
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json)
Hash identifier: Pnjv0TSoJ2FY2K3wudkQgTNw5MliGV4b0lfq4qHRWZY=
Subject key identifier: 2E:4C:C4:4B:62:18:6B:19:84:07:88:AB:F4:83:C1:A4:06:2D:BF:B8
Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA
Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA
Certificate serial: 777DC1921E3E04B2C534736100ECA0A276CE94D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 09:54:27 +0000
Manifest this update: Sun 20 Sep 2026 09:49:27 +0000
Manifest next update: Mon 21 Sep 2026 12:51:27 +0000
Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: LWde9uFayd6uiZhI+0hNrQgFnq4dmq7S/tgH7L0hET4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl
rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 12:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7d:c1:92:1e:3e:04:b2:c5:34:73:61:00:ec:a0:a2:76:ce:94:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA
Validity
Not Before: Sep 20 09:49:27 2026 GMT
Not After : Sep 21 12:51:27 2026 GMT
Subject: CN=2E4CC44B62186B19840788ABF483C1A4062DBFB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:5f:58:9d:1e:b3:8c:da:e2:5e:1f:1d:fa:
35:54:e4:d1:d1:f0:8d:e9:14:cb:4e:a6:1a:7b:15:
cd:bd:8e:1d:7c:a4:64:db:1e:5a:1d:42:a4:18:88:
b5:93:9a:e7:7e:49:c9:0c:39:6b:9d:99:0f:6d:6b:
9e:6a:bf:11:24:4c:93:8c:e5:d9:20:c1:ad:6d:9e:
74:58:11:ad:85:99:f9:9d:3a:bc:31:5a:91:6f:89:
d9:3b:d1:86:92:2a:c0:7d:49:26:07:24:97:e8:8c:
bd:fa:5b:91:5a:a2:d1:4a:36:49:73:e9:c6:8c:a5:
4f:7d:ee:1a:ed:23:70:04:9c:56:62:cf:df:0b:1c:
c2:3b:cd:50:fb:9a:b9:e1:71:1c:1e:d1:e5:d8:bd:
80:d2:e1:40:23:54:1b:ad:11:67:cc:4d:0d:7f:c8:
87:ea:cf:37:c0:59:e4:92:92:04:e1:ca:78:10:0a:
f4:09:56:69:35:0a:4d:17:40:47:2a:af:aa:b0:fd:
20:dd:1d:fd:ab:3b:68:4e:30:9e:54:17:21:01:d7:
5e:a3:d1:a3:79:d3:12:a5:f7:3d:b7:c7:40:41:2e:
dd:a5:13:5e:26:0b:04:88:b4:42:ab:e5:13:6c:90:
b8:eb:fb:0d:e8:88:71:58:b3:2e:57:11:99:53:74:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:C4:4B:62:18:6B:19:84:07:88:AB:F4:83:C1:A4:06:2D:BF:B8
X509v3 Authority Key Identifier:
keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:55:d9:cf:3c:84:a1:11:81:05:69:b1:ca:46:53:bd:fe:
7a:66:0d:01:3f:17:46:6e:00:56:cd:d5:75:d1:1e:fc:20:70:
95:45:de:ca:93:14:e3:30:9d:89:12:c2:a6:db:5c:bc:06:c9:
ee:25:c0:66:30:4b:c5:66:67:14:36:39:69:54:85:2e:cd:21:
bb:ae:81:cd:0f:2e:f0:af:be:47:67:6c:35:92:fe:b7:01:8a:
b1:c3:bc:23:e7:ec:22:c6:26:ba:3a:59:a2:81:51:36:a4:3d:
90:0f:21:3c:d9:39:e7:73:05:8e:fe:d8:aa:27:bc:da:83:f5:
5f:83:67:e2:8c:78:b7:fb:02:95:db:63:58:6f:3d:62:20:18:
71:24:a4:5f:a6:b9:39:0f:1c:dc:ea:ad:91:18:5c:89:b3:f2:
85:5c:2f:c1:4b:fc:af:7f:0e:09:34:6a:1a:56:50:bb:aa:95:
bb:b3:cd:15:1f:ad:3b:44:68:ad:f2:ba:53:ae:ef:34:64:50:
40:07:fb:3c:f6:03:16:e5:b8:33:dd:c3:e6:9c:60:a5:d3:29:
8a:8e:55:26:0d:08:25:6a:74:3f:c0:da:6b:26:88:1a:5a:bf:
de:c2:e4:78:8d:dc:d2:f1:5e:5c:f1:b8:11:7d:18:15:85:bc:
f0:75:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:16:31 2026 by rpki-client