$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft File: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft (raw, json) Hash identifier: AFLXTHaTe7ujK2Tloq0bVgJCbCXAvIhc3xRHh6c9iVg= Subject key identifier: 84:F0:66:C9:F0:9A:A0:D5:2B:12:65:0E:29:05:76:50:84:FE:8A:44 Authority key identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 Certificate issuer: /CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Certificate serial: 4F3B8A8057B5EEBC1E52DBCAD6C66B12B099A26C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 15:03:08 +0000 Manifest this update: Fri 24 Jul 2026 14:58:08 +0000 Manifest next update: Sat 25 Jul 2026 18:03:08 +0000 Files and hashes: 1: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl (hash: ONdBtTI57ZOSDqHJ6ROlWA5am17A+j9m0imp53P+BpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3b:8a:80:57:b5:ee:bc:1e:52:db:ca:d6:c6:6b:12:b0:99:a2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Validity Not Before: Jul 24 14:58:08 2026 GMT Not After : Jul 25 18:03:08 2026 GMT Subject: CN=84F066C9F09AA0D52B12650E2905765084FE8A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:00:8c:f8:89:6c:90:ac:4d:d4:65:17:c7:77: 80:47:7b:87:7e:1e:d6:cb:24:57:b9:dc:55:d6:81: ea:72:02:28:71:d4:16:14:9f:86:ec:13:65:0a:9a: f2:ec:1f:a3:14:8b:b0:68:a0:83:80:38:ef:fb:cd: b7:56:bf:85:4f:8e:63:50:bc:c0:f2:df:11:99:32: 4a:04:19:f7:63:a0:d1:e9:97:cc:43:d5:7d:08:a2: 93:5f:a3:8f:8c:c4:3a:69:ca:13:ac:d2:02:93:0f: e4:2e:13:39:72:de:30:34:10:cc:5c:11:c2:20:9a: 00:98:af:60:6d:4b:b9:7c:73:c2:7d:7e:47:19:aa: c1:56:57:ff:9f:8e:e5:db:bf:fc:ac:c2:79:42:50: 65:b6:ea:1a:76:3a:13:df:0d:ad:83:8e:f7:13:ce: 6c:09:e4:69:79:a2:80:9d:c0:46:89:99:47:46:55: cb:64:09:b8:c7:16:06:1b:51:c7:fa:21:e5:ff:02: 4a:08:86:ed:ad:ba:cc:eb:95:11:dd:31:7f:3b:fa: 60:cf:37:4a:c5:90:af:ba:53:8c:ef:03:e8:b2:bf: d1:63:81:be:7c:5d:76:37:21:99:12:6e:40:14:05: e0:c6:a2:94:b6:73:58:35:e0:a9:3b:2e:bd:f9:73: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F0:66:C9:F0:9A:A0:D5:2B:12:65:0E:29:05:76:50:84:FE:8A:44 X509v3 Authority Key Identifier: keyid:15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6b:88:47:50:f1:b2:2e:f1:63:d3:ad:80:d5:9a:c2:7f:00: 10:68:d0:4d:ca:77:4f:ee:d9:1f:1f:53:48:58:12:2f:20:33: 7d:32:55:f9:bd:88:d1:a4:05:bc:00:4e:91:a6:f4:a6:53:68: 69:54:26:da:c9:dc:54:c4:f8:53:3b:77:fe:e1:f6:31:67:79: a5:7a:f4:ef:58:b0:a0:52:4e:4f:fa:78:f9:9e:24:dd:ea:e8: 0e:e7:88:07:03:a1:f5:9e:9f:e3:c6:d0:ad:eb:31:71:8a:49: 10:f1:a5:85:64:92:5c:46:db:2b:d6:6f:46:71:5f:a9:d8:3b: 59:cc:f7:f2:d2:ac:c3:5a:25:e5:4e:0d:1f:e1:a1:2e:d0:14: 27:dd:73:a3:3b:7e:2c:3f:94:17:94:65:4d:e6:2f:42:3f:76: 35:44:d7:6a:0f:8b:5b:6a:21:27:70:fa:14:db:38:42:49:00: 51:70:ef:ae:0d:c8:f3:01:99:77:30:74:bf:a6:97:e2:e7:24: 7d:46:c1:0f:70:14:76:28:3c:de:63:fb:41:82:c5:89:c1:7b: 5f:a6:6d:4c:8a:bc:4a:40:68:5d:3f:a6:af:c2:11:b8:54:04: 7c:19:7d:49:51:25:90:09:dc:1b:d8:59:de:21:87:09:f8:24: fa:a2:41:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzuKgFe17rweUtvK1sZrErCZomwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkz QkVBNkE0NjAeFw0yNjA3MjQxNDU4MDhaFw0yNjA3MjUxODAzMDhaMDMxMTAvBgNV BAMTKDg0RjA2NkM5RjA5QUEwRDUyQjEyNjUwRTI5MDU3NjUwODRGRThBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJAIz4iWyQrE3UZRfHd4BHe4d+ HtbLJFe53FXWgepyAihx1BYUn4bsE2UKmvLsH6MUi7BooIOAOO/7zbdWv4VPjmNQ vMDy3xGZMkoEGfdjoNHpl8xD1X0IopNfo4+MxDppyhOs0gKTD+QuEzly3jA0EMxc EcIgmgCYr2BtS7l8c8J9fkcZqsFWV/+fjuXbv/yswnlCUGW26hp2OhPfDa2DjvcT zmwJ5Gl5ooCdwEaJmUdGVctkCbjHFgYbUcf6IeX/AkoIhu2tuszrlRHdMX87+mDP N0rFkK+6U4zvA+iyv9Fjgb58XXY3IZkSbkAUBeDGopS2c1g14Kk7Lr35c2SxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhPBmyfCaoNUrEmUOKQV2UIT+ikQwHwYDVR0j BBgwFoAUFW5E86XXRgAZYBPdW7FKqTvqakYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQwMjljMjItMjIxNS00OGMxLTlhYjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNB NUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkzQkVBNkE0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZFNDRGM0E1RDc0NjAwMTk2MDEzREQ1QkIxNEFBOTNCRUE2 QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRB QTkzQkVBNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5riEdQ8bIu8WPTrYDVmsJ/ABBo0E3Kd0/u 2R8fU0hYEi8gM30yVfm9iNGkBbwATpGm9KZTaGlUJtrJ3FTE+FM7d/7h9jFneaV6 9O9YsKBSTk/6ePmeJN3q6A7niAcDofWen+PG0K3rMXGKSRDxpYVkklxG2yvWb0Zx X6nYO1nM9/LSrMNaJeVODR/hoS7QFCfdc6M7fiw/lBeUZU3mL0I/djVE12oPi1tq ISdw+hTbOEJJAFFw764NyPMBmXcwdL+ml+LnJH1GwQ9wFHYoPN5j+0GCxYnBe1+m bUyKvEpAaF0/pq/CEbhUBHwZfUlRJZAJ3BvYWd4hhwn4JPqiQRE= -----END CERTIFICATE-----Generated at Fri Jul 24 18:43:57 2026 by rpki-client