$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft File: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft (raw, json) Hash identifier: /7jbzDLmhCWJfQg5oJvhCXE+kIyxJ8wQyGJcVESormM= Subject key identifier: 7D:85:AE:67:23:C6:C0:EB:13:CE:B4:8B:17:77:4B:FF:D3:26:FF:19 Authority key identifier: 25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA Certificate issuer: /CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Certificate serial: 3F0F6BEC5476F34DD51AEAACBDC7C573F8B13980 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 20:31:18 +0000 Manifest this update: Mon 09 Nov 2026 20:26:18 +0000 Manifest next update: Wed 11 Nov 2026 00:10:18 +0000 Files and hashes: 1: 2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl (hash: bJZSLcF9dKgi72wZcz5fnxFRPTiNf7n+tqbWK7hIjJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0f:6b:ec:54:76:f3:4d:d5:1a:ea:ac:bd:c7:c5:73:f8:b1:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2537FCDA868F72C2F6D998446BDFC90F5DF742DA Validity Not Before: Nov 9 20:26:18 2026 GMT Not After : Nov 11 00:10:18 2026 GMT Subject: CN=7D85AE6723C6C0EB13CEB48B17774BFFD326FF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:b1:35:25:d5:fc:da:a8:bc:72:e3:e7:15: 10:84:2e:ef:5f:79:43:01:8d:55:f1:69:e5:39:0d: c6:e4:8b:19:b9:a9:b2:e3:73:6d:b9:e6:71:a8:8a: 2f:d4:42:07:6f:a1:b3:5d:d6:25:bf:b0:53:20:d9: 91:75:9f:f2:a4:06:17:21:ea:2b:8b:0b:ee:36:8b: 24:4b:68:46:f1:2a:1e:c7:4d:fc:42:ed:ca:09:03: b5:4f:f3:9c:b7:20:67:d9:ac:c3:86:0f:82:28:83: 78:19:42:41:bd:4b:1c:c1:67:d9:c0:8a:c5:11:7b: b7:05:40:66:9f:87:d2:c7:cd:37:c1:f1:89:f1:2d: e0:1a:63:de:17:b9:75:64:e9:30:34:e9:28:8f:db: 37:6d:a7:45:2c:77:3b:9a:88:89:0a:0e:2d:2e:c5: a5:6c:7e:4f:82:c6:0a:e8:62:84:0d:a6:5e:73:36: 73:00:b5:e3:ef:81:47:37:4e:cf:d4:a4:6f:cf:c5: ef:d7:c9:64:49:ed:58:b4:c7:c0:fc:5c:30:9c:4d: ab:97:3d:14:6d:8f:08:33:e9:35:61:5c:48:65:7a: 6f:a6:21:b5:f6:b0:12:c3:98:cf:d9:26:36:24:2c: ce:61:25:1d:f3:f0:d4:a2:c0:f1:78:e3:bb:50:7b: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:85:AE:67:23:C6:C0:EB:13:CE:B4:8B:17:77:4B:FF:D3:26:FF:19 X509v3 Authority Key Identifier: keyid:25:37:FC:DA:86:8F:72:C2:F6:D9:98:44:6B:DF:C9:0F:5D:F7:42:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/2537FCDA868F72C2F6D998446BDFC90F5DF742DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cd:60:16:0e:c4:12:b3:20:95:ed:69:47:4d:b9:3b:ef:f4: 6f:15:ef:23:da:7e:21:1b:2b:13:d1:ad:e4:bc:27:28:ee:31: 32:9d:80:b3:52:52:a1:6e:2c:11:c8:1d:2f:f3:8f:05:2e:95: 31:53:8d:be:e8:83:52:ac:f0:cc:0d:62:1b:fd:0a:95:00:49: 40:93:73:db:e5:cb:9b:b7:9d:cd:4f:35:b6:ba:1d:c3:46:1e: 60:e4:af:54:8c:5c:dd:08:e5:fd:aa:8a:7b:0e:d4:5c:29:35: a1:0d:1a:30:63:ca:59:f2:b2:34:1c:f3:5b:80:46:19:81:32: 5b:5f:70:ba:4f:1d:8c:36:a8:ad:0a:93:60:03:38:3a:af:7c: a1:0e:77:41:c4:9a:0d:04:0a:1b:45:a3:0d:cd:e2:00:4d:9f: 55:97:50:3a:3f:1a:2a:89:03:a4:03:ee:2c:db:0a:37:ef:f2: 41:73:f7:35:b6:67:1b:e6:10:ff:8a:7a:0f:8e:97:d2:17:73: 5c:36:16:d5:6d:65:f6:d2:ef:e3:7d:b7:7a:2b:b1:3a:d1:40: 44:bb:1c:6f:9f:02:a8:2a:50:99:48:e8:3f:1d:e4:5b:70:81: 86:94:5f:d4:c7:27:58:36:3e:c2:56:39:18:e5:49:88:47:61: 83:2e:d5:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPw9r7FR2803VGuqsvcfFc/ixOYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1 REY3NDJEQTAeFw0yNjExMDkyMDI2MThaFw0yNjExMTEwMDEwMThaMDMxMTAvBgNV BAMTKDdEODVBRTY3MjNDNkMwRUIxM0NFQjQ4QjE3Nzc0QkZGRDMyNkZGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/bE1JdX82qi8cuPnFRCELu9f eUMBjVXxaeU5Dcbkixm5qbLjc2255nGoii/UQgdvobNd1iW/sFMg2ZF1n/KkBhch 6iuLC+42iyRLaEbxKh7HTfxC7coJA7VP85y3IGfZrMOGD4Iog3gZQkG9SxzBZ9nA isURe7cFQGafh9LHzTfB8YnxLeAaY94XuXVk6TA06SiP2zdtp0UsdzuaiIkKDi0u xaVsfk+CxgroYoQNpl5zNnMAtePvgUc3Ts/UpG/Pxe/XyWRJ7Vi0x8D8XDCcTauX PRRtjwgz6TVhXEhlem+mIbX2sBLDmM/ZJjYkLM5hJR3z8NSiwPF447tQe+ARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYWuZyPGwOsTzrSLF3dL/9Mm/xkwHwYDVR0j BBgwFoAUJTf82oaPcsL22ZhEa9/JD133QtowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjEzMzRkMDMtZWFlNC00ZDIwLWJhNTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4 NjhGNzJDMkY2RDk5ODQ0NkJERkM5MEY1REY3NDJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM3RkNEQTg2OEY3MkMyRjZEOTk4NDQ2QkRGQzkwRjVERjc0 MkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvMjUzN0ZDREE4NjhGNzJDMkY2RDk5ODQ0NkJERkM5 MEY1REY3NDJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3NYBYOxBKzIJXtaUdNuTvv9G8V7yPafiEb KxPRreS8JyjuMTKdgLNSUqFuLBHIHS/zjwUulTFTjb7og1Ks8MwNYhv9CpUASUCT c9vly5u3nc1PNba6HcNGHmDkr1SMXN0I5f2qinsO1FwpNaENGjBjylnysjQc81uA RhmBMltfcLpPHYw2qK0Kk2ADODqvfKEOd0HEmg0EChtFow3N4gBNn1WXUDo/GiqJ A6QD7izbCjfv8kFz9zW2ZxvmEP+Keg+Ol9IXc1w2FtVtZfbS7+N9t3orsTrRQES7 HG+fAqgqUJlI6D8d5FtwgYaUX9THJ1g2PsJWORjlSYhHYYMu1UM= -----END CERTIFICATE-----Generated at Tue Nov 10 02:46:06 2026 by rpki-client