$ rpki-client -vvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json) Hash identifier: pSI2b8ocoJ/OHhbB9O+a7RUgPPXGDMPVjOTdQzVv3QU= Subject key identifier: 21:FA:76:E0:7C:70:7E:0B:7B:76:45:4C:31:FB:7E:26:35:23:44:A1 Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Certificate serial: 4A23E2AAFAB30C083E6B7C1734660E9BCA414D40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 01:26:27 +0000 Manifest this update: Sat 20 Jun 2026 01:21:27 +0000 Manifest next update: Sun 21 Jun 2026 03:09:27 +0000 Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: yFwBrPKjzsE8X58yp9JPNCohOpNrLBlrKPlILbmHhGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:23:e2:aa:fa:b3:0c:08:3e:6b:7c:17:34:66:0e:9b:ca:41:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Validity Not Before: Jun 20 01:21:27 2026 GMT Not After : Jun 21 03:09:27 2026 GMT Subject: CN=21FA76E07C707E0B7B76454C31FB7E26352344A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:59:b5:8a:f9:8d:7f:19:eb:98:b1:70:7f: fa:2b:86:9f:84:1b:53:ec:ae:a1:0d:b3:d4:7b:8c: 2b:02:27:ea:0d:c7:e3:6d:46:2a:8d:96:2f:ca:8a: 75:58:bd:50:bc:52:5d:9c:d5:c4:0b:19:98:f6:fe: 5b:f0:c9:95:b5:3f:55:70:a1:90:ac:44:42:c1:a1: 9a:3e:ea:d4:bd:49:b1:2b:c6:c9:12:74:fd:03:8a: c9:d6:b9:2d:da:61:7c:90:ab:8c:ac:df:01:61:58: f7:6a:4e:f5:9f:67:fa:dc:67:9d:7c:f9:14:55:dc: 03:b7:cd:09:94:2a:26:13:92:11:b2:11:c1:df:77: a7:3b:ad:62:e8:b9:76:25:19:bb:3d:44:32:a4:01: 10:25:51:59:7a:d6:4c:7b:94:60:9b:ba:64:c9:36: 13:8d:13:a4:39:ba:6e:b2:52:01:fc:c0:06:19:f3: cb:04:77:b7:7c:ef:dc:48:a2:ff:6a:ea:83:7b:63: 6f:8b:b6:5b:24:b2:4c:66:6c:fc:0d:27:99:be:b9: b5:eb:05:ec:77:43:29:25:c5:cb:db:ba:87:80:99: 49:e8:c2:0b:28:d3:35:dc:17:2f:c6:89:32:28:c4: 32:dd:df:39:10:c8:f2:11:b2:f3:8f:9f:2b:b5:d4: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:76:E0:7C:70:7E:0B:7B:76:45:4C:31:FB:7E:26:35:23:44:A1 X509v3 Authority Key Identifier: keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:34:42:77:43:9d:0b:15:9f:4d:2b:79:76:12:23:46:84:a8: 75:af:76:de:9c:4b:7e:31:bd:14:45:c4:c5:f6:ca:4a:87:e7: 2c:f7:84:40:b3:9c:0a:06:2f:a3:3f:71:b8:48:11:b1:a4:59: 82:da:8f:da:ed:eb:9e:ce:f1:d4:f3:77:b5:5d:42:e9:d7:4a: 2d:55:2e:23:9e:f1:a6:31:a1:4e:e0:b1:c8:e4:77:14:f1:07: 46:e0:15:d2:18:03:26:89:58:04:a0:b7:f2:e6:89:d9:13:37: 10:3c:06:fd:2e:92:70:e5:83:da:2e:ee:90:91:ce:1f:7c:0b: e1:fa:f6:ba:c4:ef:af:e0:19:56:99:29:ee:9f:b5:3f:7f:63: ce:72:e8:46:91:80:59:43:3a:53:27:26:a5:38:8f:0c:84:2d: 5e:87:ea:50:fd:9b:d8:5a:9a:6c:e4:fb:da:8f:4c:e6:4e:a3: 50:84:9d:6c:95:a2:78:a6:f5:1d:2b:3d:c6:fa:df:d2:ce:a2: f5:c3:85:01:67:a0:ff:c4:4a:64:13:81:28:82:bb:dc:c1:e6: bc:dc:b2:0a:5a:1f:66:25:dd:84:b8:b6:ea:8e:ca:90:86:ce: 3c:94:2d:ec:68:6b:6e:54:e1:52:8f:a3:18:f1:af:39:85:32: 0c:4f:d5:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiPiqvqzDAg+a3wXNGYOm8pBTUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1 REY3NDJEQTAeFw0yNjA2MjAwMTIxMjdaFw0yNjA2MjEwMzA5MjdaMDMxMTAvBgNV BAMTKDIxRkE3NkUwN0M3MDdFMEI3Qjc2NDU0QzMxRkI3RTI2MzUyMzQ0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICVm1ivmNfxnrmLFwf/orhp+E G1PsrqENs9R7jCsCJ+oNx+NtRiqNli/KinVYvVC8Ul2c1cQLGZj2/lvwyZW1P1Vw oZCsRELBoZo+6tS9SbErxskSdP0DisnWuS3aYXyQq4ys3wFhWPdqTvWfZ/rcZ518 +RRV3AO3zQmUKiYTkhGyEcHfd6c7rWLouXYlGbs9RDKkARAlUVl61kx7lGCbumTJ NhONE6Q5um6yUgH8wAYZ88sEd7d879xIov9q6oN7Y2+LtlskskxmbPwNJ5m+ubXr Bex3QyklxcvbuoeAmUnowgso0zXcFy/GiTIoxDLd3zkQyPIRsvOPnyu11Ku3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfp24Hxwfgt7dkVMMft+JjUjRKEwHwYDVR0j BBgwFoAUJTf82oaPcsL22ZhEa9/JD133QtowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjEzMzRkMDMtZWFlNC00ZDIwLWJhNTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4 NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1REY3NDJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM3RkNEQTg2OEY3MkMyRjZEOTk4NDQ2QkRGQzkwRjVERjc0 MkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5 MEY1REY3NDJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM0QndDnQsVn00reXYSI0aEqHWvdt6cS34x vRRFxMX2ykqH5yz3hECznAoGL6M/cbhIEbGkWYLaj9rt657O8dTzd7VdQunXSi1V LiOe8aYxoU7gscjkdxTxB0bgFdIYAyaJWASgt/LmidkTNxA8Bv0uknDlg9ou7pCR zh98C+H69rrE76/gGVaZKe6ftT9/Y85y6EaRgFlDOlMnJqU4jwyELV6H6lD9m9ha mmzk+9qPTOZOo1CEnWyVonim9R0rPcb639LOovXDhQFnoP/ESmQTgSiCu9zB5rzc sgpaH2Yl3YS4tuqOypCGzjyULexoa25U4VKPoxjxrzmFMgxP1Xo= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:43 2026 by rpki-client