$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: O+EUpRdm6qLEC16Ns7Z82/amNk4hF9WS2C3GjHsZD54= Subject key identifier: 3A:FC:E4:0E:08:C7:FF:A5:06:24:13:A9:5E:A1:D4:17:9F:78:81:F5 Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 7EC4FCE166A6BB48D8B579FE9DEE4BBBEB049E92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: BF Signing time: Mon 21 Sep 2026 23:30:50 +0000 Manifest this update: Mon 21 Sep 2026 23:25:50 +0000 Manifest next update: Wed 23 Sep 2026 01:30:50 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 2: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 3: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) 4: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: MOgMwPE/zRPdxs/FRg5PRHEylU4tBAvoLVr+GM+JoYs=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c4:fc:e1:66:a6:bb:48:d8:b5:79:fe:9d:ee:4b:bb:eb:04:9e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Sep 21 23:25:50 2026 GMT Not After : Sep 23 01:30:50 2026 GMT Subject: CN=3AFCE40E08C7FFA5062413A95EA1D4179F7881F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:d8:2b:10:86:11:ed:32:e8:04:ec:4a:eb: dd:f3:29:8e:f0:12:f9:ce:97:41:8c:ec:5a:fc:b8: 20:60:13:53:55:bb:b0:77:97:92:8e:6a:d3:d7:68: 8e:24:71:2d:4c:2f:48:fc:c6:a3:56:ee:12:d7:9f: 03:24:7a:36:c6:7a:d5:cc:75:78:a7:bb:35:2c:c1: 81:25:ef:42:c6:10:98:a9:57:9b:1a:dc:72:b1:30: d9:ea:0a:19:6f:73:96:a8:4a:80:be:4e:48:3d:2c: 9d:df:b8:82:1b:b5:45:75:a6:8d:59:9b:82:c6:e6: d4:2c:db:60:dc:e1:6a:9b:3f:5b:3a:47:e4:f8:ba: 62:ec:67:e0:c4:ea:2d:d9:e2:cd:e3:f7:b2:22:6d: 29:61:b2:c0:5a:15:1a:e0:7f:11:01:1c:69:74:7b: 00:99:2c:af:0e:79:43:ae:26:f0:ff:54:7c:79:63: 40:a8:4d:c6:13:c9:2e:b3:5d:a6:14:74:9b:10:f1: 91:3a:08:96:27:bb:b8:d0:6f:09:36:e9:b1:8c:7b: 70:01:bb:bd:a5:62:81:e3:56:f7:3a:c3:a9:0d:4c: 98:cc:8c:66:64:3d:51:c7:2f:ff:e3:e6:da:98:fc: e0:79:72:bd:bb:6d:01:c2:d6:0b:ae:16:2b:43:67: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FC:E4:0E:08:C7:FF:A5:06:24:13:A9:5E:A1:D4:17:9F:78:81:F5 X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b5:ad:a1:85:f0:4a:1f:ba:6f:8d:c6:ef:5a:db:c6:4c:f2: a8:ba:66:a0:a0:a8:42:4c:5b:12:af:dc:88:ac:00:60:30:75: 3c:ce:1d:12:23:9d:de:35:7c:af:92:45:33:c5:2b:c9:cf:82: e0:5b:d5:ea:e9:03:54:c3:97:01:2b:95:40:71:86:04:b3:dd: 52:67:82:0b:9b:4e:24:36:9f:e8:50:67:4d:12:21:6f:ab:dd: 84:47:87:69:a0:9a:78:04:37:fb:fb:d7:0d:e6:2e:c7:3e:4e: d6:c6:bc:39:1f:2f:c3:db:de:a5:40:19:4e:24:9e:00:b4:c1: 6a:67:e5:ea:d1:10:14:01:d0:81:c3:9c:c7:63:e0:71:79:38: cb:fb:ad:68:c2:d1:54:8c:e7:59:2e:e4:69:25:2a:6e:76:0f: 8f:c0:46:4f:cb:4b:55:f7:cb:9b:02:c1:88:93:32:3f:4f:f6: 6a:63:72:98:d6:4e:5b:d2:ed:34:32:b6:26:b8:2d:8f:ae:fd: ed:c3:27:2f:20:de:8c:df:5c:19:f5:c1:ca:64:f4:99:13:86: 4a:25:bd:e0:cd:99:43:d7:c6:8c:15:ac:f5:61:89:e9:7b:78: f5:e0:89:be:cf:64:96:4d:15:39:a5:d7:77:39:bd:83:ff:40: 43:40:5f:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsT84Wamu0jYtXn+ne5Lu+sEnpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA5MjEyMzI1NTBaFw0yNjA5MjMwMTMwNTBaMDMxMTAvBgNV BAMTKDNBRkNFNDBFMDhDN0ZGQTUwNjI0MTNBOTVFQTFENDE3OUY3ODgxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRtgrEIYR7TLoBOxK693zKY7w EvnOl0GM7Fr8uCBgE1NVu7B3l5KOatPXaI4kcS1ML0j8xqNW7hLXnwMkejbGetXM dXinuzUswYEl70LGEJipV5sa3HKxMNnqChlvc5aoSoC+Tkg9LJ3fuIIbtUV1po1Z m4LG5tQs22Dc4WqbP1s6R+T4umLsZ+DE6i3Z4s3j97IibSlhssBaFRrgfxEBHGl0 ewCZLK8OeUOuJvD/VHx5Y0CoTcYTyS6zXaYUdJsQ8ZE6CJYnu7jQbwk26bGMe3AB u72lYoHjVvc6w6kNTJjMjGZkPVHHL//j5tqY/OB5cr27bQHC1guuFitDZ9ufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvzkDgjH/6UGJBOpXqHUF594gfUwHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKe1raGF8Eofum+Nxu9a28ZM8qi6ZqCgqEJM WxKv3IisAGAwdTzOHRIjnd41fK+SRTPFK8nPguBb1erpA1TDlwErlUBxhgSz3VJn ggubTiQ2n+hQZ00SIW+r3YRHh2mgmngEN/v71w3mLsc+TtbGvDkfL8Pb3qVAGU4k ngC0wWpn5erREBQB0IHDnMdj4HF5OMv7rWjC0VSM51ku5GklKm52D4/ARk/LS1X3 y5sCwYiTMj9P9mpjcpjWTlvS7TQytia4LY+u/e3DJy8g3ozfXBn1wcpk9JkThkol veDNmUPXxowVrPVhiel7ePXgib7PZJZNFTml13c5vYP/QENAX7A= -----END CERTIFICATE-----Generated at Tue Sep 22 07:24:39 2026 by rpki-client