$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: z39bnms0M0z9Vppwmb7IQ6GdUFv6++4so8+PZL7DnUw= Subject key identifier: DB:1C:EE:FB:F0:B7:D2:1A:50:43:33:F8:C0:3F:39:16:90:31:CB:19 Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 5B36CA2A8238B751CFA93EEB3EBF7E904812631C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 08:34:17 +0000 Manifest this update: Sat 13 Jun 2026 08:29:17 +0000 Manifest next update: Sun 14 Jun 2026 09:39:17 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 3: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: Srpny00tvj0eMCeedejhIG+7ArOBJnC97T7fmrrSlOk=) 4: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:36:ca:2a:82:38:b7:51:cf:a9:3e:eb:3e:bf:7e:90:48:12:63:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Jun 13 08:29:17 2026 GMT Not After : Jun 14 09:39:17 2026 GMT Subject: CN=DB1CEEFBF0B7D21A504333F8C03F39169031CB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:16:58:10:d8:da:2a:15:9c:95:9b:3f:b1: 1f:92:99:cc:be:a9:e8:f6:9f:30:2b:ee:0c:bc:61: 9f:b9:10:a6:d2:58:2b:1b:f4:7c:85:9a:62:2c:00: fb:88:ba:2e:49:f7:cd:65:03:09:ce:8d:2d:70:0b: 13:c8:ac:f3:bf:a1:a4:5a:2c:09:29:3a:b3:71:7b: e2:90:aa:b2:09:a1:0c:74:82:7a:d4:70:43:6e:ae: 39:d4:54:90:08:b5:77:e2:bf:76:ff:ec:90:e6:62: 4f:53:87:ce:86:a6:9f:3e:ee:80:0b:ad:a8:29:98: b6:9f:d2:05:12:64:b0:29:12:f3:fb:46:27:99:c5: ec:4c:70:ae:80:5b:68:9a:26:f5:73:82:09:49:e8: a6:4e:de:b8:60:3c:37:79:f8:0b:97:67:62:22:d3: 08:06:47:f6:12:6d:4f:47:74:a1:5a:79:ff:3a:aa: 0c:a3:b7:e0:e0:36:48:0f:d7:0a:07:87:a2:f6:d3: 6c:3a:d5:97:c6:6f:07:83:ee:69:b3:ca:e0:ca:d7: a9:35:ec:e5:33:8b:85:52:7f:b8:78:8f:b6:de:af: 77:89:01:85:2e:35:f8:71:57:7a:40:ad:94:61:8b: 5d:24:56:81:57:4c:94:8f:c4:02:5c:62:88:31:45: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1C:EE:FB:F0:B7:D2:1A:50:43:33:F8:C0:3F:39:16:90:31:CB:19 X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:17:64:a3:35:c0:0e:8a:9d:12:8c:82:62:0b:41:3d:34: 72:a5:d9:20:30:66:af:b9:d4:12:5c:b4:79:be:64:ed:5b:a4: c0:66:7e:a1:7a:51:69:73:9a:c0:1a:22:6e:be:70:4d:fe:67: 17:14:87:d9:ea:cc:60:4d:d6:46:63:a9:c1:aa:ac:0d:9f:66: b3:7e:75:5c:49:75:f4:90:a6:3d:eb:b5:a3:f3:1b:bd:02:48: fd:77:cc:2a:72:9b:ab:0e:8e:4b:a7:88:b0:02:01:dd:89:42: f0:b3:dd:b0:3c:59:d4:18:77:5c:7f:a9:8f:23:f4:1c:3a:cd: 9e:68:62:c1:13:cd:67:06:e0:78:9d:7b:18:de:36:15:de:13: d4:e7:4d:1f:95:ab:7a:a6:f3:f9:2e:17:e2:f9:15:f7:87:79: 66:93:ec:8f:a1:80:8f:55:c1:54:d5:b2:b6:fd:e9:19:7f:86: 78:30:4c:e5:7a:d2:05:7b:30:6e:97:64:8c:b8:21:e4:ac:30: 68:90:8a:82:08:22:6b:50:c4:65:d1:24:da:2a:6e:51:26:7f: e3:10:b7:06:dd:77:b2:b8:2c:1f:8f:c2:cb:3f:6b:f5:c8:14: ac:c7:c5:ac:93:0c:ec:97:ec:a6:66:19:84:4d:7e:83:97:83: e2:88:56:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzbKKoI4t1HPqT7rPr9+kEgSYxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA2MTMwODI5MTdaFw0yNjA2MTQwOTM5MTdaMDMxMTAvBgNV BAMTKERCMUNFRUZCRjBCN0QyMUE1MDQzMzNGOEMwM0YzOTE2OTAzMUNCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tRZYENjaKhWclZs/sR+Smcy+ qej2nzAr7gy8YZ+5EKbSWCsb9HyFmmIsAPuIui5J981lAwnOjS1wCxPIrPO/oaRa LAkpOrNxe+KQqrIJoQx0gnrUcENurjnUVJAItXfiv3b/7JDmYk9Th86Gpp8+7oAL ragpmLaf0gUSZLApEvP7RieZxexMcK6AW2iaJvVzgglJ6KZO3rhgPDd5+AuXZ2Ii 0wgGR/YSbU9HdKFaef86qgyjt+DgNkgP1woHh6L202w61ZfGbweD7mmzyuDK16k1 7OUzi4VSf7h4j7ber3eJAYUuNfhxV3pArZRhi10kVoFXTJSPxAJcYogxRcfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xzu+/C30hpQQzP4wD85FpAxyxkwHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqJF2SjNcAOip0SjIJiC0E9NHKl2SAwZq+5 1BJctHm+ZO1bpMBmfqF6UWlzmsAaIm6+cE3+ZxcUh9nqzGBN1kZjqcGqrA2fZrN+ dVxJdfSQpj3rtaPzG70CSP13zCpym6sOjkuniLACAd2JQvCz3bA8WdQYd1x/qY8j 9Bw6zZ5oYsETzWcG4HidexjeNhXeE9TnTR+Vq3qm8/kuF+L5FfeHeWaT7I+hgI9V wVTVsrb96Rl/hngwTOV60gV7MG6XZIy4IeSsMGiQioIIImtQxGXRJNoqblEmf+MQ twbdd7K4LB+Pwss/a/XIFKzHxayTDOyX7KZmGYRNfoOXg+KIVtc= -----END CERTIFICATE-----Generated at Sun Jun 14 02:02:03 2026 by rpki-client