$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft File: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft (raw, json) Hash identifier: LqPQh1p068gyWg2pqudF6iqrNp5r8KRtnuq0v/fTPD4= Subject key identifier: 32:41:2D:AC:61:33:DE:1F:6A:60:D1:B9:D9:9D:96:CE:91:E1:D2:E6 Authority key identifier: EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 Certificate issuer: /CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Certificate serial: 5D7AB840D8DEB77E68EC4787AFB1C3BC786DC548 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:21:34 +0000 Manifest this update: Mon 21 Sep 2026 12:16:34 +0000 Manifest next update: Tue 22 Sep 2026 13:53:34 +0000 Files and hashes: 1: EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl (hash: oxfwMkpnc+tv3ew84ACtiDkNJ5eBfch5auZc3RkYt20=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7a:b8:40:d8:de:b7:7e:68:ec:47:87:af:b1:c3:bc:78:6d:c5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89 Validity Not Before: Sep 21 12:16:34 2026 GMT Not After : Sep 22 13:53:34 2026 GMT Subject: CN=32412DAC6133DE1F6A60D1B9D99D96CE91E1D2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:da:28:5b:83:2d:aa:d8:bd:44:55:6c:85: 22:dc:09:17:73:84:a4:ed:f8:11:55:e3:9a:ca:02: a6:a8:33:bf:69:4a:e4:b1:b9:da:eb:cb:9e:71:b6: dd:ce:58:9c:ac:f2:c9:a4:b5:21:bc:c7:5e:fa:bf: 1a:2b:bd:a5:45:2d:3b:5c:3c:83:a6:a3:a1:b4:d6: ee:a6:3a:dd:ce:66:e2:ea:cb:d1:e1:a0:1a:03:56: 39:4b:0f:ce:57:ce:b6:8c:8e:a4:59:a5:e3:72:65: d9:5d:d0:7c:52:6b:2f:76:2e:35:c0:d0:e9:a4:0d: 4a:57:20:93:d3:82:c3:b7:2e:fe:3f:df:76:2a:72: 27:5f:7d:ad:4e:47:99:f2:e2:38:83:ad:f0:b3:4e: 62:86:c0:b1:ac:78:22:d9:8d:a9:9c:23:d2:cb:b9: 67:8a:ac:33:7b:39:03:a6:98:c1:33:ca:69:eb:b8: 31:2c:e7:47:7a:b2:ca:d5:ba:6e:74:38:09:e0:1e: d9:73:94:a0:43:8e:ad:d8:bd:ea:75:54:77:7b:8e: e3:29:bf:e2:53:fa:50:72:8e:14:fa:45:70:00:31: 3e:f4:5f:ed:23:51:69:f9:56:8e:a1:e6:30:38:ab: a0:f3:e5:dc:ca:76:d1:e5:62:4a:f2:b8:c9:7b:90: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:41:2D:AC:61:33:DE:1F:6A:60:D1:B9:D9:9D:96:CE:91:E1:D2:E6 X509v3 Authority Key Identifier: keyid:EF:27:1E:6D:F5:C4:B0:05:D9:33:97:66:A7:4A:5A:DD:FA:5A:7E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/EF271E6DF5C4B005D9339766A74A5ADDFA5A7E89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ee:1a:89:07:18:0f:85:78:b8:f7:e0:9f:de:0b:9b:1f:fc: bf:99:34:a9:6e:af:8e:11:61:85:ac:b5:60:49:14:e7:59:76: 79:9f:51:f9:a8:b3:d8:c0:53:60:1e:0c:ba:b5:f7:f3:53:1a: 6a:8d:bc:6f:aa:79:b4:cb:ae:12:51:f4:48:fb:23:db:ea:17: e2:77:d4:e6:e1:a4:ba:cd:69:35:c4:1c:4e:55:b0:25:ee:e1: c0:2d:17:56:b0:82:a3:27:6b:e6:73:72:9e:b0:9d:20:47:1a: 14:a7:49:bb:72:74:77:22:c1:96:ba:3c:60:c3:71:14:fc:2b: ca:80:ae:0e:39:e9:87:dc:67:58:77:66:fa:12:8b:f5:2c:4f: 5f:47:13:9e:45:43:c7:b2:ef:08:52:2a:9d:34:f2:75:6b:3c: ca:79:cd:4e:1d:b5:7b:5a:8e:68:d6:87:02:14:b3:25:a1:24: f5:af:c4:ab:ea:d0:f4:13:e9:5c:30:b7:16:8f:65:31:8c:f8: f5:c5:5f:54:76:23:d6:44:59:46:dc:a1:1f:7c:77:03:2c:94: 39:eb:12:fc:23:48:cb:ed:10:6c:43:32:f0:51:0c:ec:a7:12: 59:c5:12:42:0c:a5:23:bc:0c:ce:1e:b5:82:61:72:bc:73:8f: 13:fb:6a:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXq4QNjet35o7EeHr7HDvHhtxUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERG QTVBN0U4OTAeFw0yNjA5MjExMjE2MzRaFw0yNjA5MjIxMzUzMzRaMDMxMTAvBgNV BAMTKDMyNDEyREFDNjEzM0RFMUY2QTYwRDFCOUQ5OUQ5NkNFOTFFMUQyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdtooW4Mtqti9RFVshSLcCRdz hKTt+BFV45rKAqaoM79pSuSxudrry55xtt3OWJys8smktSG8x176vxorvaVFLTtc PIOmo6G01u6mOt3OZuLqy9HhoBoDVjlLD85XzraMjqRZpeNyZdld0HxSay92LjXA 0OmkDUpXIJPTgsO3Lv4/33Yqcidffa1OR5ny4jiDrfCzTmKGwLGseCLZjamcI9LL uWeKrDN7OQOmmMEzymnruDEs50d6ssrVum50OAngHtlzlKBDjq3Yvep1VHd7juMp v+JT+lByjhT6RXAAMT70X+0jUWn5Vo6h5jA4q6Dz5dzKdtHlYkryuMl7kMhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMkEtrGEz3h9qYNG52Z2WzpHh0uYwHwYDVR0j BBgwFoAU7ycebfXEsAXZM5dmp0pa3fpafokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNTRjMWItNjc3ZS00MWQ2LWFiMGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRG NUM0QjAwNUQ5MzM5NzY2QTc0QTVBRERGQTVBN0U4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRjI3MUU2REY1QzRCMDA1RDkzMzk3NjZBNzRBNUFEREZBNUE3 RTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvRUYyNzFFNkRGNUM0QjAwNUQ5MzM5NzY2QTc0QTVB RERGQTVBN0U4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXuGokHGA+FeLj34J/eC5sf/L+ZNKlur44R YYWstWBJFOdZdnmfUfmos9jAU2AeDLq19/NTGmqNvG+qebTLrhJR9Ej7I9vqF+J3 1ObhpLrNaTXEHE5VsCXu4cAtF1awgqMna+Zzcp6wnSBHGhSnSbtydHciwZa6PGDD cRT8K8qArg456YfcZ1h3ZvoSi/UsT19HE55FQ8ey7whSKp008nVrPMp5zU4dtXta jmjWhwIUsyWhJPWvxKvq0PQT6VwwtxaPZTGM+PXFX1R2I9ZEWUbcoR98dwMslDnr EvwjSMvtEGxDMvBRDOynElnFEkIMpSO8DM4etYJhcrxzjxP7alI= -----END CERTIFICATE-----Generated at Mon Sep 21 20:54:02 2026 by rpki-client