$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: 9VZTVf1EDm3Qu19Faay9F/cmFIlAI1YHFVW0DXwT2/Q= Subject key identifier: 03:F6:0C:6B:66:AE:10:6B:83:E4:29:4A:AA:67:4B:A7:D4:93:45:C3 Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 434612707536A2E27167AB47423DC29AFA9FC141 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:34:07 +0000 Manifest this update: Thu 17 Sep 2026 04:29:07 +0000 Manifest next update: Fri 18 Sep 2026 06:16:07 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: cQX1DoZ9srk8GFqVGerzeYawJNHRStYVvm5C7vwNrEA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:46:12:70:75:36:a2:e2:71:67:ab:47:42:3d:c2:9a:fa:9f:c1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Sep 17 04:29:07 2026 GMT Not After : Sep 18 06:16:07 2026 GMT Subject: CN=03F60C6B66AE106B83E4294AAA674BA7D49345C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:12:8e:1a:23:db:e3:9a:37:c1:a3:cd:ba: bf:06:d4:06:b8:59:f8:6c:47:8d:c8:95:aa:94:3d: 2c:a7:dc:6c:63:ca:35:73:90:3e:6c:93:77:5d:5e: 80:44:bd:2c:c5:cb:47:93:a7:1f:fe:19:97:30:06: d6:96:c0:ea:21:f1:a0:9e:79:59:85:69:69:d3:7f: 56:8e:19:c7:f9:65:48:47:8b:c7:02:8e:56:c4:ad: 81:4e:92:ae:18:f9:41:b0:4b:db:2f:1a:7f:8c:99: 41:02:c0:26:2b:ff:6f:da:cf:e7:47:89:3e:20:6a: ac:bf:b7:51:ca:ca:18:83:6e:5c:81:f7:2e:b4:c8: 9e:ef:02:fb:68:19:3e:9f:b0:1d:f6:be:b2:e2:f4: 8d:2c:56:3d:8b:0a:4d:88:97:5d:51:8b:f7:f7:0e: bc:90:33:e9:c1:b5:e6:7b:0a:41:0f:e9:5a:4c:fa: 8a:3c:66:81:90:bf:5a:9e:ca:c5:88:19:8d:e5:13: 95:36:b5:0e:3b:b8:f4:d2:dd:6f:b2:69:a7:97:dd: d3:7b:ca:8b:ce:17:a1:e8:f9:b7:1d:b8:9f:cc:12: 29:df:36:4e:f8:3a:41:34:54:3a:5e:a0:01:b3:76: f1:56:57:fd:4c:90:9e:c8:7d:fd:bf:7a:5f:12:eb: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F6:0C:6B:66:AE:10:6B:83:E4:29:4A:AA:67:4B:A7:D4:93:45:C3 X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:61:ba:74:54:c0:b3:17:2e:8f:aa:49:f1:89:0c:8a:80:32: 3e:b7:f4:4e:8b:a5:b7:97:87:5a:3a:27:d9:c8:6c:fc:fd:7d: 77:41:c1:7e:ab:22:01:72:1c:be:c8:26:cb:13:8c:9c:f5:73: b1:3e:41:55:81:9f:81:09:f3:61:79:e0:86:ea:fe:0a:72:73: 46:be:b3:bd:2e:09:7e:cb:4a:72:bc:ba:11:ff:dc:d6:fc:fb: 35:97:41:71:01:ce:a5:31:a2:08:8f:68:a7:2a:7c:96:6d:47: 70:8e:1c:a4:52:94:54:0f:25:f4:e1:fd:35:d1:04:78:dc:2b: 88:b9:b4:89:83:b1:25:54:8e:9c:fe:7b:4a:0d:f2:ed:e9:ee: 38:c0:6f:42:1a:7e:e9:d0:4c:8a:64:cb:3e:ca:f5:89:42:2f: ad:1c:65:78:a4:ec:bc:0c:8a:79:18:bb:6b:b8:e3:4f:7c:f8: 68:36:ea:02:25:95:18:f7:ee:e7:17:0f:da:1d:8c:37:b8:a1: fb:11:29:91:4e:7e:d1:b8:b6:97:35:4e:d3:97:c1:8f:0d:5b: 23:9b:29:43:73:86:e3:2e:5a:5c:e6:bb:31:26:12:14:4c:0b: 94:19:18:1a:1b:82:ab:bd:e3:5d:05:f4:6a:c6:03:15:b3:71: e7:69:a3:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0YScHU2ouJxZ6tHQj3CmvqfwUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjA5MTcwNDI5MDdaFw0yNjA5MTgwNjE2MDdaMDMxMTAvBgNV BAMTKDAzRjYwQzZCNjZBRTEwNkI4M0U0Mjk0QUFBNjc0QkE3RDQ5MzQ1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IxKOGiPb45o3waPNur8G1Aa4 WfhsR43IlaqUPSyn3GxjyjVzkD5sk3ddXoBEvSzFy0eTpx/+GZcwBtaWwOoh8aCe eVmFaWnTf1aOGcf5ZUhHi8cCjlbErYFOkq4Y+UGwS9svGn+MmUECwCYr/2/az+dH iT4gaqy/t1HKyhiDblyB9y60yJ7vAvtoGT6fsB32vrLi9I0sVj2LCk2Il11Ri/f3 DryQM+nBteZ7CkEP6VpM+oo8ZoGQv1qeysWIGY3lE5U2tQ47uPTS3W+yaaeX3dN7 yovOF6Ho+bcduJ/MEinfNk74OkE0VDpeoAGzdvFWV/1MkJ7Iff2/el8S68OBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA/YMa2auEGuD5ClKqmdLp9STRcMwHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNhunRUwLMXLo+qSfGJDIqAMj639E6LpbeX h1o6J9nIbPz9fXdBwX6rIgFyHL7IJssTjJz1c7E+QVWBn4EJ82F54Ibq/gpyc0a+ s70uCX7LSnK8uhH/3Nb8+zWXQXEBzqUxogiPaKcqfJZtR3COHKRSlFQPJfTh/TXR BHjcK4i5tImDsSVUjpz+e0oN8u3p7jjAb0IafunQTIpkyz7K9YlCL60cZXik7LwM inkYu2u44098+Gg26gIllRj37ucXD9odjDe4ofsRKZFOftG4tpc1TtOXwY8NWyOb KUNzhuMuWlzmuzEmEhRMC5QZGBobgqu9410F9GrGAxWzcedpo4E= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:51 2026 by rpki-client