$ rpki-client -vvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json) Hash identifier: C0G/d0BQbOxNWsjMlkemlWpivXos2HKZNE1s6lEoMxQ= Subject key identifier: 7D:D8:7F:2E:4C:84:AE:8A:22:D4:A3:5A:4A:C0:60:E2:97:95:5D:B4 Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Certificate serial: 3FA0277FD988A7752B263B64B05C670F5C93DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:14:04 +0000 Manifest this update: Tue 12 May 2026 14:09:04 +0000 Manifest next update: Wed 13 May 2026 17:06:04 +0000 Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: a4X4LMPYQsa1wfBLpzLTqB5XYu6jyd/QsFH17h8YkoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a0:27:7f:d9:88:a7:75:2b:26:3b:64:b0:5c:67:0f:5c:93:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Validity Not Before: May 12 14:09:04 2026 GMT Not After : May 13 17:06:04 2026 GMT Subject: CN=7DD87F2E4C84AE8A22D4A35A4AC060E297955DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:fa:2f:18:fa:a5:ed:23:38:98:24:a4:e4: b2:00:07:3c:43:d4:b8:85:d0:00:f2:18:6e:54:fe: 86:b2:fa:0b:6a:07:fd:a6:ee:ff:05:03:b7:73:aa: c0:30:90:ab:37:c9:bd:6b:56:34:92:38:91:eb:fd: b9:b2:13:88:47:5a:54:f5:59:2d:d0:e1:35:4a:d2: b5:a8:94:61:42:e0:5e:1a:49:b8:d7:82:25:45:76: 7f:e6:c2:fc:a2:6c:1b:d8:69:27:02:cd:58:a1:6b: ac:5b:47:1f:82:f0:a2:aa:99:41:dd:d0:0a:98:40: 2b:8b:bf:ad:b6:d5:f6:32:65:c9:21:a3:d4:68:ba: c5:bc:d3:4b:cd:0c:db:3a:28:e9:d3:11:53:51:a1: b8:cd:9a:1d:8e:20:a2:bd:32:51:50:b6:21:1a:46: 3c:73:ad:89:1b:4e:9e:70:72:82:d4:09:cd:99:45: b6:95:cd:a1:73:c8:ed:84:ed:ea:14:ff:31:a2:c4: a5:3b:c3:ec:00:62:04:68:8c:71:23:9f:c2:db:db: 45:08:88:2e:ad:93:db:82:1a:95:64:82:15:f1:f1: c8:1e:72:3d:de:a6:01:23:b5:0e:b1:1f:01:8f:10: fb:56:0e:a8:44:29:30:e8:e2:d6:0a:e7:51:5c:78: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D8:7F:2E:4C:84:AE:8A:22:D4:A3:5A:4A:C0:60:E2:97:95:5D:B4 X509v3 Authority Key Identifier: keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:80:4a:fa:67:c6:ef:27:3f:e8:a5:a0:1d:8a:2a:03:3b:81: bd:de:80:fa:3b:bc:05:5a:ca:66:d7:6b:3d:0f:43:2d:75:99: ca:07:91:44:6f:4f:d6:59:47:ea:1d:00:47:b5:64:41:e6:0a: df:84:c6:03:ff:a0:24:a9:d2:0a:64:8a:a4:c7:f4:34:bd:8b: f6:f5:de:13:83:4b:d8:78:ff:89:e1:30:87:dc:a6:88:7b:c8: 64:d0:03:d4:80:4d:e8:aa:7d:94:00:6d:c9:4f:2e:82:36:bc: dd:c4:2c:43:23:4a:a5:f2:9b:be:e0:8a:ef:d1:55:f9:15:50: 6a:7f:46:b3:ab:c9:35:53:a1:d3:e4:46:3e:0d:34:f0:46:b0: 31:cb:4e:e8:53:c7:20:a0:ba:b2:f4:b7:71:55:dd:92:3f:8e: 99:2b:0d:96:db:d1:42:80:7d:bb:50:03:78:8f:0f:42:c7:a6: b6:68:18:38:a7:29:c4:a9:39:64:d7:f4:a5:44:14:25:90:10: 4c:af:65:3e:f2:37:9a:af:cf:17:ca:7d:7f:06:38:4c:d7:3b: 48:16:90:8c:25:c4:a0:56:ca:ac:1e:f4:d5:b2:46:5b:21:8b: d3:21:22:46:79:aa:25:cc:05:cc:cf:82:2d:3e:31:43:be:2b: 88:61:cc:b3 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITP6Anf9mIp3UrJjtksFxnD1yT3DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyNTM3RkNEQTg2OEY3MkMyRjZEOTk4NDQ2QkRGQzkwRjVE Rjc0MkRBMB4XDTI2MDUxMjE0MDkwNFoXDTI2MDUxMzE3MDYwNFowMzExMC8GA1UE AxMoN0REODdGMkU0Qzg0QUU4QTIyRDRBMzVBNEFDMDYwRTI5Nzk1NURCNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK41+i8Y+qXtIziYJKTksgAHPEPU uIXQAPIYblT+hrL6C2oH/abu/wUDt3OqwDCQqzfJvWtWNJI4kev9ubITiEdaVPVZ LdDhNUrStaiUYULgXhpJuNeCJUV2f+bC/KJsG9hpJwLNWKFrrFtHH4LwoqqZQd3Q CphAK4u/rbbV9jJlySGj1Gi6xbzTS80M2zoo6dMRU1GhuM2aHY4gor0yUVC2IRpG PHOtiRtOnnBygtQJzZlFtpXNoXPI7YTt6hT/MaLEpTvD7ABiBGiMcSOfwtvbRQiI Lq2T24IalWSCFfHxyB5yPd6mASO1DrEfAY8Q+1YOqEQpMOji1grnUVx4DJcCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBR92H8uTISuiiLUo1pKwGDil5VdtDAfBgNVHSME GDAWgBQlN/zaho9ywvbZmERr38kPXfdC2jAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC8yNTM3RkNEQTg2 OEY3MkMyRjZEOTk4NDQ2QkRGQzkwRjVERjc0MkRBLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzI1MzdGQ0RBODY4RjcyQzJGNkQ5OTg0NDZCREZDOTBGNURGNzQy REEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMTMzNGQwMy1lYWU0LTRkMjAtYmE1 NC1iMTg4OWQ5MjQ3YWMvMC8yNTM3RkNEQTg2OEY3MkMyRjZEOTk4NDQ2QkRGQzkw RjVERjc0MkRBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAPYBK+mfG7yc/6KWgHYoqAzuBvd6A+ju8BVrK ZtdrPQ9DLXWZygeRRG9P1llH6h0AR7VkQeYK34TGA/+gJKnSCmSKpMf0NL2L9vXe E4NL2Hj/ieEwh9ymiHvIZNAD1IBN6Kp9lABtyU8ugja83cQsQyNKpfKbvuCK79FV +RVQan9Gs6vJNVOh0+RGPg008EawMctO6FPHIKC6svS3cVXdkj+OmSsNltvRQoB9 u1ADeI8PQsemtmgYOKcpxKk5ZNf0pUQUJZAQTK9lPvI3mq/PF8p9fwY4TNc7SBaQ jCXEoFbKrB701bJGWyGL0yEiRnmqJcwFzM+CLT4xQ74riGHMsw== -----END CERTIFICATE-----Generated at Wed May 13 01:07:02 2026 by rpki-client