$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: qfHtnt3USNwqamjLhKXvgYnnEmIPLtgY0KD4ipLtw/Q= Subject key identifier: 8C:60:5F:08:56:03:8F:D3:A3:17:31:E0:84:0C:69:33:10:72:6D:42 Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 03111BD2B182EEDA32500B2DB1B18B3DCAD71551 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:46:33 +0000 Manifest this update: Thu 23 Jul 2026 21:41:33 +0000 Manifest next update: Sat 25 Jul 2026 01:41:33 +0000 Files and hashes: 1: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 2: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) 3: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: 9ewKh5k+9M8g1SX1yinxfElZ3+uFGOPXVL6fDXsftVc=) 4: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 5: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:11:1b:d2:b1:82:ee:da:32:50:0b:2d:b1:b1:8b:3d:ca:d7:15:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Jul 23 21:41:33 2026 GMT Not After : Jul 25 01:41:33 2026 GMT Subject: CN=8C605F0856038FD3A31731E0840C693310726D42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:02:2f:1b:41:62:50:ef:62:60:41:80:82: 17:27:e8:5a:d1:fd:b0:91:b9:21:8f:f8:b3:0a:6f: 89:42:a7:61:54:02:87:1e:e6:92:fa:5f:84:b7:c9: 64:d2:2f:36:7c:13:f3:e7:8d:8b:7b:20:ee:fe:58: 96:1f:ed:6b:46:ba:35:85:95:54:9e:25:1e:15:01: 7a:28:3e:6e:d1:01:72:24:52:45:8b:8a:4c:e9:4d: 4d:5a:f7:34:34:b2:f5:8f:f2:e6:8d:25:54:52:a1: 35:07:ae:90:24:94:6b:a7:20:f6:bb:b1:7e:45:f3: 4e:3e:0a:2f:fb:52:d3:4e:fe:28:e2:1b:d4:f9:38: 1d:f2:09:62:b6:c3:0b:98:5b:db:d9:82:42:de:ba: f9:ec:9d:bd:51:01:db:cc:0c:12:f8:0f:32:1c:49: 5e:21:82:11:b3:92:45:b2:20:cc:96:c2:16:f3:7f: 23:b2:34:38:1e:08:2e:1c:8e:82:cf:0c:dc:2f:9a: 78:45:a0:d2:78:a2:85:de:60:ed:94:c0:17:67:65: 3c:ff:2a:34:d8:b5:b7:aa:cb:e6:9d:3d:1e:1d:67: 1e:d1:23:41:00:b4:75:66:5d:f2:78:f9:53:90:c9: 84:01:c3:c1:51:73:bc:39:57:25:b6:e6:41:78:51: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:60:5F:08:56:03:8F:D3:A3:17:31:E0:84:0C:69:33:10:72:6D:42 X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:86:30:40:7b:38:da:23:55:7d:bd:39:c5:4c:07:b2:66:e7: fc:a0:20:70:a5:85:2c:57:cd:d8:e0:2f:22:29:0a:ac:30:39: 9c:99:95:02:33:a5:95:39:7f:37:b9:36:e5:90:d1:9a:41:7d: 60:a1:f8:6c:70:85:3f:44:b9:5b:95:95:9f:ba:78:39:ac:77: dc:de:2d:3d:e2:a2:8e:e4:24:22:31:b1:af:0d:a1:26:5f:96: f8:d6:b1:da:e9:6e:c8:b5:5d:f0:13:ec:1a:42:07:0c:43:75: e3:22:1b:68:a6:50:2c:7a:14:fa:88:73:a8:d3:09:58:ce:db: 72:30:db:f2:0b:88:15:e7:2d:50:47:a2:e6:a2:6e:b5:3f:93: 0d:0b:ec:38:69:e8:6e:9e:8f:21:c0:64:ce:ca:ec:30:5b:5e: 72:b8:65:64:eb:45:d1:af:d7:38:68:b3:e5:0f:73:b4:7e:0c: fa:c3:f6:e4:96:28:2e:45:9e:85:b1:83:ee:f9:c6:3a:39:da: 58:80:25:f9:2a:51:70:84:2c:27:de:5d:24:1e:25:87:2a:d1: 60:f9:93:e4:c9:29:0b:4e:c5:93:d7:4c:67:e4:96:df:a1:e4: e2:39:82:9c:99:9b:e4:2f:fe:cb:26:de:39:77:4f:78:a8:f3: 3f:79:51:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxEb0rGC7toyUAstsbGLPcrXFVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA3MjMyMTQxMzNaFw0yNjA3MjUwMTQxMzNaMDMxMTAvBgNV BAMTKDhDNjA1RjA4NTYwMzhGRDNBMzE3MzFFMDg0MEM2OTMzMTA3MjZENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsgIvG0FiUO9iYEGAghcn6FrR /bCRuSGP+LMKb4lCp2FUAoce5pL6X4S3yWTSLzZ8E/PnjYt7IO7+WJYf7WtGujWF lVSeJR4VAXooPm7RAXIkUkWLikzpTU1a9zQ0svWP8uaNJVRSoTUHrpAklGunIPa7 sX5F804+Ci/7UtNO/ijiG9T5OB3yCWK2wwuYW9vZgkLeuvnsnb1RAdvMDBL4DzIc SV4hghGzkkWyIMyWwhbzfyOyNDgeCC4cjoLPDNwvmnhFoNJ4ooXeYO2UwBdnZTz/ KjTYtbeqy+adPR4dZx7RI0EAtHVmXfJ4+VOQyYQBw8FRc7w5VyW25kF4UQKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGBfCFYDj9OjFzHghAxpMxBybUIwHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2GMEB7ONojVX29OcVMB7Jm5/ygIHClhSxX zdjgLyIpCqwwOZyZlQIzpZU5fze5NuWQ0ZpBfWCh+GxwhT9EuVuVlZ+6eDmsd9ze LT3ioo7kJCIxsa8NoSZflvjWsdrpbsi1XfAT7BpCBwxDdeMiG2imUCx6FPqIc6jT CVjO23Iw2/ILiBXnLVBHouaibrU/kw0L7Dhp6G6ejyHAZM7K7DBbXnK4ZWTrRdGv 1zhos+UPc7R+DPrD9uSWKC5FnoWxg+75xjo52liAJfkqUXCELCfeXSQeJYcq0WD5 k+TJKQtOxZPXTGfklt+h5OI5gpyZm+Qv/ssm3jl3T3io8z95UYw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:29:28 2026 by rpki-client