$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft File: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft (raw, json) Hash identifier: nvJahFs3wxvGq6ZbY0F+Qckmk1k603gxW5laleHn7mk= Subject key identifier: AC:D0:FB:67:2E:88:D7:7C:2E:02:59:EC:E5:D3:A5:28:AB:FD:D0:54 Authority key identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 Certificate issuer: /CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Certificate serial: 41B87DBC7D8A1435C220E663417239D0F1037C4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft Manifest number: 0E Signing time: Tue 12 May 2026 22:30:57 +0000 Manifest this update: Tue 12 May 2026 22:25:57 +0000 Manifest next update: Wed 13 May 2026 23:51:57 +0000 Files and hashes: 1: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl (hash: vSeAvEH/s9j3KdtdrPumH0k0RtedXjdDZJQITRPiaWw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b8:7d:bc:7d:8a:14:35:c2:20:e6:63:41:72:39:d0:f1:03:7c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Validity Not Before: May 12 22:25:57 2026 GMT Not After : May 13 23:51:57 2026 GMT Subject: CN=ACD0FB672E88D77C2E0259ECE5D3A528ABFDD054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:08:88:26:06:a8:32:a0:5d:7f:69:b7:db: 97:f1:b2:ac:89:91:3e:40:dc:b7:6b:be:cb:37:9b: 79:de:80:f9:e1:bc:a2:9f:5b:b7:12:95:de:b9:46: 27:ea:38:9b:77:e9:a0:52:c5:23:56:f8:79:e2:f0: b0:3d:a7:a6:36:7d:a4:87:80:b3:44:aa:2c:7e:05: 31:9b:49:bd:7c:87:9d:b0:a4:49:12:d4:66:01:23: 37:e3:be:b6:0a:26:c9:bc:8a:64:29:43:6c:f8:99: eb:18:7a:3e:af:94:cf:5e:0d:61:46:19:b6:15:b1: 7c:91:71:82:27:bf:32:d7:d0:68:9f:f4:3f:cd:81: 27:5c:d0:82:f1:d3:61:cd:30:7b:a2:da:6a:40:09: 3d:67:9c:b5:fb:c7:2f:59:a2:39:89:b4:de:07:a9: ea:bb:d8:1f:47:e7:a0:42:53:bd:88:9e:43:62:a3: d0:1b:6c:ef:04:98:fa:f1:01:4f:eb:31:c6:24:29: 90:27:8e:8c:70:be:61:77:b3:9a:07:d8:e6:ff:76: ea:7d:6a:db:a8:16:2b:6d:49:c2:b9:83:d0:8e:47: 0b:62:99:e0:28:88:a4:20:12:92:53:65:ed:1d:5b: 7c:db:51:ec:fe:d7:56:93:1c:7d:8b:19:d4:30:55: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D0:FB:67:2E:88:D7:7C:2E:02:59:EC:E5:D3:A5:28:AB:FD:D0:54 X509v3 Authority Key Identifier: keyid:15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:72:4a:68:69:b2:23:bb:e2:ab:fa:86:df:b5:c7:30:d5:a8: 10:f4:e6:e3:57:ac:03:9e:b3:b5:0c:a9:88:5d:bd:5f:51:b2: 11:ee:32:cd:1e:11:b8:96:69:d4:a0:51:f7:f1:93:f0:0e:24: b4:67:69:7b:c7:b7:c4:9b:53:6a:e1:75:42:66:64:8c:45:ea: 47:8a:2b:70:e6:7d:26:03:65:7d:13:cc:02:7f:0f:45:51:e5: 4a:5a:b9:03:a0:91:5f:4a:f6:d4:60:d4:4f:3d:2a:72:4c:08: 47:7c:6a:d3:44:90:7f:dd:81:f5:27:b9:1d:31:5e:13:6b:ac: 1f:b0:63:4b:82:27:71:08:88:53:f1:5f:a2:cc:03:b9:df:91: f0:bb:0d:40:c8:a7:22:fb:1f:b1:09:ff:31:cf:c4:4d:8b:89: a6:31:80:70:e1:37:88:aa:e7:e7:0a:ca:74:53:c4:8a:3f:97: 7b:de:ce:30:91:9d:bf:3b:a3:cb:08:19:66:64:2c:90:e0:60: a9:d3:a5:3d:e0:12:c5:35:f1:0a:71:3c:ca:14:46:b2:11:3e: 3b:94:88:1d:0d:2d:29:81:85:c7:fa:6d:2c:b6:60:11:9d:52: de:c1:89:13:7e:dd:db:8e:15:49:3e:3d:52:51:82:60:18:00: f6:0b:67:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbh9vH2KFDXCIOZjQXI50PEDfE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkz QkVBNkE0NjAeFw0yNjA1MTIyMjI1NTdaFw0yNjA1MTMyMzUxNTdaMDMxMTAvBgNV BAMTKEFDRDBGQjY3MkU4OEQ3N0MyRTAyNTlFQ0U1RDNBNTI4QUJGREQwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnAiIJgaoMqBdf2m325fxsqyJ kT5A3Ldrvss3m3negPnhvKKfW7cSld65RifqOJt36aBSxSNW+Hni8LA9p6Y2faSH gLNEqix+BTGbSb18h52wpEkS1GYBIzfjvrYKJsm8imQpQ2z4mesYej6vlM9eDWFG GbYVsXyRcYInvzLX0Gif9D/NgSdc0ILx02HNMHui2mpACT1nnLX7xy9ZojmJtN4H qeq72B9H56BCU72InkNio9AbbO8EmPrxAU/rMcYkKZAnjoxwvmF3s5oH2Ob/dup9 atuoFittScK5g9CORwtimeAoiKQgEpJTZe0dW3zbUez+11aTHH2LGdQwVdy/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrND7Zy6I13wuAlns5dOlKKv90FQwHwYDVR0j BBgwFoAUFW5E86XXRgAZYBPdW7FKqTvqakYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQwMjljMjItMjIxNS00OGMxLTlhYjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNB NUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkzQkVBNkE0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZFNDRGM0E1RDc0NjAwMTk2MDEzREQ1QkIxNEFBOTNCRUE2 QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRB QTkzQkVBNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9ySmhpsiO74qv6ht+1xzDVqBD05uNXrAOe s7UMqYhdvV9RshHuMs0eEbiWadSgUffxk/AOJLRnaXvHt8SbU2rhdUJmZIxF6keK K3DmfSYDZX0TzAJ/D0VR5UpauQOgkV9K9tRg1E89KnJMCEd8atNEkH/dgfUnuR0x XhNrrB+wY0uCJ3EIiFPxX6LMA7nfkfC7DUDIpyL7H7EJ/zHPxE2LiaYxgHDhN4iq 5+cKynRTxIo/l3vezjCRnb87o8sIGWZkLJDgYKnTpT3gEsU18QpxPMoURrIRPjuU iB0NLSmBhcf6bSy2YBGdUt7BiRN+3duOFUk+PVJRgmAYAPYLZ78= -----END CERTIFICATE-----Generated at Wed May 13 12:24:39 2026 by rpki-client