
$ rpki-client -vvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json)
Hash identifier: GS/WlWmgJjBxXPLk7Z1J6TgA1WPEpQV9rtDNAiZRv0w=
Subject key identifier: 1C:63:03:DD:5E:E0:54:12:C4:8A:FB:47:4F:F2:0B:FD:BF:27:87:45
Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA
Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA
Certificate serial: 5ADECF361FCD61F73F2DF635C06D34CFE35EC851
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 16:45:24 +0000
Manifest this update: Thu 23 Jul 2026 16:40:24 +0000
Manifest next update: Fri 24 Jul 2026 18:57:24 +0000
Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: cKQbXcjb/h+vFjYlrUgSC96ld1MAGn3ZNWR/9fmnJW0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl
rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:de:cf:36:1f:cd:61:f7:3f:2d:f6:35:c0:6d:34:cf:e3:5e:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA
Validity
Not Before: Jul 23 16:40:24 2026 GMT
Not After : Jul 24 18:57:24 2026 GMT
Subject: CN=1C6303DD5EE05412C48AFB474FF20BFDBF278745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:9e:a2:b4:f6:7c:51:63:f0:d1:4d:aa:66:
b6:44:f9:11:97:bd:b4:39:c0:80:28:b2:93:db:64:
3d:ab:03:a4:1e:01:25:c0:a3:60:39:a8:d7:36:ab:
e8:89:be:86:7c:40:65:9e:1d:b4:1c:89:e7:e7:b4:
26:ee:6a:da:c0:f1:e2:2d:ff:42:1b:cd:4a:f3:ed:
79:23:47:15:b1:4d:37:53:39:1a:03:5d:8b:10:68:
50:34:29:bc:13:66:8b:36:84:31:c4:83:0b:4e:56:
42:47:bb:ac:99:df:96:c1:39:18:6b:46:a3:20:d5:
9a:43:5e:5b:26:e2:97:f7:c2:00:3d:0a:cf:b5:a4:
87:a6:2b:35:58:ab:cf:9b:d9:53:b6:56:8c:b4:3e:
ff:a7:a7:a6:cc:9b:2c:de:29:1d:d3:2b:26:3e:12:
c4:83:64:18:fe:6d:35:5f:88:a7:b6:d7:c0:49:09:
b9:cc:c0:f8:3c:98:fc:d3:49:07:95:6a:1f:1b:45:
1c:24:3f:96:52:e6:bd:e9:7d:fc:cf:9f:b7:77:f5:
63:c2:38:9f:0e:8e:32:81:5e:88:04:16:7e:aa:07:
ae:d9:37:75:fc:6c:a0:b8:5d:f2:1e:e3:09:80:d8:
b0:b7:aa:81:c8:19:b8:fb:d2:6d:68:8e:d5:a5:dc:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:03:DD:5E:E0:54:12:C4:8A:FB:47:4F:F2:0B:FD:BF:27:87:45
X509v3 Authority Key Identifier:
keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:7a:83:e1:a7:66:90:0e:7e:80:fc:d6:73:93:bc:db:0f:
af:36:05:eb:00:91:14:76:8b:51:c7:61:5d:70:7b:53:2c:4d:
19:ea:be:ee:bc:21:a6:db:43:fe:21:21:5e:e4:4a:e0:a9:92:
d8:38:7a:ab:4a:b4:0a:c6:6f:dd:28:b2:e2:67:8b:55:a9:7e:
60:15:54:c2:04:50:87:b2:f7:17:fa:ce:dc:5d:f7:37:42:a5:
3a:6e:f7:5f:48:ee:ba:8f:32:3c:a4:0a:19:88:ee:16:a0:cf:
49:57:e5:89:b4:f3:80:e2:24:aa:62:f3:2f:2a:06:7d:e6:ad:
51:af:e7:e6:6c:8e:4f:28:c3:b0:e3:89:79:5b:4f:2f:48:5f:
49:d6:d3:29:ee:d9:44:cc:42:8b:95:d9:a7:a2:07:45:30:58:
f8:e1:f8:03:92:c1:2f:58:ef:d4:e9:17:a8:04:87:df:0c:ff:
65:94:e6:03:73:e9:1a:8c:d7:92:fc:c8:9e:c2:02:4b:d2:50:
26:9a:94:d2:bd:f4:6c:44:df:2e:ee:11:d3:c1:67:05:99:62:
30:31:8a:19:4b:b3:33:2b:17:f3:71:ba:4c:58:fb:14:09:82:
94:84:46:9c:e5:37:0a:c2:94:4d:c4:30:6f:b1:9d:3c:75:d6:
20:4d:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:02 2026 by rpki-client