$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: TV6RjY1sACVw0BOlJgbQTwSuGXxdSXxhISOYGwoJCbg= Subject key identifier: 62:92:DE:25:8B:17:B7:86:62:88:06:E8:FD:30:B1:39:6A:6B:D4:DF Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 6566EB1F9AB3A44332B57EF424FB12441832D829 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 22:07:58 +0000 Manifest this update: Thu 24 Sep 2026 22:02:58 +0000 Manifest next update: Sat 26 Sep 2026 00:12:58 +0000 Files and hashes: 1: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: n0etCE483RJtaJBwSYoI8Q5xH7tLHKZsDIWHuctvqAE=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 3: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) 4: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 5: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:66:eb:1f:9a:b3:a4:43:32:b5:7e:f4:24:fb:12:44:18:32:d8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Sep 24 22:02:58 2026 GMT Not After : Sep 26 00:12:58 2026 GMT Subject: CN=6292DE258B17B786628806E8FD30B1396A6BD4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:20:36:0f:26:2e:d2:39:06:12:ec:4a:1b: bf:83:06:2f:60:fb:a6:f0:ad:e9:3f:bf:4a:2e:e1: 19:b1:5f:29:d8:57:f6:e1:3e:fe:db:a7:93:a5:a0: 3b:d8:da:f0:d0:85:e1:a0:34:65:4d:a0:ea:a8:f3: b4:1d:c8:f3:a0:9f:09:86:49:80:4e:8d:3a:82:11: 94:5e:f4:79:0f:59:9c:4c:3a:e7:3c:73:9a:36:9e: d2:f6:52:c0:a8:29:91:9b:12:f6:fa:64:55:5b:32: 51:10:06:34:01:84:b1:26:c2:d1:8e:1b:7b:a7:04: c6:b3:b4:fb:8a:54:0c:2f:a7:88:13:e0:93:96:cf: 88:6e:35:92:3e:92:81:65:48:c8:c8:e8:bb:88:fc: 23:3c:93:09:af:bb:fc:dd:77:7b:ab:1f:c8:70:fe: c0:a3:cf:8e:3e:0d:56:7c:98:76:40:ec:bb:ec:c2: f9:4b:71:08:9f:d6:8f:1b:e7:d8:3f:ae:92:e8:c3: 8f:6b:6d:e6:51:cd:d0:c2:fc:a3:59:38:6c:73:bf: df:a0:e9:b8:36:a7:8c:e5:d0:e9:56:23:64:62:e9: bd:c3:fd:89:ed:ff:0f:36:cd:b0:29:28:b6:0e:29: b1:09:90:e4:77:f1:ea:cf:47:21:3e:8e:d9:bc:2f: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:92:DE:25:8B:17:B7:86:62:88:06:E8:FD:30:B1:39:6A:6B:D4:DF X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:29:37:86:13:45:c1:be:8f:5b:1e:26:b2:47:06:ce:ef:c1: 4a:7b:cf:8e:e9:89:34:c6:64:89:28:5f:0b:e6:7f:8c:46:29: 39:3a:72:f8:b9:b8:1a:6c:f9:4f:a1:ab:0d:ac:76:b5:15:3a: db:16:36:3f:fc:a2:41:a4:ff:34:76:03:d3:5b:50:d2:2f:68: 40:4f:d9:9d:2f:92:0f:9d:3a:8e:de:a4:0f:73:7c:7d:36:78: 3a:45:7c:2e:aa:d6:fe:85:fa:f9:0f:e6:d5:db:f4:ae:0d:32: 6c:e1:cd:9f:34:9d:ad:36:b4:40:1e:0d:da:1a:2c:3a:ab:11: d2:83:39:6c:a8:a2:be:c1:63:38:d7:d2:f9:29:b0:25:c8:ad: 0c:ef:87:09:05:68:ea:6c:60:89:a0:3c:bd:1c:c4:fa:a0:80: 4d:22:4f:6d:a4:38:04:cd:8e:b1:5e:f7:0b:27:b7:ce:66:55: 73:bd:8d:5a:87:64:80:be:56:d1:04:90:ba:96:e1:84:c3:d5: 68:8d:a1:ad:d6:0c:e4:9d:29:0c:fa:02:0e:70:c2:33:39:7b: 9c:8b:28:6e:21:26:09:ea:fa:41:bb:6c:ba:98:2f:86:1b:db: 1d:14:07:c8:fb:77:32:51:29:7a:68:c8:2a:fc:4a:60:2c:a2: e6:16:7a:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWbrH5qzpEMytX70JPsSRBgy2CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA5MjQyMjAyNThaFw0yNjA5MjYwMDEyNThaMDMxMTAvBgNV BAMTKDYyOTJERTI1OEIxN0I3ODY2Mjg4MDZFOEZEMzBCMTM5NkE2QkQ0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nSA2DyYu0jkGEuxKG7+DBi9g +6bwrek/v0ou4RmxXynYV/bhPv7bp5OloDvY2vDQheGgNGVNoOqo87QdyPOgnwmG SYBOjTqCEZRe9HkPWZxMOuc8c5o2ntL2UsCoKZGbEvb6ZFVbMlEQBjQBhLEmwtGO G3unBMaztPuKVAwvp4gT4JOWz4huNZI+koFlSMjI6LuI/CM8kwmvu/zdd3urH8hw /sCjz44+DVZ8mHZA7LvswvlLcQif1o8b59g/rpLow49rbeZRzdDC/KNZOGxzv9+g 6bg2p4zl0OlWI2Ri6b3D/Ynt/w82zbApKLYOKbEJkOR38erPRyE+jtm8L1sxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYpLeJYsXt4ZiiAbo/TCxOWpr1N8wHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4pN4YTRcG+j1seJrJHBs7vwUp7z47piTTG ZIkoXwvmf4xGKTk6cvi5uBps+U+hqw2sdrUVOtsWNj/8okGk/zR2A9NbUNIvaEBP 2Z0vkg+dOo7epA9zfH02eDpFfC6q1v6F+vkP5tXb9K4NMmzhzZ80na02tEAeDdoa LDqrEdKDOWyoor7BYzjX0vkpsCXIrQzvhwkFaOpsYImgPL0cxPqggE0iT22kOATN jrFe9wsnt85mVXO9jVqHZIC+VtEEkLqW4YTD1WiNoa3WDOSdKQz6Ag5wwjM5e5yL KG4hJgnq+kG7bLqYL4Yb2x0UB8j7dzJRKXpoyCr8SmAsouYWeq8= -----END CERTIFICATE-----Generated at Fri Sep 25 05:19:15 2026 by rpki-client