$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft File: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft (raw, json) Hash identifier: H4oybqf/oPIeH1l5mEVqJlVbhAfXDU7hWkoXDXJyQtY= Subject key identifier: 61:C7:F0:3D:63:BA:9C:D1:60:9F:5B:CC:0C:7C:CE:0E:C3:C1:EA:78 Authority key identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 Certificate issuer: /CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Certificate serial: 506F4DCC36DBA6FCD7734B06A8463274733DF822 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft Manifest number: CE Signing time: Sat 03 Oct 2026 10:43:59 +0000 Manifest this update: Sat 03 Oct 2026 10:38:59 +0000 Manifest next update: Sun 04 Oct 2026 14:28:59 +0000 Files and hashes: 1: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl (hash: JK/aMSU0b8DuquTEKedjWp4zkRs0V0fmZksNvivDJKA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 14:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:6f:4d:cc:36:db:a6:fc:d7:73:4b:06:a8:46:32:74:73:3d:f8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Validity Not Before: Oct 3 10:38:59 2026 GMT Not After : Oct 4 14:28:59 2026 GMT Subject: CN=61C7F03D63BA9CD1609F5BCC0C7CCE0EC3C1EA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:1e:af:f9:63:aa:35:3b:2f:09:f1:04:a8: c3:b9:80:2d:31:c2:0e:0f:20:6a:56:25:02:19:7f: 06:c2:ab:b0:47:a7:e0:76:1c:70:2c:cb:29:ef:85: c3:c9:80:44:04:72:f5:a5:d1:5e:78:43:d3:dd:8f: 4c:02:d3:04:10:9b:98:c6:f8:fd:af:2a:78:2b:df: 9b:a7:4f:5d:28:9d:33:04:7c:70:db:d1:19:e9:79: f9:80:5e:20:e6:da:bc:b1:5d:19:1b:53:ef:cc:4f: b7:16:ca:cf:d2:c6:fc:2d:e5:20:1c:05:6c:4b:0d: 02:1f:18:c2:10:a2:4c:a5:37:58:9b:f1:3d:c7:1e: 41:02:64:17:92:61:e5:f0:22:e5:87:da:33:9b:5a: 64:87:a5:a7:ee:9a:e6:ce:81:ac:47:49:99:ac:fc: c8:68:68:24:0b:0d:89:2f:1a:cb:d4:63:d1:75:0c: cb:32:52:63:49:f7:6d:87:13:43:dc:c9:12:03:81: d6:eb:68:76:39:16:ed:71:1d:26:fa:f8:25:b0:e5: 9d:15:6a:be:21:da:54:16:36:b8:e9:a1:ad:8c:0a: ed:9a:e3:d5:d1:d5:61:fd:e3:41:b6:14:ea:3e:31: 71:f4:5f:3e:2e:0e:89:fe:46:87:af:0b:26:bc:a9: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C7:F0:3D:63:BA:9C:D1:60:9F:5B:CC:0C:7C:CE:0E:C3:C1:EA:78 X509v3 Authority Key Identifier: keyid:15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:57:57:47:e6:e7:6e:c0:39:41:ca:c8:0a:86:a7:86:ad:bf: 01:8b:13:ed:2f:a8:62:54:44:f3:22:6a:6d:c3:45:92:e4:e4: 29:50:33:73:42:3b:7d:63:61:ce:67:23:10:24:43:93:20:24: e5:06:e3:bf:f4:2f:fa:b3:a4:d8:b3:bd:4b:58:5a:46:55:dc: a1:e1:6a:25:e7:a5:e0:79:24:cf:cd:64:a7:87:4b:71:c6:77: 4d:a5:4b:21:16:c6:57:f4:2c:09:ae:e0:cf:18:03:55:df:f3: 4f:6e:d1:25:d2:6a:65:bd:8b:69:55:f0:eb:57:cb:33:a1:52: 2f:19:5d:99:9b:f8:c2:2a:bb:98:13:78:d3:b8:f5:e9:f0:5d: 83:45:78:24:27:a4:a4:b6:fd:0c:4f:73:2a:ac:91:1b:24:b8: 46:55:6f:40:69:5d:cc:b7:cf:74:74:f7:4f:69:a1:da:e8:88: 17:7d:74:cf:d7:d4:23:f3:32:a7:20:23:98:4c:18:12:f4:f0: 54:d2:88:35:bd:79:89:9c:1a:88:a9:2a:aa:00:cf:f3:f8:3f: f9:c3:4e:ff:a9:b4:f7:d7:ac:94:42:a1:ff:de:16:70:d5:5d: fa:05:7e:1c:6a:7b:e7:92:5f:ef:ec:3a:24:a8:69:f5:6e:e3: 27:f5:e6:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUG9NzDbbpvzXc0sGqEYydHM9+CIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkz QkVBNkE0NjAeFw0yNjEwMDMxMDM4NTlaFw0yNjEwMDQxNDI4NTlaMDMxMTAvBgNV BAMTKDYxQzdGMDNENjNCQTlDRDE2MDlGNUJDQzBDN0NDRTBFQzNDMUVBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsx6v+WOqNTsvCfEEqMO5gC0x wg4PIGpWJQIZfwbCq7BHp+B2HHAsyynvhcPJgEQEcvWl0V54Q9Pdj0wC0wQQm5jG +P2vKngr35unT10onTMEfHDb0RnpefmAXiDm2ryxXRkbU+/MT7cWys/Sxvwt5SAc BWxLDQIfGMIQokylN1ib8T3HHkECZBeSYeXwIuWH2jObWmSHpafumubOgaxHSZms /MhoaCQLDYkvGsvUY9F1DMsyUmNJ922HE0PcyRIDgdbraHY5Fu1xHSb6+CWw5Z0V ar4h2lQWNrjpoa2MCu2a49XR1WH940G2FOo+MXH0Xz4uDon+RoevCya8qcsvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcfwPWO6nNFgn1vMDHzODsPB6ngwHwYDVR0j BBgwFoAUFW5E86XXRgAZYBPdW7FKqTvqakYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQwMjljMjItMjIxNS00OGMxLTlhYjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNB NUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkzQkVBNkE0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZFNDRGM0E1RDc0NjAwMTk2MDEzREQ1QkIxNEFBOTNCRUE2 QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRB QTkzQkVBNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxXV0fm527AOUHKyAqGp4atvwGLE+0vqGJU RPMiam3DRZLk5ClQM3NCO31jYc5nIxAkQ5MgJOUG47/0L/qzpNizvUtYWkZV3KHh aiXnpeB5JM/NZKeHS3HGd02lSyEWxlf0LAmu4M8YA1Xf809u0SXSamW9i2lV8OtX yzOhUi8ZXZmb+MIqu5gTeNO49enwXYNFeCQnpKS2/QxPcyqskRskuEZVb0BpXcy3 z3R0909podroiBd9dM/X1CPzMqcgI5hMGBL08FTSiDW9eYmcGoipKqoAz/P4P/nD Tv+ptPfXrJRCof/eFnDVXfoFfhxqe+eSX+/sOiSoafVu4yf15r4= -----END CERTIFICATE-----Generated at Sun Oct 4 06:57:05 2026 by rpki-client