$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft File: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft (raw, json) Hash identifier: orTCbyu9Jai+uM70hb3pokna/tw80YwNFUcCtLBFX3I= Subject key identifier: 56:64:57:6D:6E:F6:03:02:25:9E:23:55:4F:96:7D:FF:57:A5:74:EB Authority key identifier: 15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 Certificate issuer: /CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Certificate serial: 313AE4CFAD007D043C4F183543F6A71129575299 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:50:54 +0000 Manifest this update: Thu 17 Sep 2026 01:45:54 +0000 Manifest next update: Fri 18 Sep 2026 04:41:54 +0000 Files and hashes: 1: 156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl (hash: m7BffpvSrpeXRR6Nm0nMKXVmLSY6ebnIMqC7eOQIZxE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3a:e4:cf:ad:00:7d:04:3c:4f:18:35:43:f6:a7:11:29:57:52:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156E44F3A5D74600196013DD5BB14AA93BEA6A46 Validity Not Before: Sep 17 01:45:54 2026 GMT Not After : Sep 18 04:41:54 2026 GMT Subject: CN=5664576D6EF60302259E23554F967DFF57A574EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:14:26:99:b4:7f:8d:ac:fc:07:66:bb:42: 72:22:46:90:f3:8f:81:07:34:03:f3:f5:d1:03:20: d1:2b:c0:14:05:8b:76:ac:12:bf:28:91:50:bf:a9: 15:73:d3:5f:f5:c5:72:e3:38:9e:fa:83:df:cb:07: a7:b6:ef:23:3f:bd:48:d5:aa:31:38:00:34:9c:9d: d6:09:42:db:63:f2:fa:a7:f0:0d:e9:f1:ac:58:e8: eb:be:85:2a:ae:38:84:cc:36:10:2c:b5:51:a9:79: 25:53:bb:78:41:63:ee:3f:87:3d:32:3e:ae:41:ed: 23:89:59:8a:65:a8:c0:46:62:ab:54:9f:c9:c3:a3: 56:c2:c9:da:18:77:ec:e0:69:e3:a5:19:21:57:7a: a9:89:31:c8:d6:03:f3:72:c5:d8:5f:fc:25:89:ef: b0:ea:3c:94:05:52:16:5a:24:79:59:74:15:8b:9c: 5c:15:81:48:eb:b3:2d:70:23:b0:eb:2d:59:b0:f4: fa:bc:85:aa:ed:51:03:a0:28:9e:09:1c:ff:a8:62: c2:89:b4:bc:3e:9e:b0:9a:b8:ee:9d:9b:82:58:79: a8:31:85:67:1a:bd:60:ff:28:f4:01:00:e7:5b:ef: 33:19:e0:4f:9b:45:a0:ae:0b:dc:f7:fd:ac:59:5b: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:64:57:6D:6E:F6:03:02:25:9E:23:55:4F:96:7D:FF:57:A5:74:EB X509v3 Authority Key Identifier: keyid:15:6E:44:F3:A5:D7:46:00:19:60:13:DD:5B:B1:4A:A9:3B:EA:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/156E44F3A5D74600196013DD5BB14AA93BEA6A46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/156E44F3A5D74600196013DD5BB14AA93BEA6A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:17:5b:0a:cf:92:c3:25:ae:a4:5c:81:d8:ae:a6:fc:56:7a: 9d:f3:b9:4d:75:23:28:3b:52:dc:4c:33:4d:6a:a1:64:dc:02: 1f:64:d6:2d:c7:17:7e:61:4f:cc:7e:cb:82:c1:46:8f:f5:a5: f8:56:b6:c9:44:85:c6:28:d0:7c:23:a1:c1:f7:55:90:37:07: b0:73:f1:af:38:3e:7a:de:c1:23:60:e9:69:c5:71:4a:f6:ac: 08:42:27:33:80:01:62:84:14:9f:0c:b2:3c:44:3c:b4:f8:da: 41:5a:3c:e2:ff:02:82:91:2c:a6:df:7e:f2:57:09:af:58:91: 2c:39:e1:ef:ca:39:4a:d1:92:c0:02:6c:b8:9e:fd:0e:86:3b: f9:78:d6:40:52:8e:62:0a:7c:98:6a:e7:2c:e6:b2:e4:5f:ba: 2e:8c:bc:13:40:14:8c:60:ac:9d:95:92:57:20:d0:79:05:87: 07:ff:25:7f:5b:66:31:b6:a0:fa:1e:fb:e3:c1:bc:09:7a:65: 9c:40:d5:50:68:9c:9c:45:1c:6c:ee:31:e2:13:9c:76:9d:db: b2:23:0d:e8:22:a7:7f:77:a8:43:b6:30:bf:24:78:d3:e7:a6: 95:ec:f4:71:ac:8e:3b:c8:1f:eb:f9:d7:e3:f0:5c:af:32:5a: cd:e3:9c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTrkz60AfQQ8Txg1Q/anESlXUpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkz QkVBNkE0NjAeFw0yNjA5MTcwMTQ1NTRaFw0yNjA5MTgwNDQxNTRaMDMxMTAvBgNV BAMTKDU2NjQ1NzZENkVGNjAzMDIyNTlFMjM1NTRGOTY3REZGNTdBNTc0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6hQmmbR/jaz8B2a7QnIiRpDz j4EHNAPz9dEDINErwBQFi3asEr8okVC/qRVz01/1xXLjOJ76g9/LB6e27yM/vUjV qjE4ADScndYJQttj8vqn8A3p8axY6Ou+hSquOITMNhAstVGpeSVTu3hBY+4/hz0y Pq5B7SOJWYplqMBGYqtUn8nDo1bCydoYd+zgaeOlGSFXeqmJMcjWA/Nyxdhf/CWJ 77DqPJQFUhZaJHlZdBWLnFwVgUjrsy1wI7DrLVmw9Pq8hartUQOgKJ4JHP+oYsKJ tLw+nrCauO6dm4JYeagxhWcavWD/KPQBAOdb7zMZ4E+bRaCuC9z3/axZW3S3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVmRXbW72AwIlniNVT5Z9/1eldOswHwYDVR0j BBgwFoAUFW5E86XXRgAZYBPdW7FKqTvqakYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQwMjljMjItMjIxNS00OGMxLTlhYjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNB NUQ3NDYwMDE5NjAxM0RENUJCMTRBQTkzQkVBNkE0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTZFNDRGM0E1RDc0NjAwMTk2MDEzREQ1QkIxNEFBOTNCRUE2 QTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvMTU2RTQ0RjNBNUQ3NDYwMDE5NjAxM0RENUJCMTRB QTkzQkVBNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYXWwrPksMlrqRcgdiupvxWep3zuU11Iyg7 UtxMM01qoWTcAh9k1i3HF35hT8x+y4LBRo/1pfhWtslEhcYo0HwjocH3VZA3B7Bz 8a84PnrewSNg6WnFcUr2rAhCJzOAAWKEFJ8MsjxEPLT42kFaPOL/AoKRLKbffvJX Ca9YkSw54e/KOUrRksACbLie/Q6GO/l41kBSjmIKfJhq5yzmsuRfui6MvBNAFIxg rJ2Vklcg0HkFhwf/JX9bZjG2oPoe++PBvAl6ZZxA1VBonJxFHGzuMeITnHad27Ij Degip393qEO2ML8keNPnppXs9HGsjjvIH+v51+PwXK8yWs3jnNA= -----END CERTIFICATE-----Generated at Thu Sep 17 12:22:08 2026 by rpki-client