$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: 8vZjmjnOTxLJGLPbn+8UKSSLiBPofARpZJDU7mXqq5s= Subject key identifier: 27:4A:15:D4:F6:D5:B0:0C:AD:55:E2:9C:11:A4:95:AB:DE:04:05:B9 Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 046E972CE70B87BE61295DB4B26C67556E6CC725 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:30:04 +0000 Manifest this update: Tue 12 May 2026 15:25:04 +0000 Manifest next update: Wed 13 May 2026 18:29:04 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 4: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) 5: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: xisyxN5a+jbVL2qiM89+reP7N+GgVHqHyBFEwbX+EUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6e:97:2c:e7:0b:87:be:61:29:5d:b4:b2:6c:67:55:6e:6c:c7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: May 12 15:25:04 2026 GMT Not After : May 13 18:29:04 2026 GMT Subject: CN=274A15D4F6D5B00CAD55E29C11A495ABDE0405B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:f5:8b:a7:b9:6e:e5:e4:ae:3d:07:ef:bf: 8e:24:3b:eb:c3:50:3b:b0:50:97:fb:e8:83:d7:5d: 14:3d:83:73:4b:9a:e7:88:75:05:46:95:c4:df:a5: d5:f9:d3:28:f8:09:5e:0d:85:97:68:29:f3:ab:c3: 69:c3:cf:c6:f3:49:4a:33:95:c8:aa:10:7b:a3:f9: 63:8f:4f:a6:ef:64:ac:02:eb:14:24:b8:0c:75:94: 9a:60:1c:fd:36:1b:78:45:96:ab:3a:d6:96:3c:44: f1:32:fe:48:ca:92:fb:d3:e3:10:84:b5:19:a9:bc: 78:f3:66:e6:f7:15:4d:86:58:53:06:17:51:8c:db: 06:f5:45:0d:fe:7d:08:15:f9:dd:c9:85:1f:e9:6b: 49:79:55:26:db:83:86:be:d6:98:3b:c0:a0:cb:5b: 3b:ef:aa:e5:8b:50:a1:7e:cb:a0:c1:ed:ab:2b:35: a3:22:60:46:98:98:4c:ac:ef:41:27:d6:82:52:17: e2:72:24:70:15:11:b1:0d:8d:92:ae:75:88:96:70: 7c:e1:ee:25:a3:5c:e1:08:e4:cd:a4:d5:e1:58:e3: 8d:7d:1e:f4:46:93:6a:46:19:30:4d:91:9c:b9:2e: 2d:0b:c8:8d:a0:ee:6d:e7:d7:51:89:61:ae:70:46: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:15:D4:F6:D5:B0:0C:AD:55:E2:9C:11:A4:95:AB:DE:04:05:B9 X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:10:4d:62:60:b6:29:d1:47:cf:c6:97:03:e2:22:a0:2c:0d: 74:ba:8a:66:47:18:58:46:e8:bf:53:0c:19:25:a5:34:88:32: 05:c2:60:fa:b8:3f:c1:8e:95:6a:e0:11:4e:e2:41:04:7f:97: 35:af:09:ca:15:f7:8f:d9:e0:17:f5:f2:2e:75:2a:1a:be:79: 45:0e:d4:d3:1d:a8:38:41:fe:3d:fd:e2:f9:5b:c0:30:66:ad: 47:a5:b8:e8:b9:a0:3c:2f:b0:13:9e:6f:d2:91:28:75:95:62: 97:79:8e:ee:6d:b9:a1:d2:eb:72:14:df:98:5c:ac:47:a9:8d: 5a:11:ba:6e:19:11:06:68:75:61:b7:ab:df:ac:12:cc:6f:73: b4:4e:f3:82:cd:b7:50:73:5c:e2:7c:85:ff:ab:97:ca:35:f5: af:e4:ba:12:66:4f:c5:1a:03:c0:db:1d:02:41:92:a4:4a:87: 0e:b7:0a:e3:e7:f1:d1:b3:ab:79:aa:b7:25:e4:89:e2:03:14: 86:36:f8:3c:9e:f2:47:c6:bb:f8:47:a1:c6:39:f0:95:fa:35: 89:39:01:03:e5:b5:59:12:23:47:ea:d8:80:69:01:87:fc:37: 29:31:31:99:0e:2c:a4:79:d9:21:f4:69:01:d0:7c:70:9b:25: 2c:78:38:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBG6XLOcLh75hKV20smxnVW5sxyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA1MTIxNTI1MDRaFw0yNjA1MTMxODI5MDRaMDMxMTAvBgNV BAMTKDI3NEExNUQ0RjZENUIwMENBRDU1RTI5QzExQTQ5NUFCREUwNDA1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSPWLp7lu5eSuPQfvv44kO+vD UDuwUJf76IPXXRQ9g3NLmueIdQVGlcTfpdX50yj4CV4NhZdoKfOrw2nDz8bzSUoz lciqEHuj+WOPT6bvZKwC6xQkuAx1lJpgHP02G3hFlqs61pY8RPEy/kjKkvvT4xCE tRmpvHjzZub3FU2GWFMGF1GM2wb1RQ3+fQgV+d3JhR/pa0l5VSbbg4a+1pg7wKDL WzvvquWLUKF+y6DB7asrNaMiYEaYmEys70En1oJSF+JyJHAVEbENjZKudYiWcHzh 7iWjXOEI5M2k1eFY4419HvRGk2pGGTBNkZy5Li0LyI2g7m3n11GJYa5wRvUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ0oV1PbVsAytVeKcEaSVq94EBbkwHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwQTWJgtinRR8/GlwPiIqAsDXS6imZHGFhG 6L9TDBklpTSIMgXCYPq4P8GOlWrgEU7iQQR/lzWvCcoV94/Z4Bf18i51Khq+eUUO 1NMdqDhB/j394vlbwDBmrUeluOi5oDwvsBOeb9KRKHWVYpd5ju5tuaHS63IU35hc rEepjVoRum4ZEQZodWG3q9+sEsxvc7RO84LNt1BzXOJ8hf+rl8o19a/kuhJmT8Ua A8DbHQJBkqRKhw63CuPn8dGzq3mqtyXkieIDFIY2+Dye8kfGu/hHocY58JX6NYk5 AQPltVkSI0fq2IBpAYf8NykxMZkOLKR52SH0aQHQfHCbJSx4OBI= -----END CERTIFICATE-----Generated at Wed May 13 06:48:28 2026 by rpki-client