
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft
File: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft (raw, json)
Hash identifier: 3lgoE0xKNPPROMCjN8H+XXhQKYJ+kRifMjNOe2DHiLA=
Subject key identifier: 73:37:19:38:0C:DD:1C:B7:5A:52:0F:5E:B8:E9:8D:31:31:F9:8F:AC
Authority key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C
Certificate issuer: /CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C
Certificate serial: 303E6D6991072E1BC3A27F72A38B967E7B2A4092
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:53:00 +0000
Manifest this update: Tue 12 May 2026 06:48:00 +0000
Manifest next update: Wed 13 May 2026 09:58:00 +0000
Files and hashes: 1: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl (hash: 63QqaaZi7JyDY5OgGV/CMKrgChroDSo2jqHy6hi3rv8=)
2: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: DFUdvmptS4s6MDKitZ4+QYcs7u5EAsI/gqRu9ukPOuQ=)
3: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: bgqcpq4oGXRBhHkGTY354tyAP6tYrpWUR1LBW+CZlRc=)
4: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: fDwZ64mEh+x1WuETLacd3r9tfK8cPQNEGMbhAGN9C4Y=)
5: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: nGWF5bh5L9qLAbKGSQCdAzJDlVgMMzvWoQdUcdutKoU=)
6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: fOWfEwCz1sQLruXxV5SZRGMn95LgQ1Kei01ICgLlNgA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl
rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3e:6d:69:91:07:2e:1b:c3:a2:7f:72:a3:8b:96:7e:7b:2a:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C
Validity
Not Before: May 12 06:48:00 2026 GMT
Not After : May 13 09:58:00 2026 GMT
Subject: CN=733719380CDD1CB75A520F5EB8E98D3131F98FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:92:76:85:ec:67:9a:ed:2f:b6:7e:9a:24:
72:0e:40:f9:55:ca:01:5c:37:40:c5:ee:cf:1f:c5:
04:e3:b5:9b:5f:31:93:e8:c5:2a:e6:14:85:3a:bf:
a2:2c:92:1e:b0:c6:93:5d:d6:06:a0:4f:41:24:f4:
c6:ad:36:57:9c:b8:3c:d7:ea:b1:6c:9e:51:35:9c:
d9:47:1f:a7:93:d5:0c:7f:82:50:27:a2:de:86:89:
c5:fb:8f:75:19:6e:a4:c8:3b:c3:28:42:99:0a:07:
00:ed:74:ac:cb:60:91:62:b5:64:13:0e:5f:53:08:
9a:6d:e4:d9:e3:29:39:01:8f:9b:39:fa:90:f5:6f:
17:0e:21:a1:79:30:38:e4:a1:6d:1c:65:64:dc:d6:
43:b4:28:19:93:40:ac:7e:d4:b6:7b:bb:12:10:20:
02:f1:37:1c:5f:f9:2b:85:f2:27:31:57:2b:03:a3:
30:fc:65:d1:73:5a:c9:80:fd:a0:0d:49:f9:7a:36:
35:5f:8d:69:4b:6a:d4:6a:50:30:50:c0:70:fc:b8:
c8:85:7e:c4:d0:22:ee:e1:e7:a0:fb:19:b9:d8:54:
4f:fd:73:d8:2b:dc:9d:90:60:f0:a0:20:95:d8:6a:
c3:f7:06:0d:fb:a6:a8:3b:13:01:b3:bf:43:88:8d:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:19:38:0C:DD:1C:B7:5A:52:0F:5E:B8:E9:8D:31:31:F9:8F:AC
X509v3 Authority Key Identifier:
keyid:15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3b:8e:bf:27:53:25:09:21:71:89:61:92:d9:2e:d3:b8:8f:
88:09:5a:87:ea:4d:a0:53:c9:a6:f6:7d:b6:88:64:79:58:f1:
e5:ea:5f:2a:6d:c5:0f:75:1e:2e:1a:6c:c3:1b:c3:03:f2:b3:
70:69:74:92:42:57:bc:08:91:4a:a9:1a:70:9a:18:5a:89:e5:
0b:73:06:53:94:b3:16:87:02:d8:80:91:fc:93:44:67:ca:2b:
83:00:ac:86:8d:d1:72:2d:29:21:17:8f:55:36:be:94:24:4a:
35:65:17:97:d2:b1:ab:54:e4:1c:ae:bb:2b:e9:c2:ed:a3:50:
9d:d4:36:5a:a9:a6:ee:cd:39:42:1b:53:51:da:8f:f8:3f:94:
07:c4:31:b7:a0:a8:64:3b:6a:2a:4c:56:69:5d:83:9d:3e:db:
f6:f1:47:1c:59:a3:75:73:b9:4e:89:54:73:81:12:e9:70:8e:
4e:3a:de:da:18:64:f9:0c:c4:b1:bf:71:61:00:f3:a4:70:41:
1a:85:a6:43:24:f7:bd:49:7d:6b:85:8c:78:03:67:63:75:67:
03:fb:ca:83:e2:a1:80:b4:b8:58:d5:33:50:7c:5e:2c:71:42:
3d:2e:19:59:29:54:fb:0b:93:6b:0e:9d:aa:f8:1b:80:3e:16:
02:aa:ba:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMD5taZEHLhvDon9yo4uWfnsqQJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNC
NUEwMzg1QzAeFw0yNjA1MTIwNjQ4MDBaFw0yNjA1MTMwOTU4MDBaMDMxMTAvBgNV
BAMTKDczMzcxOTM4MENERDFDQjc1QTUyMEY1RUI4RTk4RDMxMzFGOThGQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvZJ2hexnmu0vtn6aJHIOQPlV
ygFcN0DF7s8fxQTjtZtfMZPoxSrmFIU6v6Iskh6wxpNd1gagT0Ek9MatNlecuDzX
6rFsnlE1nNlHH6eT1Qx/glAnot6GicX7j3UZbqTIO8MoQpkKBwDtdKzLYJFitWQT
Dl9TCJpt5NnjKTkBj5s5+pD1bxcOIaF5MDjkoW0cZWTc1kO0KBmTQKx+1LZ7uxIQ
IALxNxxf+SuF8icxVysDozD8ZdFzWsmA/aANSfl6NjVfjWlLatRqUDBQwHD8uMiF
fsTQIu7h56D7GbnYVE/9c9gr3J2QYPCgIJXYasP3Bg37pqg7EwGzv0OIjTyZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUczcZOAzdHLdaUg9euOmNMTH5j6wwHwYDVR0j
BBgwFoAUFWzELrUPhuHgSy9vykHJA7WgOFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzlmYmUwODgtMGQ4NC00Nzg5LWI0MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVC
NTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNCNUEwMzg1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNTZDQzQyRUI1MEY4NkUxRTA0QjJGNkZDQTQxQzkwM0I1QTAz
ODVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0
MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5
MDNCNUEwMzg1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEA7jr8nUyUJIXGJYZLZLtO4j4gJWofqTaBT
yab2fbaIZHlY8eXqXyptxQ91Hi4abMMbwwPys3BpdJJCV7wIkUqpGnCaGFqJ5Qtz
BlOUsxaHAtiAkfyTRGfKK4MArIaN0XItKSEXj1U2vpQkSjVlF5fSsatU5Byuuyvp
wu2jUJ3UNlqppu7NOUIbU1Haj/g/lAfEMbegqGQ7aipMVmldg50+2/bxRxxZo3Vz
uU6JVHOBEulwjk463toYZPkMxLG/cWEA86RwQRqFpkMk971JfWuFjHgDZ2N1ZwP7
yoPioYC0uFjVM1B8XixxQj0uGVkpVPsLk2sOnar4G4A+FgKquic=
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:14 2026 by rpki-client