$ rpki-client -vvvf rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft File: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft (raw, json) Hash identifier: hdJ7WJQnvMVcfFOLovlSUyQRGIk1Sgg1iP2fRvrF5N4= Subject key identifier: 13:16:7B:D5:A0:9A:2E:33:C4:66:8C:16:A3:B5:51:49:D0:70:29:53 Authority key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C Certificate issuer: /CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Certificate serial: 109B9D3D8C75A0E5B7433A6D2A8508DF1A7483FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft Manifest number: BF Signing time: Thu 24 Sep 2026 03:04:30 +0000 Manifest this update: Thu 24 Sep 2026 02:59:30 +0000 Manifest next update: Fri 25 Sep 2026 04:09:30 +0000 Files and hashes: 1: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: fDwZ64mEh+x1WuETLacd3r9tfK8cPQNEGMbhAGN9C4Y=) 2: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: nGWF5bh5L9qLAbKGSQCdAzJDlVgMMzvWoQdUcdutKoU=) 3: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl (hash: 9HN+2KrijpK7IL4Get/sKQTcikYrzCJ0bMm1NPV1PD0=) 4: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: DFUdvmptS4s6MDKitZ4+QYcs7u5EAsI/gqRu9ukPOuQ=) 5: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: fOWfEwCz1sQLruXxV5SZRGMn95LgQ1Kei01ICgLlNgA=) 6: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: bgqcpq4oGXRBhHkGTY354tyAP6tYrpWUR1LBW+CZlRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9b:9d:3d:8c:75:a0:e5:b7:43:3a:6d:2a:85:08:df:1a:74:83:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Validity Not Before: Sep 24 02:59:30 2026 GMT Not After : Sep 25 04:09:30 2026 GMT Subject: CN=13167BD5A09A2E33C4668C16A3B55149D0702953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b8:4d:55:f2:85:3a:6f:7d:79:ac:6e:47:53: a3:84:6c:fe:7e:a1:bc:cc:de:80:e4:ad:42:55:9f: 42:5d:88:c6:eb:46:80:fd:67:55:d9:1a:0a:9b:8b: d6:e7:5c:77:72:81:aa:02:19:9a:c1:43:ed:4f:86: 8b:44:d1:3d:12:7d:2f:8a:46:54:8e:80:23:af:26: bb:2d:64:7d:6b:e0:4c:0c:fb:92:d2:0a:53:87:4b: 1d:19:f4:51:8c:d1:61:a4:d3:50:24:d6:b7:26:4e: 17:e4:16:d2:ef:5e:80:20:80:01:6b:6b:67:54:7d: 61:d0:0e:f7:63:14:2b:01:f1:2a:ba:6b:42:68:12: d6:04:5c:27:1a:2f:d5:b7:4b:76:41:c7:19:67:37: 92:1e:8f:63:62:43:84:46:e9:56:c6:92:0d:56:ad: 0d:0a:fb:30:1d:ca:12:3f:5e:09:ef:d5:e6:65:61: f6:ac:c1:67:ec:48:36:5c:2d:68:6b:ed:99:b0:ef: 1b:21:6b:5c:6b:59:51:fe:4f:a0:de:09:bb:93:7c: fd:96:17:4b:2f:5a:1b:68:53:62:68:c0:ff:fe:ac: 66:ff:bd:76:c8:8a:f3:0a:01:96:c1:c3:84:05:71: 4b:09:d8:c2:68:0c:30:71:b5:78:ea:91:c0:3a:40: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:16:7B:D5:A0:9A:2E:33:C4:66:8C:16:A3:B5:51:49:D0:70:29:53 X509v3 Authority Key Identifier: keyid:15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e3:ad:d5:5f:cd:ad:17:29:07:8b:e1:65:4a:4b:91:80:7f: ff:92:8d:6c:87:c1:dc:35:d2:aa:96:cc:5b:9f:6f:42:46:89: 37:73:a5:a6:50:97:bc:2b:5f:ba:01:06:3d:98:ad:e4:2a:70: f9:36:1a:b2:32:e0:f1:ae:ac:7a:cb:b1:86:8a:12:4f:62:3a: 8d:d6:0e:b3:84:9f:18:1b:a6:0b:30:65:ab:9a:f1:64:fd:35: 02:bd:57:0c:95:3e:27:e2:d1:ee:26:da:5d:c9:77:19:00:fe: 9c:0a:7b:09:c8:92:eb:64:1f:25:2b:3b:94:1f:d2:5d:5e:ad: d2:ac:c0:8f:07:f0:6d:aa:9b:0a:07:44:32:53:74:9b:c6:96: 70:47:6a:b1:73:48:6f:88:87:2a:ca:2a:e4:59:b5:8d:de:8e: 46:91:0f:4d:f9:1e:95:70:a5:fe:7d:a5:ef:00:3b:21:bf:08: 66:e9:54:b7:cb:f5:55:14:c1:d5:03:e9:a4:ca:cd:9a:ac:3f: 04:6a:a0:51:e8:9d:3e:a5:7e:70:5d:de:fd:af:c1:50:27:fe: ca:cd:09:51:07:1d:76:88:84:d8:76:c8:08:2f:b5:db:54:b4: fb:50:af:46:c7:5f:50:ce:45:b7:60:b6:69:db:0c:e1:bd:4a: 28:cd:cd:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJudPYx1oOW3QzptKoUI3xp0g/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNC NUEwMzg1QzAeFw0yNjA5MjQwMjU5MzBaFw0yNjA5MjUwNDA5MzBaMDMxMTAvBgNV BAMTKDEzMTY3QkQ1QTA5QTJFMzNDNDY2OEMxNkEzQjU1MTQ5RDA3MDI5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0uE1V8oU6b315rG5HU6OEbP5+ obzM3oDkrUJVn0JdiMbrRoD9Z1XZGgqbi9bnXHdygaoCGZrBQ+1PhotE0T0SfS+K RlSOgCOvJrstZH1r4EwM+5LSClOHSx0Z9FGM0WGk01Ak1rcmThfkFtLvXoAggAFr a2dUfWHQDvdjFCsB8Sq6a0JoEtYEXCcaL9W3S3ZBxxlnN5Iej2NiQ4RG6VbGkg1W rQ0K+zAdyhI/Xgnv1eZlYfaswWfsSDZcLWhr7Zmw7xsha1xrWVH+T6DeCbuTfP2W F0svWhtoU2JowP/+rGb/vXbIivMKAZbBw4QFcUsJ2MJoDDBxtXjqkcA6QNIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUExZ71aCaLjPEZowWo7VRSdBwKVMwHwYDVR0j BBgwFoAUFWzELrUPhuHgSy9vykHJA7WgOFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzlmYmUwODgtMGQ4NC00Nzg5LWI0MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVC NTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNCNUEwMzg1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZDQzQyRUI1MEY4NkUxRTA0QjJGNkZDQTQxQzkwM0I1QTAz ODVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5 MDNCNUEwMzg1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADjrdVfza0XKQeL4WVKS5GAf/+SjWyHwdw1 0qqWzFufb0JGiTdzpaZQl7wrX7oBBj2YreQqcPk2GrIy4PGurHrLsYaKEk9iOo3W DrOEnxgbpgswZaua8WT9NQK9VwyVPifi0e4m2l3JdxkA/pwKewnIkutkHyUrO5Qf 0l1erdKswI8H8G2qmwoHRDJTdJvGlnBHarFzSG+IhyrKKuRZtY3ejkaRD035HpVw pf59pe8AOyG/CGbpVLfL9VUUwdUD6aTKzZqsPwRqoFHonT6lfnBd3v2vwVAn/srN CVEHHXaIhNh2yAgvtdtUtPtQr0bHX1DORbdgtmnbDOG9SijNzRE= -----END CERTIFICATE-----Generated at Thu Sep 24 08:10:35 2026 by rpki-client