvBgNV BAMTKDQyODk2OTM4QUNERkExNkM3QUQ0RDYzRDQyNDczQTYwNDcyM0VGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5Wbh7Cpt9+6HFFsDvqZaCbsH 4KsZR1KkganjP+nHbUDnMcQ6odP7twi++iz03d1AVpY0/KEYdqIyQp2JGS281+cA cqdKNmNWESsyfceiQb3G9BKSnosneUy7K8YUcwEH4J5xxR0W1hJ1HWJErJIA3FN8 hdsneF2l+VTsRkZ3paTm7jnX31DUEu7sLORBa3z/iwfgvtLGYckYHDim0yfMkLe/ M53+fXXA/KBL2tZt67vdLGgv46qPjcmcpjSQVrKjSTFwyRys2Q6LM0OzsVrl0C3+ dRJbnbQJ5CLfzlafEe75A6blBDadwmY0eb0tV3UUxOrEGIwnveF82b71aSVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQolpOKzfoWx61NY9Qkc6YEcj7wowHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/9zGNNeqrmoARduvXqwshV558uDcg4+mGg Ez+k4Wy6zJ8pTf4k6l1V2HQ+kEV0qCKOmbYz3cDmnII6P1icilPqoVHnEEdLayC8 gsp9QqhKAedeEYQFulL0Sa146vtuuWuX0H0/cgWcNDsv/SKHWrrDSy5soB6CGsy6 r/TYSNtpKGOv3xC7qAhmguwMS4kwMze+NrlSlJmqoNB9X3DovIoXfbHdxlqV9br2 0DXsjIyoU5Wl9sUBpBHoEgg/Q7wVAGB0k3NnnKR2HIqyMx4rf4shY0qt/270Bmzf F89pXCAXHkC9ly8qggkXa5+NjaT3ArXrrZiPE7zM4IvyokYod/0= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client