$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json) Hash identifier: xANvhlLQqRXIZcgAc3QmM0eJMIcRbTvf4y8o2CbG2qo= Subject key identifier: 52:0B:A1:E5:C2:99:8E:0D:A7:57:FE:D8:E8:29:52:23:0C:00:F6:04 Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Certificate serial: 64ED9585F3FD0B96E19911A9BA7AF625FB29647D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:21:37 +0000 Manifest this update: Wed 23 Sep 2026 08:16:37 +0000 Manifest next update: Thu 24 Sep 2026 10:58:37 +0000 Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: neylnTDP/BTg5AiRNxnXKjF7ViVXnT+R4CYCgJJKCxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ed:95:85:f3:fd:0b:96:e1:99:11:a9:ba:7a:f6:25:fb:29:64:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Validity Not Before: Sep 23 08:16:37 2026 GMT Not After : Sep 24 10:58:37 2026 GMT Subject: CN=520BA1E5C2998E0DA757FED8E82952230C00F604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c1:54:bc:71:3b:4c:01:47:d1:f0:58:48:c9: db:22:79:4e:00:c7:77:2c:4f:57:7b:ef:40:75:90: 4a:39:a5:bd:80:8c:c4:27:cf:f3:15:e6:ee:e1:3d: 58:5c:8a:f1:77:8d:c0:be:0e:d4:5e:5f:f4:ed:1e: e7:bf:33:95:98:03:fb:c0:6d:1c:6f:7b:71:e2:cc: 71:8c:06:fe:0d:5a:ce:b8:8d:56:5a:e8:d9:50:81: 76:d9:54:2b:2a:b2:bb:3d:fb:a1:13:a3:ab:42:17: 3e:ee:8f:70:ab:7a:ab:a6:00:a4:02:68:51:f7:dc: 4b:ce:0a:7e:f3:6d:66:dd:ff:03:1b:6d:3b:7d:2c: 65:ee:94:3d:80:df:08:47:4e:55:67:6b:08:92:3d: b0:74:00:c7:5c:61:60:ab:1c:8c:08:6f:ad:cc:7f: f2:e9:38:9c:75:ed:18:aa:7f:55:57:7d:e0:a5:9b: f0:b2:97:a7:0a:de:63:67:73:0f:46:7c:b8:8e:6d: 7b:77:31:cc:d5:14:49:80:bc:ab:40:fc:3b:aa:0d: b2:01:7f:d1:60:13:88:0a:ff:8d:79:02:e6:01:5d: 83:cc:51:fe:06:3d:f6:de:40:e6:3c:ce:41:0c:68: b5:bf:c5:d1:32:46:ab:af:f4:ea:1e:fd:ff:90:4c: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:A1:E5:C2:99:8E:0D:A7:57:FE:D8:E8:29:52:23:0C:00:F6:04 X509v3 Authority Key Identifier: keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c4:0d:fc:ca:9c:4f:a4:7c:5f:6a:82:49:7a:22:89:2d:fb: 1c:c7:18:3f:59:2b:af:12:02:63:e0:2b:27:39:1c:ec:d4:d1: db:1c:15:20:9a:82:b7:6b:ca:e8:12:61:4b:c0:37:f8:d1:3a: 64:ea:33:94:27:c0:88:51:be:8e:ac:16:75:c6:95:d2:40:13: f8:fb:ba:3b:2d:89:ce:db:4a:98:08:f3:df:de:42:df:b2:f1: 6c:34:2b:1a:c4:62:d4:1b:14:5f:3c:00:6d:28:ed:cf:9f:5c: eb:f9:99:1d:04:ba:f3:bf:d9:21:56:0d:4d:8f:00:95:39:37: 8c:13:4f:54:73:38:0e:89:16:c9:09:41:d0:d5:47:66:84:5e: 6e:7e:36:6b:26:75:45:08:84:b4:74:80:97:59:42:66:7a:10: b2:99:1d:cb:f1:ce:2d:1a:10:9b:23:d7:41:02:41:55:ad:a4: c1:c0:79:05:87:48:e9:60:ed:dd:a2:98:98:59:44:6b:ab:41: 68:db:cd:9b:d9:cf:6c:1a:13:32:52:80:39:79:a3:93:44:94: e4:f0:22:c8:a7:d3:72:fc:89:99:78:63:90:b8:43:68:07:9a: 6a:fc:c6:2f:5b:8d:01:4c:da:c2:ac:f1:03:c6:35:80:c0:b8: a9:db:5a:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZO2VhfP9C5bhmRGpunr2JfspZH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1 REY3NDJEQTAeFw0yNjA5MjMwODE2MzdaFw0yNjA5MjQxMDU4MzdaMDMxMTAvBgNV BAMTKDUyMEJBMUU1QzI5OThFMERBNzU3RkVEOEU4Mjk1MjIzMEMwMEY2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxwVS8cTtMAUfR8FhIydsieU4A x3csT1d770B1kEo5pb2AjMQnz/MV5u7hPVhcivF3jcC+DtReX/TtHue/M5WYA/vA bRxve3HizHGMBv4NWs64jVZa6NlQgXbZVCsqsrs9+6ETo6tCFz7uj3CrequmAKQC aFH33EvOCn7zbWbd/wMbbTt9LGXulD2A3whHTlVnawiSPbB0AMdcYWCrHIwIb63M f/LpOJx17Riqf1VXfeClm/Cyl6cK3mNncw9GfLiObXt3MczVFEmAvKtA/DuqDbIB f9FgE4gK/415AuYBXYPMUf4GPfbeQOY8zkEMaLW/xdEyRquv9Ooe/f+QTNL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUguh5cKZjg2nV/7Y6ClSIwwA9gQwHwYDVR0j BBgwFoAUJTf82oaPcsL22ZhEa9/JD133QtowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjEzMzRkMDMtZWFlNC00ZDIwLWJhNTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4 NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1REY3NDJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM3RkNEQTg2OEY3MkMyRjZEOTk4NDQ2QkRGQzkwRjVERjc0 MkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5 MEY1REY3NDJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbEDfzKnE+kfF9qgkl6Iokt+xzHGD9ZK68S AmPgKyc5HOzU0dscFSCagrdryugSYUvAN/jROmTqM5QnwIhRvo6sFnXGldJAE/j7 ujstic7bSpgI89/eQt+y8Ww0KxrEYtQbFF88AG0o7c+fXOv5mR0EuvO/2SFWDU2P AJU5N4wTT1RzOA6JFskJQdDVR2aEXm5+NmsmdUUIhLR0gJdZQmZ6ELKZHcvxzi0a EJsj10ECQVWtpMHAeQWHSOlg7d2imJhZRGurQWjbzZvZz2waEzJSgDl5o5NElOTw Isin03L8iZl4Y5C4Q2gHmmr8xi9bjQFM2sKs8QPGNYDAuKnbWgM= -----END CERTIFICATE-----Generated at Thu Sep 24 03:39:36 2026 by rpki-client