$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: LcPSqKgZWMsL2RXR/ri0R+1q/7lHwJ7g18qMkV/grlg= Subject key identifier: 36:39:01:D4:BC:91:73:48:32:BF:86:CC:15:D2:26:EA:35:36:91:89 Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 466E03243181537FDE54C1135A58FDF52C6E7774 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 02:40:08 +0000 Manifest this update: Thu 18 Jun 2026 02:35:08 +0000 Manifest next update: Fri 19 Jun 2026 05:57:08 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: no4yyXY728N1Xhfde7OM6gZYKGlbdXppzd7z8a1kzcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6e:03:24:31:81:53:7f:de:54:c1:13:5a:58:fd:f5:2c:6e:77:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Jun 18 02:35:08 2026 GMT Not After : Jun 19 05:57:08 2026 GMT Subject: CN=363901D4BC91734832BF86CC15D226EA35369189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:97:46:e4:25:67:c2:d2:1a:1b:34:56:a5: 57:d6:5e:3b:10:9f:24:e0:3f:ea:35:37:c3:09:20: 2b:27:a9:1c:62:6b:30:18:d3:2c:59:78:2a:a9:d5: e4:ee:1a:79:f5:37:f8:b5:e9:0c:df:94:ef:8c:b5: cb:f9:af:cf:72:ad:1c:d4:1c:64:95:76:cb:5c:6a: de:ba:48:d6:9a:a0:d1:8d:fc:fe:78:95:25:8f:33: aa:ea:8b:9f:40:93:89:59:32:6c:08:e3:50:98:e8: 3a:55:12:35:96:a5:19:3d:07:36:f8:4c:5e:be:09: 51:ae:64:b9:b9:f4:e8:d5:34:12:18:a5:21:b8:01: bb:71:52:4f:5e:72:ef:db:e7:d0:b0:87:05:dd:13: 08:cc:49:33:51:0d:32:91:e1:d7:a5:3c:36:f3:5f: 78:1d:50:f4:29:59:a2:13:87:b0:cf:35:b3:83:48: d8:f6:3e:d1:29:4c:3f:84:06:64:b6:5f:d7:b4:34: 62:6a:a5:34:86:e6:74:ec:22:56:14:81:46:04:5d: 0e:52:e5:60:5d:0b:af:ca:b7:87:34:a7:71:1c:54: 60:89:00:44:f1:2b:99:89:96:69:cf:b2:0d:22:86: a6:b6:21:94:51:27:0b:c6:f5:7a:cc:0f:ab:f9:47: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:39:01:D4:BC:91:73:48:32:BF:86:CC:15:D2:26:EA:35:36:91:89 X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f6:60:4e:f2:f7:db:57:f2:f7:a1:c3:a3:62:bd:39:ce:87: 61:40:06:70:8c:73:1d:bc:38:e8:ff:a5:7b:42:f4:25:f5:8b: 72:7d:5c:b3:7d:dd:1a:98:10:89:2a:f1:b0:04:00:8b:13:2a: 02:31:f6:d5:f9:30:96:ce:eb:96:ea:2b:80:92:16:55:12:b2: f4:47:7e:05:b1:6c:f2:2b:75:26:27:22:76:a1:a8:76:fc:cc: fc:ea:24:f6:2e:d6:8a:fd:98:92:66:ba:b9:77:ce:28:b4:56: 74:4f:64:71:a9:be:c6:ce:fc:38:71:91:a8:38:2a:f4:0a:e1: f5:af:90:f6:da:9f:9d:73:20:5d:6c:b0:7b:c9:b2:40:eb:7d: c4:96:89:b5:e0:8c:c3:ba:f5:6d:0c:e9:25:3c:c6:2a:0c:e1: 57:30:6e:d2:72:13:68:09:ac:89:1f:8c:e6:26:f9:e7:d5:d2: 62:d0:39:c9:fc:24:2e:08:db:2d:03:6e:ce:45:ff:44:73:be: 59:49:da:ee:f4:1a:37:f7:fa:68:af:2b:47:f9:6b:00:6c:57: 99:02:3c:a0:c9:8a:52:27:e7:eb:f5:71:e7:3a:7d:47:ed:3d: 29:45:d6:a1:d7:bf:5e:fc:8f:68:5f:ff:c4:a3:54:a2:15:d7: 99:91:8e:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURm4DJDGBU3/eVMETWlj99Sxud3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjA2MTgwMjM1MDhaFw0yNjA2MTkwNTU3MDhaMDMxMTAvBgNV BAMTKDM2MzkwMUQ0QkM5MTczNDgzMkJGODZDQzE1RDIyNkVBMzUzNjkxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcl5dG5CVnwtIaGzRWpVfWXjsQ nyTgP+o1N8MJICsnqRxiazAY0yxZeCqp1eTuGnn1N/i16QzflO+Mtcv5r89yrRzU HGSVdstcat66SNaaoNGN/P54lSWPM6rqi59Ak4lZMmwI41CY6DpVEjWWpRk9Bzb4 TF6+CVGuZLm59OjVNBIYpSG4AbtxUk9ecu/b59CwhwXdEwjMSTNRDTKR4delPDbz X3gdUPQpWaITh7DPNbODSNj2PtEpTD+EBmS2X9e0NGJqpTSG5nTsIlYUgUYEXQ5S 5WBdC6/Kt4c0p3EcVGCJAETxK5mJlmnPsg0ihqa2IZRRJwvG9XrMD6v5RzgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjkB1LyRc0gyv4bMFdIm6jU2kYkwHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn2YE7y99tX8vehw6NivTnOh2FABnCMcx28 OOj/pXtC9CX1i3J9XLN93RqYEIkq8bAEAIsTKgIx9tX5MJbO65bqK4CSFlUSsvRH fgWxbPIrdSYnInahqHb8zPzqJPYu1or9mJJmurl3zii0VnRPZHGpvsbO/Dhxkag4 KvQK4fWvkPban51zIF1ssHvJskDrfcSWibXgjMO69W0M6SU8xioM4VcwbtJyE2gJ rIkfjOYm+efV0mLQOcn8JC4I2y0Dbs5F/0RzvllJ2u70Gjf3+mivK0f5awBsV5kC PKDJilIn5+v1cec6fUftPSlF1qHXv178j2hf/8SjVKIV15mRjjA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:33 2026 by rpki-client