$ rpki-client -vvvf rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft File: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft (raw, json) Hash identifier: KtrHJkixYb7+NrWONZvWydBCSUC1NlKi+81cTIBlPjA= Subject key identifier: BB:07:60:AE:E3:2A:EC:13:46:A0:F5:B4:BB:CD:25:9C:0E:B6:A4:CF Authority key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C Certificate issuer: /CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Certificate serial: 493EE341C91BFC26D7DA4C3932F8DEC6CA0A5BA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft Manifest number: F5 Signing time: Wed 04 Nov 2026 03:47:49 +0000 Manifest this update: Wed 04 Nov 2026 03:42:49 +0000 Manifest next update: Thu 05 Nov 2026 04:57:49 +0000 Files and hashes: 1: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: bgqcpq4oGXRBhHkGTY354tyAP6tYrpWUR1LBW+CZlRc=) 2: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: nGWF5bh5L9qLAbKGSQCdAzJDlVgMMzvWoQdUcdutKoU=) 3: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: DFUdvmptS4s6MDKitZ4+QYcs7u5EAsI/gqRu9ukPOuQ=) 4: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl (hash: rbGmLndhA4QSprv5VI9peUJUSr0gXtw0nY3ALE+OAfg=) 5: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: fDwZ64mEh+x1WuETLacd3r9tfK8cPQNEGMbhAGN9C4Y=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: fOWfEwCz1sQLruXxV5SZRGMn95LgQ1Kei01ICgLlNgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 04:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3e:e3:41:c9:1b:fc:26:d7:da:4c:39:32:f8:de:c6:ca:0a:5b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Validity Not Before: Nov 4 03:42:49 2026 GMT Not After : Nov 5 04:57:49 2026 GMT Subject: CN=BB0760AEE32AEC1346A0F5B4BBCD259C0EB6A4CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b9:c9:25:dd:28:e8:4f:67:92:50:6c:a1:0d: cc:b2:ac:85:e8:c7:d7:10:89:a8:76:06:8e:7b:09: 56:76:3a:cc:f6:68:54:f1:65:7f:c5:4e:2c:e9:39: 94:7c:4a:92:5f:b8:ca:d1:d3:64:35:3d:f9:d5:ab: 6e:84:1a:63:bf:c3:33:1c:90:9a:93:3d:4d:89:ae: f2:73:26:00:b7:a7:da:8b:2a:cf:d2:33:0c:1e:9c: 63:2c:9f:8a:d3:b3:5f:a1:c8:82:50:ae:a1:c5:60: f7:7e:64:9b:21:f1:0e:b9:f4:27:12:66:3c:2c:1e: b9:7f:c2:09:9e:04:19:5c:33:79:07:64:04:09:1a: 78:a0:a9:e0:25:eb:ad:8c:53:2c:49:a3:b9:9d:7a: 52:51:d8:cc:a0:ee:38:24:2c:19:3f:ef:90:70:50: 13:27:45:c6:c2:09:1c:ec:f2:c7:bd:22:19:6e:4b: c0:ec:97:d7:d8:b5:d0:2c:51:b7:88:ad:77:75:cb: 1c:2a:2c:2a:78:16:a7:7f:c9:5e:05:cd:ed:06:e6: d1:f4:2a:27:0c:52:8f:40:16:ff:2e:d6:d1:b3:d2: 9e:48:c4:04:3d:92:46:df:3f:51:70:4d:ac:20:0a: c7:e5:99:e9:d7:ce:fd:f9:20:20:b7:ce:b3:6f:9b: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:60:AE:E3:2A:EC:13:46:A0:F5:B4:BB:CD:25:9C:0E:B6:A4:CF X509v3 Authority Key Identifier: keyid:15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c3:ea:3c:eb:d3:a1:ee:02:c0:c3:ac:9a:ab:c9:47:76:a5: 23:55:75:8a:fd:de:af:1a:01:09:e1:93:94:0e:fe:0f:67:b7: e4:da:4a:44:22:60:4a:2e:0e:c6:e5:82:6d:27:9c:a8:d1:ed: a1:61:7d:e9:37:50:ba:75:68:38:9e:35:58:47:93:93:39:b3: b9:32:52:e8:b5:1b:3d:09:f5:50:37:04:a1:2b:67:45:d3:00: 42:4a:09:11:e8:65:82:6a:e9:4e:7e:2b:6b:5f:b6:b3:ca:5f: 36:0a:7e:1b:a6:17:4d:ce:bd:81:5b:86:9c:0e:15:61:47:36: 70:25:de:e5:44:42:ae:8f:45:ff:d2:37:34:35:62:d3:b6:2b: be:fd:37:5b:cf:58:a8:3f:5e:25:bd:fc:52:86:f7:b9:9d:da: 05:d9:23:6d:28:de:18:9f:97:7c:df:52:1a:04:68:37:48:0a: 80:1c:4e:d8:fd:9c:e0:b2:b4:9d:0c:a7:ce:e0:70:71:a7:53: c7:30:bd:b6:fe:58:7f:71:79:0b:e6:a7:e2:e7:53:d1:e7:03: 0d:ad:c4:43:8c:66:d8:08:67:8d:60:0a:81:59:9d:55:be:8b: 44:6d:54:45:10:66:97:89:b2:d7:dd:66:b0:e0:76:87:c3:92: 1c:16:8a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUST7jQckb/CbX2kw5MvjexsoKW6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNC NUEwMzg1QzAeFw0yNjExMDQwMzQyNDlaFw0yNjExMDUwNDU3NDlaMDMxMTAvBgNV BAMTKEJCMDc2MEFFRTMyQUVDMTM0NkEwRjVCNEJCQ0QyNTlDMEVCNkE0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwuckl3SjoT2eSUGyhDcyyrIXo x9cQiah2Bo57CVZ2Osz2aFTxZX/FTizpOZR8SpJfuMrR02Q1PfnVq26EGmO/wzMc kJqTPU2JrvJzJgC3p9qLKs/SMwwenGMsn4rTs1+hyIJQrqHFYPd+ZJsh8Q659CcS ZjwsHrl/wgmeBBlcM3kHZAQJGnigqeAl662MUyxJo7mdelJR2Myg7jgkLBk/75Bw UBMnRcbCCRzs8se9IhluS8Dsl9fYtdAsUbeIrXd1yxwqLCp4Fqd/yV4Fze0G5tH0 KicMUo9AFv8u1tGz0p5IxAQ9kkbfP1FwTawgCsflmenXzv35ICC3zrNvm1QVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwdgruMq7BNGoPW0u80lnA62pM8wHwYDVR0j BBgwFoAUFWzELrUPhuHgSy9vykHJA7WgOFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzlmYmUwODgtMGQ4NC00Nzg5LWI0MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVC NTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNCNUEwMzg1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZDQzQyRUI1MEY4NkUxRTA0QjJGNkZDQTQxQzkwM0I1QTAz ODVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5 MDNCNUEwMzg1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjD6jzr06HuAsDDrJqryUd2pSNVdYr93q8a AQnhk5QO/g9nt+TaSkQiYEouDsblgm0nnKjR7aFhfek3ULp1aDieNVhHk5M5s7ky Uui1Gz0J9VA3BKErZ0XTAEJKCRHoZYJq6U5+K2tftrPKXzYKfhumF03OvYFbhpwO FWFHNnAl3uVEQq6PRf/SNzQ1YtO2K779N1vPWKg/XiW9/FKG97md2gXZI20o3hif l3zfUhoEaDdICoAcTtj9nOCytJ0Mp87gcHGnU8cwvbb+WH9xeQvmp+LnU9HnAw2t xEOMZtgIZ41gCoFZnVW+i0RtVEUQZpeJstfdZrDgdofDkhwWijk= -----END CERTIFICATE-----Generated at Wed Nov 4 09:55:37 2026 by rpki-client