$ rpki-client -vvvf rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft File: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft (raw, json) Hash identifier: I/fp1UKoauTS4yq1ZjRVCdWfkYEUk1yN7saXjL8LVFc= Subject key identifier: 3F:76:94:71:43:5C:5D:2F:90:40:FC:8B:25:8C:74:99:D3:F4:8A:F7 Authority key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C Certificate issuer: /CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Certificate serial: 7DDA2C2D9810449EC9D77B4FA46FA3B4391021AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 20:10:28 +0000 Manifest this update: Thu 24 Sep 2026 20:05:28 +0000 Manifest next update: Fri 25 Sep 2026 22:35:28 +0000 Files and hashes: 1: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: DFUdvmptS4s6MDKitZ4+QYcs7u5EAsI/gqRu9ukPOuQ=) 2: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl (hash: 7KhFwi7diTHuk1LpvSEMDYNfZd3bv19IK2XGH90KVys=) 3: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: fDwZ64mEh+x1WuETLacd3r9tfK8cPQNEGMbhAGN9C4Y=) 4: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: nGWF5bh5L9qLAbKGSQCdAzJDlVgMMzvWoQdUcdutKoU=) 5: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: bgqcpq4oGXRBhHkGTY354tyAP6tYrpWUR1LBW+CZlRc=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: fOWfEwCz1sQLruXxV5SZRGMn95LgQ1Kei01ICgLlNgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:da:2c:2d:98:10:44:9e:c9:d7:7b:4f:a4:6f:a3:b4:39:10:21:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Validity Not Before: Sep 24 20:05:28 2026 GMT Not After : Sep 25 22:35:28 2026 GMT Subject: CN=3F769471435C5D2F9040FC8B258C7499D3F48AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:7d:5b:56:01:20:49:b5:5e:45:58:c3:e3: e1:c5:42:94:54:93:fb:32:24:ef:63:5f:b0:5a:91: ff:9f:4c:78:05:19:4f:6d:d5:59:01:94:ad:aa:17: 08:69:d8:ce:55:73:51:50:a6:ef:da:d5:ae:45:75: 8a:82:1c:25:ab:bd:2e:11:1b:8f:43:75:b1:43:7f: 08:68:97:26:ea:c6:20:80:2e:f6:fa:34:2f:df:57: d3:04:d3:59:53:e9:5b:89:aa:b4:7b:3f:d2:00:c8: e9:30:c2:6a:11:24:fd:63:76:9e:6f:f2:30:b8:4f: 35:28:82:98:08:54:27:c4:e0:8c:24:f4:ea:74:e1: 1c:76:92:7f:79:5f:75:83:9f:14:54:ed:6d:6d:10: 02:05:c6:55:6a:db:70:4d:9c:dc:b1:1b:21:79:ef: 0b:8c:f6:27:d0:72:b4:4f:f3:a8:79:ae:74:8c:a6: 5c:26:2e:ba:32:45:79:a8:c0:f2:de:93:d6:ef:4b: bb:51:3c:01:55:5a:89:7c:6a:82:3d:59:82:a1:2b: a5:fc:fd:21:35:4d:e3:f2:21:24:27:72:cf:69:50: ee:86:bb:d6:84:0d:ea:8b:70:eb:9b:9d:74:33:1e: ba:a4:d7:3c:6f:ac:f3:e6:09:43:ae:db:29:95:24: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:76:94:71:43:5C:5D:2F:90:40:FC:8B:25:8C:74:99:D3:F4:8A:F7 X509v3 Authority Key Identifier: keyid:15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f6:02:a5:5e:6c:1c:51:52:d4:db:cc:d4:d8:ba:7c:19:f7: 78:bd:82:a0:04:76:e8:cf:8d:c2:4c:a0:8b:8a:b3:3f:27:21: fb:b6:ac:10:68:51:c3:3c:ce:24:44:1d:ab:9f:dc:ef:5e:18: e7:4c:35:ab:53:47:1d:21:69:00:bc:e6:e2:54:ca:95:37:c0: b5:80:df:e7:9b:96:9b:5d:01:d6:e4:c9:f6:d3:c4:a8:12:a5: c8:69:d6:ad:b4:84:68:9f:d1:49:a6:85:22:fa:11:74:a3:45: 3d:22:e1:0a:42:49:77:b8:aa:49:4d:6b:30:cd:15:f5:0f:0c: fe:95:e8:cb:53:54:e6:50:5e:02:14:e1:c9:5e:3a:d4:f9:00: 73:ae:a2:4f:41:57:60:7b:6b:4f:49:7a:54:2a:5e:8a:a5:26: 80:54:39:e3:06:93:ce:86:e9:a0:1e:58:75:20:61:4d:dc:d1: d4:69:da:0f:66:59:50:96:13:f9:72:70:51:59:b3:52:25:f9: e7:62:07:81:bd:6c:bf:9f:bc:48:fb:d1:7e:b0:d3:f0:09:98: 5b:27:a9:18:04:8b:25:a4:9b:05:0b:53:d4:c7:f0:91:87:30: 25:13:ce:f4:a8:1b:44:e5:14:ae:f4:e0:84:94:03:b7:82:95: 6a:cc:62:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdosLZgQRJ7J13tPpG+jtDkQIa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNC NUEwMzg1QzAeFw0yNjA5MjQyMDA1MjhaFw0yNjA5MjUyMjM1MjhaMDMxMTAvBgNV BAMTKDNGNzY5NDcxNDM1QzVEMkY5MDQwRkM4QjI1OEM3NDk5RDNGNDhBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgX1bVgEgSbVeRVjD4+HFQpRU k/syJO9jX7Bakf+fTHgFGU9t1VkBlK2qFwhp2M5Vc1FQpu/a1a5FdYqCHCWrvS4R G49DdbFDfwholybqxiCALvb6NC/fV9ME01lT6VuJqrR7P9IAyOkwwmoRJP1jdp5v 8jC4TzUogpgIVCfE4Iwk9Op04Rx2kn95X3WDnxRU7W1tEAIFxlVq23BNnNyxGyF5 7wuM9ifQcrRP86h5rnSMplwmLroyRXmowPLek9bvS7tRPAFVWol8aoI9WYKhK6X8 /SE1TePyISQncs9pUO6Gu9aEDeqLcOubnXQzHrqk1zxvrPPmCUOu2ymVJPUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3aUcUNcXS+QQPyLJYx0mdP0ivcwHwYDVR0j BBgwFoAUFWzELrUPhuHgSy9vykHJA7WgOFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzlmYmUwODgtMGQ4NC00Nzg5LWI0MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVC NTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNCNUEwMzg1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZDQzQyRUI1MEY4NkUxRTA0QjJGNkZDQTQxQzkwM0I1QTAz ODVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5 MDNCNUEwMzg1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAID2AqVebBxRUtTbzNTYunwZ93i9gqAEdujP jcJMoIuKsz8nIfu2rBBoUcM8ziREHauf3O9eGOdMNatTRx0haQC85uJUypU3wLWA 3+eblptdAdbkyfbTxKgSpchp1q20hGif0UmmhSL6EXSjRT0i4QpCSXe4qklNazDN FfUPDP6V6MtTVOZQXgIU4cleOtT5AHOuok9BV2B7a09JelQqXoqlJoBUOeMGk86G 6aAeWHUgYU3c0dRp2g9mWVCWE/lycFFZs1Il+ediB4G9bL+fvEj70X6w0/AJmFsn qRgEiyWkmwULU9TH8JGHMCUTzvSoG0TlFK704ISUA7eClWrMYvQ= -----END CERTIFICATE-----Generated at Fri Sep 25 01:08:57 2026 by rpki-client