$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft File: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft (raw, json) Hash identifier: yBKY5OjJ8R9jwFvzE92CJEdXD/HFtfDZmXiLjYPVLV0= Subject key identifier: 9C:36:F5:A4:1B:1B:21:FC:C1:FD:CA:35:71:DF:56:9C:31:78:33:08 Authority key identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 Certificate issuer: /CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Certificate serial: 710C9C843DDB5141A2E4848A41DD3C73C82ACBF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 16:34:19 +0000 Manifest this update: Tue 16 Jun 2026 16:29:19 +0000 Manifest next update: Wed 17 Jun 2026 18:00:19 +0000 Files and hashes: 1: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl (hash: OGkr7kuwCGp4J1E4T6oY9BXdqivHixjRUh10fS8PcAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0c:9c:84:3d:db:51:41:a2:e4:84:8a:41:dd:3c:73:c8:2a:cb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Validity Not Before: Jun 16 16:29:19 2026 GMT Not After : Jun 17 18:00:19 2026 GMT Subject: CN=9C36F5A41B1B21FCC1FDCA3571DF569C31783308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:31:40:9b:a3:34:f1:b1:bd:90:24:62:55: 4f:b1:87:a7:e7:64:f3:71:df:bc:4e:09:cd:0b:2a: 18:b3:04:97:81:e9:38:d3:a4:ba:7c:fa:53:3a:f5: f8:f1:a6:ed:df:60:d5:1c:3e:9f:d8:51:05:41:f0: dd:df:fd:20:1c:31:8f:21:d7:97:a0:ad:c9:3a:ca: 9b:92:75:73:81:74:ad:ee:38:89:40:27:e6:a9:e5: 5a:4f:a1:c4:d0:60:48:66:45:75:f8:88:43:c3:db: 4c:e5:c6:0e:b2:c5:61:ec:c3:ab:b3:de:e7:0f:da: 83:f5:88:ca:d1:b8:ec:1a:ba:bb:bf:bd:d9:a8:97: 92:94:b5:01:a2:17:96:86:20:77:e8:e0:80:68:21: 9b:c5:40:1c:06:bb:75:c2:a1:79:16:12:7d:c2:f9: 25:c9:af:5e:be:83:09:1e:5b:34:ac:d8:9c:3f:73: 3f:35:ef:0b:44:4f:71:0e:37:86:0b:20:81:23:d8: 47:da:98:ed:29:43:f7:a4:8c:5b:c4:9e:6a:13:82: 18:f4:8e:c1:33:2f:33:1a:86:4d:e1:a7:e2:ff:b7: c5:c9:97:f5:35:26:16:0f:bf:b4:47:97:3b:b3:86: db:74:0c:f8:45:01:7b:99:f3:45:0c:5a:c2:d7:4e: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:36:F5:A4:1B:1B:21:FC:C1:FD:CA:35:71:DF:56:9C:31:78:33:08 X509v3 Authority Key Identifier: keyid:15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a6:fd:a0:e3:20:32:2b:ea:48:90:05:ca:a7:75:ed:f8:27: 75:35:29:2d:3b:8a:b0:10:6e:5c:cc:80:83:08:37:25:c2:dd: fe:7b:7a:ba:76:df:dd:29:d6:c2:41:de:61:3c:90:a1:26:09: 2a:c7:c0:d5:e9:6b:9d:d6:3f:7b:9c:a9:99:d4:f4:99:be:70: 62:95:d9:40:7a:60:29:e0:a0:e8:72:f1:73:50:1c:f6:70:11: 64:02:06:37:4d:5b:8d:1c:31:68:ea:bc:94:5b:a7:d5:bf:83: 03:ca:98:b1:5e:4c:30:83:85:d2:67:8d:0d:68:59:a0:c1:5b: 65:be:0d:2d:e7:5c:9b:70:29:5a:a7:30:f1:76:c2:3e:44:5e: e7:1e:73:f7:77:e3:35:9d:d1:f8:98:ba:3a:fe:37:b4:9c:ab: 8c:8c:3d:03:37:b6:6a:c8:04:89:14:76:44:0d:3d:0d:77:07: f6:52:9a:32:a5:c7:b9:ce:ae:8c:1f:9a:77:70:23:62:30:de: 4d:66:ad:8d:fe:ac:4f:3a:75:1a:55:55:ad:76:d6:a8:3c:b0: c8:81:25:aa:19:28:5b:29:c5:72:e3:39:3b:16:3e:27:c7:5a: 2e:bd:7c:fb:9e:fd:c4:d1:a0:2a:f8:ab:5b:48:18:56:ec:6d: c0:63:26:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQychD3bUUGi5ISKQd08c8gqy/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkz QkVBNkE0NjAeFw0yNjA2MTYxNjI5MTlaFw0yNjA2MTcxODAwMTlaMDMxMTAvBgNV BAMTKDlDMzZGNUE0MUIxQjIxRkNDMUZEQ0EzNTcxREY1NjlDMzE3ODMzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCjFAm6M08bG9kCRiVU+xh6fn ZPNx37xOCc0LKhizBJeB6TjTpLp8+lM69fjxpu3fYNUcPp/YUQVB8N3f/SAcMY8h 15egrck6ypuSdXOBdK3uOIlAJ+ap5VpPocTQYEhmRXX4iEPD20zlxg6yxWHsw6uz 3ucP2oP1iMrRuOwauru/vdmol5KUtQGiF5aGIHfo4IBoIZvFQBwGu3XCoXkWEn3C +SXJr16+gwkeWzSs2Jw/cz817wtET3EON4YLIIEj2EfamO0pQ/ekjFvEnmoTghj0 jsEzLzMahk3hp+L/t8XJl/U1JhYPv7RHlzuzhtt0DPhFAXuZ80UMWsLXTmH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnDb1pBsbIfzB/co1cd9WnDF4MwgwHwYDVR0j BBgwFoAUFW5E86XXRgAZYBPdW7FKqTvqakYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQwMjljMjItMjIxNS00OGMxLTlhYjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNB NUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkzQkVBNkE0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZFNDRGM0E1RDc0NjAwMTk2MDEzREQ1QkIxNEFBOTNCRUE2 QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRB QTkzQkVBNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqm/aDjIDIr6kiQBcqnde34J3U1KS07irAQ blzMgIMINyXC3f57erp2390p1sJB3mE8kKEmCSrHwNXpa53WP3ucqZnU9Jm+cGKV 2UB6YCngoOhy8XNQHPZwEWQCBjdNW40cMWjqvJRbp9W/gwPKmLFeTDCDhdJnjQ1o WaDBW2W+DS3nXJtwKVqnMPF2wj5EXucec/d34zWd0fiYujr+N7Scq4yMPQM3tmrI BIkUdkQNPQ13B/ZSmjKlx7nOrowfmndwI2Iw3k1mrY3+rE86dRpVVa121qg8sMiB JaoZKFspxXLjOTsWPifHWi69fPue/cTRoCr4q1tIGFbsbcBjJqs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:25 2026 by rpki-client