$ rpki-client -vvf rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft File: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft (raw, json) Hash identifier: J4Padi9nGw9RSEJgGFm9NXzzzRKHRdNdBb9h7B3UdAs= Subject key identifier: E3:A3:AE:15:7C:7F:19:09:CD:D7:3E:16:30:82:DB:B8:1F:C0:F1:19 Authority key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C Certificate issuer: /CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Certificate serial: 561C7B3DBDA8FAC8FF2FE0966646A92AE2F91CD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:06:10 +0000 Manifest this update: Tue 02 Jun 2026 13:01:10 +0000 Manifest next update: Wed 03 Jun 2026 13:55:10 +0000 Files and hashes: 1: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: DFUdvmptS4s6MDKitZ4+QYcs7u5EAsI/gqRu9ukPOuQ=) 2: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: fDwZ64mEh+x1WuETLacd3r9tfK8cPQNEGMbhAGN9C4Y=) 3: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: bgqcpq4oGXRBhHkGTY354tyAP6tYrpWUR1LBW+CZlRc=) 4: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl (hash: pDZ0O0UGMTBpHaADHuW4gqPdOcLaUWii+J7Lqy0QGY0=) 5: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: nGWF5bh5L9qLAbKGSQCdAzJDlVgMMzvWoQdUcdutKoU=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: fOWfEwCz1sQLruXxV5SZRGMn95LgQ1Kei01ICgLlNgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:7b:3d:bd:a8:fa:c8:ff:2f:e0:96:66:46:a9:2a:e2:f9:1c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Validity Not Before: Jun 2 13:01:10 2026 GMT Not After : Jun 3 13:55:10 2026 GMT Subject: CN=E3A3AE157C7F1909CDD73E163082DBB81FC0F119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:07:38:2f:aa:0d:95:3c:c0:64:b7:05:53:9b: ea:c7:53:5b:0d:b0:2d:0e:68:ce:ed:2d:3d:25:a7: 27:64:fa:80:a6:fd:88:21:1e:14:1c:6a:ef:ea:67: 6a:75:1f:ec:08:89:f0:eb:db:f4:5d:f5:50:42:cd: 18:30:88:be:d0:aa:77:83:00:7d:20:63:99:cb:23: f7:44:46:c7:7f:a2:ed:7f:b9:fa:98:0e:65:7a:af: 52:6b:55:a5:62:6d:7c:86:8e:12:ea:e0:de:aa:15: 82:e3:8d:3b:70:6e:31:c5:40:19:f1:ed:38:3a:03: 64:17:8f:5c:f4:9c:6f:d1:ef:c0:79:94:2d:a3:b9: fe:40:5f:0f:c6:13:cd:4d:bf:3a:1e:25:42:a9:a5: 83:04:fe:98:e2:94:6c:bc:8c:b7:27:da:f7:70:a1: c2:1f:b3:ac:f3:fb:84:2f:04:82:3c:2b:5b:27:b1: 51:b6:c5:ea:e1:76:2b:55:90:fb:96:be:5b:84:05: 9c:da:b6:53:c7:4d:98:9f:7a:97:f0:50:67:69:ba: ed:15:64:88:c4:ad:ee:ce:71:22:ee:c7:aa:be:14: e1:2c:ba:22:af:c2:2c:c5:7a:9d:b6:d7:fe:85:ba: 83:ec:59:90:a2:dd:a0:a2:01:65:a8:3a:52:cb:1a: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A3:AE:15:7C:7F:19:09:CD:D7:3E:16:30:82:DB:B8:1F:C0:F1:19 X509v3 Authority Key Identifier: keyid:15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9b:1c:c4:cd:2c:b5:33:8f:eb:44:14:76:06:d2:59:22:83: 02:0d:66:f1:bf:92:20:c9:b2:b4:bb:e0:07:37:35:bf:3a:e1: de:93:76:3b:e6:aa:7d:4f:59:0b:fc:14:08:c2:5a:a4:7c:00: 7e:06:e6:e9:59:e1:77:c3:7f:51:3d:73:ef:f1:a3:f4:7c:cc: 11:fa:54:bc:03:53:c9:e8:bc:ab:7f:e3:ca:63:84:de:f4:77: 6a:aa:15:83:68:38:34:7d:5c:b0:1d:4f:5c:d7:e6:87:54:c7: 41:e1:ec:34:21:a5:69:2a:cf:fa:7c:cf:c5:2b:36:02:21:b6: 6a:59:8d:7d:dd:70:d1:7c:f6:14:5b:b6:4a:0f:60:4e:08:9c: 11:18:12:58:a2:4e:06:d5:42:92:2b:39:8a:e8:96:91:97:d5: 36:40:a2:03:e4:d6:fb:18:98:ab:b7:e9:5e:36:85:2b:6a:ba: 5b:17:f8:69:18:78:0e:3b:17:57:5d:37:40:e0:b4:df:02:80: 91:81:67:c8:a1:29:c1:3b:9c:c1:ed:4f:ab:8c:3b:86:bf:48: 2f:c8:ae:12:7d:0e:5d:4c:ab:d0:2b:5c:da:0b:0e:4d:32:0f: a3:dc:3b:67:6f:e0:7d:9f:a2:29:d2:dc:ce:59:3f:3d:de:26: ac:af:0c:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhx7Pb2o+sj/L+CWZkapKuL5HNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNC NUEwMzg1QzAeFw0yNjA2MDIxMzAxMTBaFw0yNjA2MDMxMzU1MTBaMDMxMTAvBgNV BAMTKEUzQTNBRTE1N0M3RjE5MDlDREQ3M0UxNjMwODJEQkI4MUZDMEYxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBzgvqg2VPMBktwVTm+rHU1sN sC0OaM7tLT0lpydk+oCm/YghHhQcau/qZ2p1H+wIifDr2/Rd9VBCzRgwiL7QqneD AH0gY5nLI/dERsd/ou1/ufqYDmV6r1JrVaVibXyGjhLq4N6qFYLjjTtwbjHFQBnx 7Tg6A2QXj1z0nG/R78B5lC2juf5AXw/GE81NvzoeJUKppYME/pjilGy8jLcn2vdw ocIfs6zz+4QvBII8K1snsVG2xerhditVkPuWvluEBZzatlPHTZifepfwUGdpuu0V ZIjEre7OcSLux6q+FOEsuiKvwizFep221/6FuoPsWZCi3aCiAWWoOlLLGpWzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46OuFXx/GQnN1z4WMILbuB/A8RkwHwYDVR0j BBgwFoAUFWzELrUPhuHgSy9vykHJA7WgOFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzlmYmUwODgtMGQ4NC00Nzg5LWI0MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVC NTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNCNUEwMzg1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZDQzQyRUI1MEY4NkUxRTA0QjJGNkZDQTQxQzkwM0I1QTAz ODVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5 MDNCNUEwMzg1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2bHMTNLLUzj+tEFHYG0lkigwINZvG/kiDJ srS74Ac3Nb864d6Tdjvmqn1PWQv8FAjCWqR8AH4G5ulZ4XfDf1E9c+/xo/R8zBH6 VLwDU8novKt/48pjhN70d2qqFYNoODR9XLAdT1zX5odUx0Hh7DQhpWkqz/p8z8Ur NgIhtmpZjX3dcNF89hRbtkoPYE4InBEYEliiTgbVQpIrOYrolpGX1TZAogPk1vsY mKu36V42hStqulsX+GkYeA47F1ddN0DgtN8CgJGBZ8ihKcE7nMHtT6uMO4a/SC/I rhJ9Dl1Mq9ArXNoLDk0yD6PcO2dv4H2foinS3M5ZPz3eJqyvDD8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:21 2026 by rpki-client