$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft File: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft (raw, json) Hash identifier: hWiewXJPednyyop4S8jeRZuE/a5fAO72EhmH+HrOAAo= Subject key identifier: 85:6E:9F:B8:77:03:FB:CF:01:7B:49:4B:10:D5:4A:9E:EF:2A:AC:01 Authority key identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 Certificate issuer: /CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Certificate serial: 141C22C4D98C5F49BF164B031C25A80E62A94F55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 08:20:22 +0000 Manifest this update: Mon 28 Sep 2026 08:15:22 +0000 Manifest next update: Tue 29 Sep 2026 09:19:22 +0000 Files and hashes: 1: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl (hash: Ot51DW/3UYIwuxO/F38SeJrSzYTCyc900z+OSciwsHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 09:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1c:22:c4:d9:8c:5f:49:bf:16:4b:03:1c:25:a8:0e:62:a9:4f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Validity Not Before: Sep 28 08:15:22 2026 GMT Not After : Sep 29 09:19:22 2026 GMT Subject: CN=856E9FB87703FBCF017B494B10D54A9EEF2AAC01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:cc:a6:a9:03:03:0d:03:0d:eb:61:2a:c7: 6d:10:d3:ce:a3:cb:2c:f1:66:8d:48:55:37:6c:e1: 55:d8:50:32:91:28:cd:57:18:93:5f:97:e7:bc:82: 67:fc:23:ae:87:58:9e:7d:43:20:ad:5b:7b:c7:d8: 4d:0d:b7:5e:5a:37:84:cc:db:ec:5d:e1:3d:b9:68: 27:75:97:96:df:5f:bb:f6:71:37:12:c8:d2:08:a8: 57:c2:b0:57:1f:b0:24:17:ce:4d:b6:d2:3b:f4:b4: fe:b5:7d:f7:c0:5e:1a:2c:78:a2:bf:f8:c2:64:8e: 67:a2:62:df:4c:c7:53:7c:10:06:14:7e:3c:57:24: 46:a2:10:74:6c:3b:0f:c0:74:1f:43:e2:17:cc:af: 2c:d4:60:8c:7a:17:0c:bb:54:fd:d4:15:e7:89:5c: cf:5f:98:08:45:71:ed:46:7a:fc:92:c7:ae:a4:1b: df:f4:3a:9c:c0:d2:69:02:7f:07:8d:6e:d7:69:6c: 97:e0:a6:79:ed:3b:e1:17:6b:30:46:4e:36:15:f0: b9:f4:4d:4a:21:b5:5b:ed:1b:bb:8b:7e:ad:bd:95: d7:a4:af:89:6f:9e:c8:ba:20:54:ab:e1:29:3c:d7: ec:c4:69:7a:46:be:06:b4:90:16:da:a7:c5:88:65: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:9F:B8:77:03:FB:CF:01:7B:49:4B:10:D5:4A:9E:EF:2A:AC:01 X509v3 Authority Key Identifier: keyid:15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:16:81:57:9c:7c:2d:ce:12:35:69:05:2d:fb:2a:c3:f9:85: 8b:b0:57:4e:6c:4f:0e:67:2b:0e:16:8c:8a:dc:43:2f:44:39: 0b:15:c6:e1:53:d7:a9:81:9c:78:9b:69:c6:f2:27:8d:f2:41: 94:16:aa:c3:7f:c6:c0:8e:4a:e4:41:db:7c:be:45:c4:11:32: fd:d4:fe:16:c4:33:be:72:53:c5:f2:72:a2:46:fb:03:b0:ea: 32:40:de:3a:78:0e:63:14:dc:a4:ee:5d:82:3b:fb:8a:93:10: 7a:63:4b:ff:93:fd:31:23:00:41:4d:a7:08:76:4f:35:95:32: 64:a1:a3:9b:43:87:82:af:12:8c:d3:57:69:1f:01:8c:ab:73: 5b:c5:cb:09:7e:b1:28:9e:7e:20:1c:94:3f:1b:66:c8:60:da: 52:17:b9:82:74:62:d7:a7:63:9a:f9:60:1f:24:6f:17:63:fb: 3e:69:bc:59:33:4e:4e:26:87:22:02:cc:02:11:c0:c4:e5:89: 0f:59:2d:74:7d:45:51:fb:3d:b3:9b:23:09:13:fc:08:fb:c6: 2d:67:11:bb:3a:e8:a3:94:bc:df:a8:ba:e1:b0:14:ef:d3:69: 67:c4:c0:86:4d:42:e5:0c:04:d5:2a:a6:9e:6c:b0:99:a4:e0: db:6f:b1:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBwixNmMX0m/FksDHCWoDmKpT1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkz QkVBNkE0NjAeFw0yNjA5MjgwODE1MjJaFw0yNjA5MjkwOTE5MjJaMDMxMTAvBgNV BAMTKDg1NkU5RkI4NzcwM0ZCQ0YwMTdCNDk0QjEwRDU0QTlFRUYyQUFDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AMymqQMDDQMN62Eqx20Q086j yyzxZo1IVTds4VXYUDKRKM1XGJNfl+e8gmf8I66HWJ59QyCtW3vH2E0Nt15aN4TM 2+xd4T25aCd1l5bfX7v2cTcSyNIIqFfCsFcfsCQXzk220jv0tP61fffAXhoseKK/ +MJkjmeiYt9Mx1N8EAYUfjxXJEaiEHRsOw/AdB9D4hfMryzUYIx6Fwy7VP3UFeeJ XM9fmAhFce1GevySx66kG9/0OpzA0mkCfweNbtdpbJfgpnntO+EXazBGTjYV8Ln0 TUohtVvtG7uLfq29ldekr4lvnsi6IFSr4Sk81+zEaXpGvga0kBbap8WIZWHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhW6fuHcD+88Be0lLENVKnu8qrAEwHwYDVR0j BBgwFoAUFW5E86XXRgAZYBPdW7FKqTvqakYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQwMjljMjItMjIxNS00OGMxLTlhYjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNB NUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkzQkVBNkE0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZFNDRGM0E1RDc0NjAwMTk2MDEzREQ1QkIxNEFBOTNCRUE2 QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRB QTkzQkVBNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoWgVecfC3OEjVpBS37KsP5hYuwV05sTw5n Kw4WjIrcQy9EOQsVxuFT16mBnHibacbyJ43yQZQWqsN/xsCOSuRB23y+RcQRMv3U /hbEM75yU8XycqJG+wOw6jJA3jp4DmMU3KTuXYI7+4qTEHpjS/+T/TEjAEFNpwh2 TzWVMmSho5tDh4KvEozTV2kfAYyrc1vFywl+sSiefiAclD8bZshg2lIXuYJ0Yten Y5r5YB8kbxdj+z5pvFkzTk4mhyICzAIRwMTliQ9ZLXR9RVH7PbObIwkT/Aj7xi1n Ebs66KOUvN+ouuGwFO/TaWfEwIZNQuUMBNUqpp5ssJmk4Ntvscs= -----END CERTIFICATE-----Generated at Tue Sep 29 03:41:36 2026 by rpki-client