$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: t6mgYmLZ8grl28BKi58uZ80QhTI7K5LJzKvCG94hMps= Subject key identifier: 6A:C3:7B:16:04:44:3D:7E:55:7F:01:80:C7:9B:34:9D:D7:08:CB:9D Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 4D27A8D375BB5D6555C2FC46CF4071B479A03D7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:09:57 +0000 Manifest this update: Wed 29 Jul 2026 03:04:57 +0000 Manifest next update: Thu 30 Jul 2026 04:33:57 +0000 Files and hashes: 1: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 2: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: 3is8icxILMnUe+/jSvq1oTv5gJLZpRape5tAdmgKJas=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 4: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:27:a8:d3:75:bb:5d:65:55:c2:fc:46:cf:40:71:b4:79:a0:3d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Jul 29 03:04:57 2026 GMT Not After : Jul 30 04:33:57 2026 GMT Subject: CN=6AC37B1604443D7E557F0180C79B349DD708CB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:fd:45:6b:cb:b2:fe:49:2b:d5:53:aa:6b: e5:f8:74:4a:6c:5e:a2:88:ea:2e:b4:ba:71:0f:c4: 1d:1a:69:19:86:a2:37:82:d1:93:d0:c3:97:9c:3c: 6b:ab:a1:55:40:2b:05:24:95:96:9a:05:c4:fc:0b: 56:a4:19:0b:10:8e:26:ee:77:1f:94:a0:eb:38:2f: db:ce:72:fb:78:80:c2:89:ca:8b:af:4b:8f:6a:b8: 11:01:9e:f3:75:49:76:83:29:11:ef:d5:5c:a5:bb: 8a:02:a8:a2:ff:ab:20:8e:cd:11:70:b3:59:5f:90: 55:72:3a:52:8b:82:f6:04:39:22:0f:2a:05:ee:e9: b1:ff:8e:a8:66:3a:ec:85:9e:69:ba:70:da:ec:fa: 50:ef:2d:98:22:c2:32:76:db:0b:b0:c3:59:40:c6: 05:32:12:f1:bf:94:28:3d:19:84:33:b1:7f:cb:90: 5d:37:8d:71:61:48:55:a5:77:56:e0:77:2b:34:cc: 0b:75:53:ce:6e:6d:bb:e6:a9:05:a9:75:d4:50:71: cd:67:03:be:81:1e:1f:97:2a:23:fb:28:c6:ec:06: a9:04:4d:bf:c4:21:80:41:2f:33:a6:6c:b8:ec:97: 87:44:5f:09:d4:c3:02:0f:bf:53:b6:de:c4:df:f9: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C3:7B:16:04:44:3D:7E:55:7F:01:80:C7:9B:34:9D:D7:08:CB:9D X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:46:e9:21:08:32:b2:a8:5a:a0:0b:7c:48:82:cd:3a:f8:b0: 4b:a9:b6:ca:74:62:2a:43:92:1f:b8:89:8b:38:9d:7d:f7:08: 85:e0:df:be:3b:91:5b:af:c9:55:02:d4:f5:02:a7:19:9b:17: c2:83:cd:c2:27:ea:28:34:5e:31:04:ec:5f:f0:79:a8:fb:5b: 86:0e:5b:b5:98:d9:93:bb:1b:f0:2f:d7:09:52:63:20:4d:72: 8a:a2:1f:34:e4:49:08:2e:8c:7e:f2:03:3b:4b:5f:02:d7:c2: 75:58:54:b2:51:12:cc:4c:b6:a0:5b:8e:97:d4:35:1e:8d:a5: 72:71:c3:d5:45:ff:6a:aa:43:ac:a4:dc:1c:b8:be:bc:f9:7f: c2:19:1b:4a:9b:a2:46:85:17:83:2a:62:68:a9:32:91:8c:b5: a9:78:e5:3a:69:82:cf:48:33:48:a8:31:6a:d3:3d:48:40:a3: b1:b6:e0:9a:94:4e:f3:e0:a5:80:65:7d:97:63:94:2c:09:1a: 58:42:2e:2b:0e:42:33:bb:f5:24:ce:d3:e0:db:38:98:80:58: 95:b6:cb:26:00:c0:07:18:cc:d0:8f:9e:f2:40:bf:0f:10:0e: a1:26:11:67:08:cf:0e:56:ba:ff:4d:d3:92:12:13:49:e5:08: 4e:3f:2a:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSeo03W7XWVVwvxGz0BxtHmgPX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA3MjkwMzA0NTdaFw0yNjA3MzAwNDMzNTdaMDMxMTAvBgNV BAMTKDZBQzM3QjE2MDQ0NDNEN0U1NTdGMDE4MEM3OUIzNDlERDcwOENCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLGv1Fa8uy/kkr1VOqa+X4dEps XqKI6i60unEPxB0aaRmGojeC0ZPQw5ecPGuroVVAKwUklZaaBcT8C1akGQsQjibu dx+UoOs4L9vOcvt4gMKJyouvS49quBEBnvN1SXaDKRHv1Vylu4oCqKL/qyCOzRFw s1lfkFVyOlKLgvYEOSIPKgXu6bH/jqhmOuyFnmm6cNrs+lDvLZgiwjJ22wuww1lA xgUyEvG/lCg9GYQzsX/LkF03jXFhSFWld1bgdys0zAt1U85ubbvmqQWpddRQcc1n A76BHh+XKiP7KMbsBqkETb/EIYBBLzOmbLjsl4dEXwnUwwIPv1O23sTf+aX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUasN7FgREPX5VfwGAx5s0ndcIy50wHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItG6SEIMrKoWqALfEiCzTr4sEuptsp0YipD kh+4iYs4nX33CIXg3747kVuvyVUC1PUCpxmbF8KDzcIn6ig0XjEE7F/weaj7W4YO W7WY2ZO7G/Av1wlSYyBNcoqiHzTkSQgujH7yAztLXwLXwnVYVLJREsxMtqBbjpfU NR6NpXJxw9VF/2qqQ6yk3By4vrz5f8IZG0qbokaFF4MqYmipMpGMtal45Tppgs9I M0ioMWrTPUhAo7G24JqUTvPgpYBlfZdjlCwJGlhCLisOQjO79STO0+DbOJiAWJW2 yyYAwAcYzNCPnvJAvw8QDqEmEWcIzw5Wuv9N05ISE0nlCE4/Kvo= -----END CERTIFICATE-----Generated at Wed Jul 29 08:49:18 2026 by rpki-client