$ rpki-client -vvvf rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft File: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft (raw, json) Hash identifier: /og52wRLX0sXEI5pND46b9JBLHWu/xlZFTXDlrMi/0k= Subject key identifier: 31:1C:02:31:52:A4:BD:A8:6B:D5:B4:B6:03:4E:89:F4:7D:1C:3C:94 Authority key identifier: 15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C Certificate issuer: /CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Certificate serial: 79AFF5394C18D80751F9F6C93931ADF3B52CBE9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft Manifest number: B5 Signing time: Wed 16 Sep 2026 15:53:47 +0000 Manifest this update: Wed 16 Sep 2026 15:48:47 +0000 Manifest next update: Thu 17 Sep 2026 17:56:47 +0000 Files and hashes: 1: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: fDwZ64mEh+x1WuETLacd3r9tfK8cPQNEGMbhAGN9C4Y=) 2: 156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl (hash: G4AvidQ0cCwPrOgzBI6kv395rw4fgXCTfWXItMaOOkM=) 3: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: nGWF5bh5L9qLAbKGSQCdAzJDlVgMMzvWoQdUcdutKoU=) 4: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: DFUdvmptS4s6MDKitZ4+QYcs7u5EAsI/gqRu9ukPOuQ=) 5: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: bgqcpq4oGXRBhHkGTY354tyAP6tYrpWUR1LBW+CZlRc=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: fOWfEwCz1sQLruXxV5SZRGMn95LgQ1Kei01ICgLlNgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:af:f5:39:4c:18:d8:07:51:f9:f6:c9:39:31:ad:f3:b5:2c:be:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156CC42EB50F86E1E04B2F6FCA41C903B5A0385C Validity Not Before: Sep 16 15:48:47 2026 GMT Not After : Sep 17 17:56:47 2026 GMT Subject: CN=311C023152A4BDA86BD5B4B6034E89F47D1C3C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:f1:76:75:83:7c:7e:be:fe:cf:0c:bb:bc: 28:45:95:64:7a:bb:9b:d6:7d:9e:18:0f:64:fa:3c: eb:ab:1c:17:9a:68:aa:4d:d8:f5:2d:72:38:94:87: 24:fe:5a:5a:a5:71:07:a0:f0:1f:91:c6:a6:77:33: 9d:4d:92:77:90:95:1b:2b:13:c9:be:ea:db:e0:fc: 50:29:68:94:8d:d6:5d:1b:e1:c7:b7:fe:5a:8b:bc: cf:6f:ca:d7:70:3b:7d:74:76:64:10:49:a8:51:29: 50:12:88:26:1a:68:d8:33:21:f3:0e:eb:1b:0f:24: d6:72:df:4f:8b:6d:9c:24:16:d0:30:93:1e:50:29: 48:b0:ef:20:b8:b0:b2:78:9f:75:b8:b7:ca:5d:f4: 57:96:bf:c5:89:52:f0:f9:7c:f5:4a:34:c6:4c:61: 74:0c:a1:25:4d:e2:39:01:5a:78:96:11:17:0a:7b: 94:16:c4:94:8a:f8:29:d5:aa:4a:d1:6b:1a:c8:6b: 36:ba:02:61:5f:0f:18:3b:a4:21:3a:fd:c0:35:17: cb:f2:54:c0:8b:5c:e4:fb:a6:49:f6:43:7f:2a:62: e7:63:30:1c:d5:ed:3e:f0:f1:bc:01:17:66:15:aa: 36:03:8f:3b:c9:5e:b7:fb:46:a0:e2:9c:a5:1f:b2: a4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:02:31:52:A4:BD:A8:6B:D5:B4:B6:03:4E:89:F4:7D:1C:3C:94 X509v3 Authority Key Identifier: keyid:15:6C:C4:2E:B5:0F:86:E1:E0:4B:2F:6F:CA:41:C9:03:B5:A0:38:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/156CC42EB50F86E1E04B2F6FCA41C903B5A0385C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ee:c6:37:df:cc:2c:b7:15:12:2d:b9:96:e6:99:23:bd:ad: 42:b5:6a:f7:34:d6:83:0d:5b:0d:c4:6c:32:eb:67:c8:36:01: 37:c9:85:9d:41:bf:f1:dc:ca:c9:35:bb:d0:f7:f9:94:74:d6: 2b:d8:8d:16:96:83:84:26:8a:52:58:33:82:c2:63:25:ad:6e: 70:c9:fe:19:e8:32:3b:d1:9d:52:1e:5f:30:8b:3f:a5:c4:50: 9e:82:fe:de:65:64:88:1f:17:2b:6a:8f:3b:bf:a4:3d:99:c5: d4:9d:75:72:86:be:d5:bd:00:89:c2:f1:7c:b0:a1:d1:49:f6: b5:4e:63:98:f8:69:cb:f8:86:17:f8:b4:57:69:5c:c0:c2:2e: 58:84:66:fd:f0:9e:2d:1f:50:5c:94:0b:9d:c7:e1:8a:a7:dd: 3a:18:42:d7:7c:26:e5:36:8a:45:34:62:e2:43:06:f3:4f:1a: c9:8e:b5:67:d7:bb:63:fa:13:33:3c:ab:ab:c6:24:3f:97:26: df:a1:5b:88:6f:1f:ff:bd:ca:6a:28:55:12:5b:5d:c2:bf:e7: ed:33:1b:3a:86:e1:d4:e2:08:39:aa:2f:66:6c:f9:87:f9:d4: 01:ca:ed:ec:23:29:99:4f:7a:ca:c1:71:98:0b:8d:2a:f8:b1: ce:2c:bb:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUea/1OUwY2AdR+fbJOTGt87Usvp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNC NUEwMzg1QzAeFw0yNjA5MTYxNTQ4NDdaFw0yNjA5MTcxNzU2NDdaMDMxMTAvBgNV BAMTKDMxMUMwMjMxNTJBNEJEQTg2QkQ1QjRCNjAzNEU4OUY0N0QxQzNDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9PF2dYN8fr7+zwy7vChFlWR6 u5vWfZ4YD2T6POurHBeaaKpN2PUtcjiUhyT+WlqlcQeg8B+RxqZ3M51NkneQlRsr E8m+6tvg/FApaJSN1l0b4ce3/lqLvM9vytdwO310dmQQSahRKVASiCYaaNgzIfMO 6xsPJNZy30+LbZwkFtAwkx5QKUiw7yC4sLJ4n3W4t8pd9FeWv8WJUvD5fPVKNMZM YXQMoSVN4jkBWniWERcKe5QWxJSK+CnVqkrRaxrIaza6AmFfDxg7pCE6/cA1F8vy VMCLXOT7pkn2Q38qYudjMBzV7T7w8bwBF2YVqjYDjzvJXrf7RqDinKUfsqSpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMRwCMVKkvahr1bS2A06J9H0cPJQwHwYDVR0j BBgwFoAUFWzELrUPhuHgSy9vykHJA7WgOFwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzlmYmUwODgtMGQ4NC00Nzg5LWI0MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVC NTBGODZFMUUwNEIyRjZGQ0E0MUM5MDNCNUEwMzg1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZDQzQyRUI1MEY4NkUxRTA0QjJGNkZDQTQxQzkwM0I1QTAz ODVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvMTU2Q0M0MkVCNTBGODZFMUUwNEIyRjZGQ0E0MUM5 MDNCNUEwMzg1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzuxjffzCy3FRItuZbmmSO9rUK1avc01oMN Ww3EbDLrZ8g2ATfJhZ1Bv/Hcysk1u9D3+ZR01ivYjRaWg4QmilJYM4LCYyWtbnDJ /hnoMjvRnVIeXzCLP6XEUJ6C/t5lZIgfFytqjzu/pD2ZxdSddXKGvtW9AInC8Xyw odFJ9rVOY5j4acv4hhf4tFdpXMDCLliEZv3wni0fUFyUC53H4Yqn3ToYQtd8JuU2 ikU0YuJDBvNPGsmOtWfXu2P6EzM8q6vGJD+XJt+hW4hvH/+9ymooVRJbXcK/5+0z GzqG4dTiCDmqL2Zs+Yf51AHK7ewjKZlPesrBcZgLjSr4sc4su6s= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:31 2026 by rpki-client