$ rpki-client -vvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json) Hash identifier: SDu9CN81NPgTuQUm4rdOphUFH+6VS6Qf++nAFZsUIiQ= Subject key identifier: AF:5B:7A:86:BB:3A:A0:57:76:4F:CD:18:DD:18:FC:BC:D0:0B:74:EE Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Certificate serial: 23F5DA44BCD28421419EFC61C1B1843B4B1DADE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:47:49 +0000 Manifest this update: Tue 16 Jun 2026 23:42:49 +0000 Manifest next update: Thu 18 Jun 2026 02:05:49 +0000 Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: gz3inTnGGa663M1RxQr54ngsR5+nDOANYathOLxrJoY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f5:da:44:bc:d2:84:21:41:9e:fc:61:c1:b1:84:3b:4b:1d:ad:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Validity Not Before: Jun 16 23:42:49 2026 GMT Not After : Jun 18 02:05:49 2026 GMT Subject: CN=AF5B7A86BB3AA057764FCD18DD18FCBCD00B74EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:ea:8d:3a:f8:68:4b:5d:07:b9:c1:91:78: 1b:40:9f:98:45:52:2c:c1:f8:89:03:18:d0:d3:d6: c7:3f:91:89:b0:97:36:4f:d2:34:19:d3:6f:5d:68: 71:40:e9:ec:6f:1b:57:97:28:97:f9:f8:5b:c3:7d: 11:6b:5b:3a:09:fe:6e:0f:1f:03:3d:a4:36:60:9b: 79:ec:d6:22:a2:26:b7:18:2d:60:60:10:e4:af:93: da:3d:65:e3:3a:91:e8:0b:0b:93:51:79:d9:a1:16: ef:01:0f:b1:f4:43:1a:00:b3:50:b9:bc:b0:20:0d: 7d:cf:84:73:f7:ce:23:ad:fc:3b:1b:30:b7:fc:97: 71:81:8f:6c:1b:75:7a:1d:8d:2c:8a:e8:dc:eb:07: f5:14:7e:7e:38:88:e0:90:b0:f8:34:eb:71:7c:f3: b7:ee:0f:88:66:09:52:81:19:b7:06:05:4c:0e:ff: 82:72:5a:6a:ae:92:fe:9a:6f:0d:81:63:fd:74:f5: c1:de:47:ef:89:b0:50:5c:8e:a2:2d:b2:15:29:9f: f8:cf:dd:17:b1:2d:3e:7a:a0:ba:79:02:95:ee:f8: bd:2b:ae:bb:63:43:6b:43:b9:53:cd:a8:46:75:d0: 0c:ef:f5:11:ac:90:9f:73:62:b0:31:32:5b:55:a3: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5B:7A:86:BB:3A:A0:57:76:4F:CD:18:DD:18:FC:BC:D0:0B:74:EE X509v3 Authority Key Identifier: keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f2:15:dd:30:01:0d:f1:27:92:63:4f:db:8c:06:2d:15:bc: 37:d1:be:f5:62:de:f2:f6:17:62:86:48:4b:1d:59:4e:3e:32: 43:41:4a:af:df:24:44:ad:d2:bc:24:01:6a:76:ba:8c:b8:db: 07:4c:76:4d:9f:43:cb:bd:ed:1c:1c:5d:ea:23:0a:14:b7:16: 75:ad:36:cc:90:41:06:ae:ef:11:f7:05:fb:b7:28:ec:e8:80: be:ff:a0:de:77:28:22:00:1b:8a:48:a8:ff:b1:4d:00:36:a0: 01:c8:0d:7a:3c:19:25:20:9f:95:5c:da:78:04:54:58:33:e5: 2d:62:62:4b:74:a7:7f:7e:a3:01:d7:32:d1:af:74:7d:b6:c5: 7c:c3:99:ea:ef:4f:29:74:06:16:36:a7:06:7e:83:08:25:4d: 26:99:5a:33:ec:98:b3:bb:f5:f6:44:b1:79:83:50:f9:f0:c9: 04:24:42:c3:5d:8d:7d:3f:11:9e:66:77:81:51:d6:7c:09:cd: 65:2c:32:5b:06:30:7b:ce:37:72:54:27:76:11:bd:ba:16:00: 18:b6:a2:ad:5b:be:1b:1b:08:5f:44:8f:db:ed:a1:3d:ce:e5: cc:82:53:aa:5d:22:e0:a6:7a:15:9b:85:a1:a3:b7:42:44:ea: 72:12:14:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/XaRLzShCFBnvxhwbGEO0sdrecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1 REY3NDJEQTAeFw0yNjA2MTYyMzQyNDlaFw0yNjA2MTgwMjA1NDlaMDMxMTAvBgNV BAMTKEFGNUI3QTg2QkIzQUEwNTc3NjRGQ0QxOEREMThGQ0JDRDAwQjc0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjuqNOvhoS10HucGReBtAn5hF UizB+IkDGNDT1sc/kYmwlzZP0jQZ029daHFA6exvG1eXKJf5+FvDfRFrWzoJ/m4P HwM9pDZgm3ns1iKiJrcYLWBgEOSvk9o9ZeM6kegLC5NRedmhFu8BD7H0QxoAs1C5 vLAgDX3PhHP3ziOt/DsbMLf8l3GBj2wbdXodjSyK6NzrB/UUfn44iOCQsPg063F8 87fuD4hmCVKBGbcGBUwO/4JyWmqukv6abw2BY/109cHeR++JsFBcjqItshUpn/jP 3RexLT56oLp5ApXu+L0rrrtjQ2tDuVPNqEZ10Azv9RGskJ9zYrAxMltVo2BZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr1t6hrs6oFd2T80Y3Rj8vNALdO4wHwYDVR0j BBgwFoAUJTf82oaPcsL22ZhEa9/JD133QtowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjEzMzRkMDMtZWFlNC00ZDIwLWJhNTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4 NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1REY3NDJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM3RkNEQTg2OEY3MkMyRjZEOTk4NDQ2QkRGQzkwRjVERjc0 MkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5 MEY1REY3NDJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHyFd0wAQ3xJ5JjT9uMBi0VvDfRvvVi3vL2 F2KGSEsdWU4+MkNBSq/fJESt0rwkAWp2uoy42wdMdk2fQ8u97RwcXeojChS3FnWt NsyQQQau7xH3Bfu3KOzogL7/oN53KCIAG4pIqP+xTQA2oAHIDXo8GSUgn5Vc2ngE VFgz5S1iYkt0p39+owHXMtGvdH22xXzDmervTyl0BhY2pwZ+gwglTSaZWjPsmLO7 9fZEsXmDUPnwyQQkQsNdjX0/EZ5md4FR1nwJzWUsMlsGMHvON3JUJ3YRvboWABi2 oq1bvhsbCF9Ej9vtoT3O5cyCU6pdIuCmehWbhaGjt0JE6nISFG0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:21 2026 by rpki-client