$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: 3zxJfxCy5TPtqnLey5rh2nVvmo9987gX0eea4qi5OoI= Subject key identifier: 2E:51:82:EB:78:81:86:1B:81:AD:74:D3:61:E4:18:98:A2:78:49:93 Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 51EFF140EDED4E9E90D50A18592413AFA683C7DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 08:33:20 +0000 Manifest this update: Wed 17 Jun 2026 08:28:20 +0000 Manifest next update: Thu 18 Jun 2026 10:35:20 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: 1H74fLRG0m6GKgwJfiNJD2dLAPvv8rOpo0uhQgoefDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ef:f1:40:ed:ed:4e:9e:90:d5:0a:18:59:24:13:af:a6:83:c7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Jun 17 08:28:20 2026 GMT Not After : Jun 18 10:35:20 2026 GMT Subject: CN=2E5182EB7881861B81AD74D361E41898A2784993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:26:28:21:98:55:08:86:8e:30:35:8a:b6: 24:9d:0c:60:85:b3:65:80:de:5e:d4:db:39:07:f8: 2c:3e:45:2b:18:f1:75:19:c7:e3:92:1b:79:69:e9: 54:63:e2:41:27:77:14:ac:84:45:3c:cd:94:e9:12: b5:58:e6:b6:f3:5a:af:24:0c:70:63:8e:ac:d9:bf: 28:21:a0:a2:1a:1a:8a:d7:ab:07:16:a9:84:ee:d3: 40:05:2b:91:99:a1:87:c4:56:46:28:a2:98:3a:50: 76:ed:22:04:f9:e9:7f:66:4b:f7:21:3b:1f:cd:1f: 32:1b:7e:2c:34:6d:d9:ca:45:0d:b2:40:0c:dd:5a: e8:c8:1a:c4:fb:46:21:c3:5b:02:9b:e6:d3:64:4d: 77:45:e1:46:4b:1a:4e:15:f7:e6:e6:17:2b:47:80: f9:72:a1:42:85:93:2e:83:e2:62:31:40:a0:ce:23: 84:60:22:85:91:af:e1:5d:dc:07:70:30:7d:ec:27: 29:03:65:91:f4:d6:9c:dd:81:c4:43:2a:f2:84:cd: 5c:dc:2a:6f:6b:51:54:8e:fc:39:2d:2f:78:83:ce: ef:58:a8:c4:ef:29:7e:29:6d:0d:73:4d:72:b9:82: 89:63:aa:6c:ef:61:84:e6:5c:36:7c:ae:f8:31:4a: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:51:82:EB:78:81:86:1B:81:AD:74:D3:61:E4:18:98:A2:78:49:93 X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:03:5a:47:b9:75:06:74:4b:49:92:e2:b9:b9:73:39:9d:a1: 98:02:85:08:62:18:c0:5f:fc:91:40:e5:bd:04:9c:d4:55:d0: f5:11:0a:96:5d:b4:00:a8:43:f5:2d:ab:c7:db:43:33:ea:10: f1:32:a1:88:dd:33:bc:5f:55:5a:c2:00:a0:97:f6:bd:65:95: 47:d6:8b:85:97:96:88:ed:49:fb:47:08:3f:75:9a:b4:11:2d: 7a:c1:55:64:37:a3:76:a3:40:b3:37:8d:46:a2:87:c3:f6:1a: b1:fc:27:a5:0a:a8:e6:d6:49:76:30:6e:ce:26:04:46:cc:c1: 6b:1a:1a:2a:e2:05:04:07:df:9e:a1:56:9a:8c:22:b5:d5:c1: e0:ed:d2:dc:bd:a3:b1:a2:a4:ef:8e:a0:3a:14:d2:f0:e5:21: ef:c2:b3:87:d2:45:f5:a4:11:d7:3b:aa:15:e9:5a:e9:2d:33: fa:f9:f2:d1:06:34:8c:61:54:08:59:91:cb:2d:5b:3a:b6:b9: 0b:14:c2:21:e5:79:3a:27:6a:4c:45:43:2a:e2:cb:35:f3:4b: 32:29:6f:f9:ca:09:5b:23:4e:62:10:fe:c0:1a:f1:4c:5b:fc: 12:bb:c3:d8:94:84:37:26:ef:19:26:36:54:6b:5a:ea:80:1a: b0:ac:00:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUe/xQO3tTp6Q1QoYWSQTr6aDx9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjA2MTcwODI4MjBaFw0yNjA2MTgxMDM1MjBaMDMxMTAvBgNV BAMTKDJFNTE4MkVCNzg4MTg2MUI4MUFENzREMzYxRTQxODk4QTI3ODQ5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tyYoIZhVCIaOMDWKtiSdDGCF s2WA3l7U2zkH+Cw+RSsY8XUZx+OSG3lp6VRj4kEndxSshEU8zZTpErVY5rbzWq8k DHBjjqzZvyghoKIaGorXqwcWqYTu00AFK5GZoYfEVkYoopg6UHbtIgT56X9mS/ch Ox/NHzIbfiw0bdnKRQ2yQAzdWujIGsT7RiHDWwKb5tNkTXdF4UZLGk4V9+bmFytH gPlyoUKFky6D4mIxQKDOI4RgIoWRr+Fd3AdwMH3sJykDZZH01pzdgcRDKvKEzVzc Km9rUVSO/DktL3iDzu9YqMTvKX4pbQ1zTXK5goljqmzvYYTmXDZ8rvgxSrpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULlGC63iBhhuBrXTTYeQYmKJ4SZMwHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQDWke5dQZ0S0mS4rm5czmdoZgChQhiGMBf /JFA5b0EnNRV0PURCpZdtACoQ/Utq8fbQzPqEPEyoYjdM7xfVVrCAKCX9r1llUfW i4WXlojtSftHCD91mrQRLXrBVWQ3o3ajQLM3jUaih8P2GrH8J6UKqObWSXYwbs4m BEbMwWsaGiriBQQH356hVpqMIrXVweDt0ty9o7GipO+OoDoU0vDlIe/Cs4fSRfWk Edc7qhXpWuktM/r58tEGNIxhVAhZkcstWzq2uQsUwiHleTonakxFQyriyzXzSzIp b/nKCVsjTmIQ/sAa8Uxb/BK7w9iUhDcm7xkmNlRrWuqAGrCsAOM= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:12 2026 by rpki-client