$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: q/x8QKyzf+FwyekIFn/1dgRXOYycHcJVZHGno0VloIE= Subject key identifier: 4A:98:F6:3B:7D:93:5D:3C:57:7B:F4:5B:D4:62:AE:1F:EE:B7:F3:FB Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 5AF8B7272E64AEB0E711AB86265E97E20EC04142 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: B0 Signing time: Fri 11 Sep 2026 01:22:38 +0000 Manifest this update: Fri 11 Sep 2026 01:17:38 +0000 Manifest next update: Sat 12 Sep 2026 03:15:38 +0000 Files and hashes: 1: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: K02LYW5vZlDT08WTmBuIVtkzm62BBIiqaeSCN7KKfv8=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 4: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f8:b7:27:2e:64:ae:b0:e7:11:ab:86:26:5e:97:e2:0e:c0:41:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Sep 11 01:17:38 2026 GMT Not After : Sep 12 03:15:38 2026 GMT Subject: CN=4A98F63B7D935D3C577BF45BD462AE1FEEB7F3FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:59:a4:db:a1:52:38:fc:69:23:d7:77:a0: 6c:41:96:f0:5f:fd:15:c8:9f:fc:d9:bb:f9:13:f7: d5:cf:01:17:aa:94:48:ad:c9:f5:05:03:ba:0d:ad: 0c:15:5e:2e:e3:cc:06:32:d9:ca:6d:ac:46:09:1f: 48:d5:a4:be:31:e1:88:da:80:7f:59:db:7a:7e:83: 25:f2:96:fc:81:3b:3b:f8:7d:26:1e:e8:6e:fb:c8: fc:f1:0c:f6:4c:d3:f9:4b:45:37:c6:ac:96:c2:46: 40:8b:cb:63:c0:b5:cf:b7:91:6b:34:00:9f:da:e5: 9a:36:f0:df:49:f6:40:77:9c:d8:57:d9:a9:3d:49: 76:58:c8:db:10:9e:11:8b:2c:f9:81:01:7f:16:b6: 3d:3a:56:7d:6c:6f:96:09:f3:ea:dc:46:d2:89:96: f7:8a:a0:a4:03:50:88:86:72:f9:e7:7a:cb:eb:3a: 3e:1c:bd:8d:b3:60:df:d5:ec:36:39:04:29:45:6d: 82:d5:fa:c5:17:a7:3d:e6:c5:1d:4a:59:7a:39:48: 0f:77:d8:40:57:0b:84:f1:60:5b:ba:86:cf:1a:d6: c3:1c:4c:22:70:6a:13:eb:26:4a:fc:b1:5b:74:8e: 89:e8:ce:e3:aa:0d:f9:02:a2:5a:13:7a:a5:cd:94: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:98:F6:3B:7D:93:5D:3C:57:7B:F4:5B:D4:62:AE:1F:EE:B7:F3:FB X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:26:37:1f:6d:f7:48:93:1f:ba:c1:af:42:d5:46:57:fd:c9: 9f:12:88:2e:7a:25:8f:b5:02:65:35:8f:60:09:48:0f:06:18: 53:23:05:d2:0d:5d:0e:85:ec:e4:4c:18:f7:c4:c2:ff:e1:3e: 2d:ab:5f:d6:27:78:e3:37:9e:9e:d4:02:37:3e:cb:cd:47:ee: 97:01:28:70:d3:2f:73:bb:a0:bb:9f:58:6c:51:8f:97:57:f4: 46:62:94:b5:26:b1:7d:d7:4c:d3:ab:08:6d:ea:41:9c:af:ee: 4d:46:7f:fb:4e:db:29:89:81:c5:47:32:03:c3:c6:ec:ce:1a: ee:99:fc:d3:bf:98:6e:79:0d:5a:3c:f7:50:dc:8f:50:ad:f5: 10:cf:a2:41:48:9e:38:fe:4f:78:cd:08:45:f8:f8:97:5a:69: 5d:16:6e:0c:3d:ca:de:77:19:43:ea:c5:fe:0a:51:54:ee:d4: 00:09:ec:c2:ea:5c:3f:1d:da:f4:06:01:c7:98:30:b8:a4:55: ef:3a:6d:a3:47:23:85:af:e2:6f:aa:45:5e:83:15:f0:90:82: fa:47:fc:e9:d3:ac:d4:00:d4:55:71:b2:cb:34:3c:9d:5d:23: 9d:9c:b0:21:fd:0a:7b:a8:ee:c9:53:ab:61:ed:f3:8f:0a:fd: b1:68:43:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvi3Jy5krrDnEauGJl6X4g7AQUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA5MTEwMTE3MzhaFw0yNjA5MTIwMzE1MzhaMDMxMTAvBgNV BAMTKDRBOThGNjNCN0Q5MzVEM0M1NzdCRjQ1QkQ0NjJBRTFGRUVCN0YzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkVmk26FSOPxpI9d3oGxBlvBf /RXIn/zZu/kT99XPAReqlEityfUFA7oNrQwVXi7jzAYy2cptrEYJH0jVpL4x4Yja gH9Z23p+gyXylvyBOzv4fSYe6G77yPzxDPZM0/lLRTfGrJbCRkCLy2PAtc+3kWs0 AJ/a5Zo28N9J9kB3nNhX2ak9SXZYyNsQnhGLLPmBAX8Wtj06Vn1sb5YJ8+rcRtKJ lveKoKQDUIiGcvnnesvrOj4cvY2zYN/V7DY5BClFbYLV+sUXpz3mxR1KWXo5SA93 2EBXC4TxYFu6hs8a1sMcTCJwahPrJkr8sVt0jonozuOqDfkColoTeqXNlEfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSpj2O32TXTxXe/Rb1GKuH+638/swHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEmNx9t90iTH7rBr0LVRlf9yZ8SiC56JY+1 AmU1j2AJSA8GGFMjBdINXQ6F7ORMGPfEwv/hPi2rX9YneOM3np7UAjc+y81H7pcB KHDTL3O7oLufWGxRj5dX9EZilLUmsX3XTNOrCG3qQZyv7k1Gf/tO2ymJgcVHMgPD xuzOGu6Z/NO/mG55DVo891Dcj1Ct9RDPokFInjj+T3jNCEX4+JdaaV0Wbgw9yt53 GUPqxf4KUVTu1AAJ7MLqXD8d2vQGAceYMLikVe86baNHI4Wv4m+qRV6DFfCQgvpH /OnTrNQA1FVxsss0PJ1dI52csCH9Cnuo7slTq2Ht848K/bFoQ9o= -----END CERTIFICATE-----Generated at Fri Sep 11 02:51:31 2026 by rpki-client