$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json) Hash identifier: 2Z2wQibu1yPB3uVy+MGt0y3x5RRfIFh3oH6sxDgGIdw= Subject key identifier: 64:81:A6:6B:10:5E:D3:C7:7D:59:E9:49:52:3C:9D:71:D9:DA:42:1A Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Certificate serial: 76305B31DF0B0824CE4EEA2D857228C401AB1E05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:30:50 +0000 Manifest this update: Wed 16 Sep 2026 17:25:50 +0000 Manifest next update: Thu 17 Sep 2026 20:05:50 +0000 Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: r5zQw4NE8vchVWBpKXi8TYbrqX7oRBUZVHp5EIX9e5A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:30:5b:31:df:0b:08:24:ce:4e:ea:2d:85:72:28:c4:01:ab:1e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Validity Not Before: Sep 16 17:25:50 2026 GMT Not After : Sep 17 20:05:50 2026 GMT Subject: CN=6481A66B105ED3C77D59E949523C9D71D9DA421A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:26:3c:5e:1c:92:ec:f4:00:7d:5f:39:31: 05:d6:d9:6c:a5:b9:24:f7:6e:ee:c3:b5:4a:da:93: 40:3a:16:47:84:e5:ce:34:23:91:ea:5b:29:e0:a8: e3:7f:4c:18:22:3d:08:f8:a3:f9:d8:d7:70:5a:26: 11:ad:0d:c4:e4:d2:42:0e:83:b1:39:27:07:71:0d: 91:3e:45:ef:9c:74:f0:7e:af:33:9b:12:fc:77:27: 7f:b1:6b:b2:29:33:fb:a4:e4:5e:47:65:02:74:ed: de:c4:4c:11:d0:9a:6e:4f:75:d4:b4:0c:2e:a3:df: 96:f5:8f:6f:1f:62:cf:2a:71:aa:91:e7:10:df:22: c8:c3:95:c2:4f:bf:96:13:87:30:2f:21:e3:83:3d: 55:29:8c:69:7a:4b:a6:61:a4:be:b1:55:b6:7c:ab: 18:3f:53:34:33:64:60:e1:39:36:45:da:da:b0:89: 55:2c:d6:84:73:13:ad:02:c6:f2:47:3b:25:fd:26: 5f:1a:d5:a5:70:c2:0a:4c:3a:4b:ec:8a:fc:c1:5b: 52:e3:de:f4:d7:a2:31:f1:57:90:6d:a0:77:8b:9c: fe:c9:6d:e8:a8:33:61:f3:80:31:1f:37:ff:3d:2b: 5a:0f:33:aa:a6:52:bd:bf:25:27:0f:47:e2:c3:3e: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:81:A6:6B:10:5E:D3:C7:7D:59:E9:49:52:3C:9D:71:D9:DA:42:1A X509v3 Authority Key Identifier: keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6f:dc:b0:a9:08:04:57:3c:25:36:4c:91:c3:d3:7a:77:45: 30:9c:46:fd:6d:58:00:83:ae:b6:77:49:e5:be:3c:a3:bd:a7: 91:53:80:0d:42:e9:22:b3:36:53:56:85:53:23:8e:e9:71:38: ef:77:56:68:96:6b:e0:b1:96:31:f9:96:2e:d7:16:64:19:8f: 41:f8:d3:e3:a3:12:43:05:9d:1b:4d:da:10:97:db:8b:e4:7a: 7d:38:af:e8:b6:f5:3f:a8:26:70:64:89:e7:f5:2a:3e:0c:e4: 25:d0:c8:33:6a:0f:07:57:2b:00:8c:59:4d:26:90:ef:86:5c: 12:80:b2:74:4c:ec:ba:20:5a:7f:70:62:c7:d5:0b:13:86:89: 7e:f8:42:46:96:bf:fc:19:16:ab:09:2a:67:54:f6:9a:56:0b: 2a:ee:5b:e8:31:80:14:45:59:68:e1:e1:46:79:55:13:83:31: 20:2c:d3:84:b5:4b:65:7d:d9:98:e9:d7:34:64:f4:3f:cf:7c: 83:3a:26:49:62:f4:83:62:9d:cb:8f:4a:12:41:3f:d6:1d:be: ac:3c:66:c0:36:f7:04:af:25:60:b5:c5:01:a6:6e:97:52:58: 75:7d:13:a6:67:b1:f4:41:ec:44:51:12:80:5b:7b:19:79:b7: 81:a0:f0:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjBbMd8LCCTOTuothXIoxAGrHgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1 REY3NDJEQTAeFw0yNjA5MTYxNzI1NTBaFw0yNjA5MTcyMDA1NTBaMDMxMTAvBgNV BAMTKDY0ODFBNjZCMTA1RUQzQzc3RDU5RTk0OTUyM0M5RDcxRDlEQTQyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqayY8XhyS7PQAfV85MQXW2Wyl uST3bu7DtUrak0A6FkeE5c40I5HqWyngqON/TBgiPQj4o/nY13BaJhGtDcTk0kIO g7E5JwdxDZE+Re+cdPB+rzObEvx3J3+xa7IpM/uk5F5HZQJ07d7ETBHQmm5PddS0 DC6j35b1j28fYs8qcaqR5xDfIsjDlcJPv5YThzAvIeODPVUpjGl6S6ZhpL6xVbZ8 qxg/UzQzZGDhOTZF2tqwiVUs1oRzE60CxvJHOyX9Jl8a1aVwwgpMOkvsivzBW1Lj 3vTXojHxV5BtoHeLnP7JbeioM2HzgDEfN/89K1oPM6qmUr2/JScPR+LDPgwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIGmaxBe08d9WelJUjydcdnaQhowHwYDVR0j BBgwFoAUJTf82oaPcsL22ZhEa9/JD133QtowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjEzMzRkMDMtZWFlNC00ZDIwLWJhNTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4 NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1REY3NDJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM3RkNEQTg2OEY3MkMyRjZEOTk4NDQ2QkRGQzkwRjVERjc0 MkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5 MEY1REY3NDJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1v3LCpCARXPCU2TJHD03p3RTCcRv1tWACD rrZ3SeW+PKO9p5FTgA1C6SKzNlNWhVMjjulxOO93VmiWa+CxljH5li7XFmQZj0H4 0+OjEkMFnRtN2hCX24vken04r+i29T+oJnBkief1Kj4M5CXQyDNqDwdXKwCMWU0m kO+GXBKAsnRM7LogWn9wYsfVCxOGiX74QkaWv/wZFqsJKmdU9ppWCyruW+gxgBRF WWjh4UZ5VRODMSAs04S1S2V92Zjp1zRk9D/PfIM6Jkli9INincuPShJBP9Ydvqw8 ZsA29wSvJWC1xQGmbpdSWHV9E6ZnsfRB7ERREoBbexl5t4Gg8EY= -----END CERTIFICATE-----Generated at Thu Sep 17 11:27:19 2026 by rpki-client