$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: GYef3iZ2ytd7zpRpg7isYjXtPG1Yx1gA9PUaIc/4Mzo= Subject key identifier: C5:CC:13:AF:B2:F6:01:27:E9:8E:35:EF:5D:CD:EE:0D:3D:B1:21:4E Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 4DC575D095D1A58471446C8C2F00D3254CF54DEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: 73 Signing time: Sun 26 Jul 2026 22:20:54 +0000 Manifest this update: Sun 26 Jul 2026 22:15:54 +0000 Manifest next update: Mon 27 Jul 2026 23:44:54 +0000 Files and hashes: 1: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 2: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 4: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: vj+t0474Vd5LESibLqOK9f8xPsJ5aJ8OYOL8zbLdzSY=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c5:75:d0:95:d1:a5:84:71:44:6c:8c:2f:00:d3:25:4c:f5:4d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Jul 26 22:15:54 2026 GMT Not After : Jul 27 23:44:54 2026 GMT Subject: CN=C5CC13AFB2F60127E98E35EF5DCDEE0D3DB1214E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:ca:d4:ff:e9:5c:27:9a:ea:df:13:2b:e8: 39:1b:c2:5d:9c:4c:9d:7b:a9:7d:8e:18:d7:92:7a: 2d:29:93:86:bf:6c:5c:88:88:dd:08:7a:ed:27:a1: 6e:64:08:71:b4:1e:fa:cb:b9:c7:48:64:ca:70:07: 90:f4:cc:d1:93:4a:7d:15:10:2a:65:48:a1:e6:bb: c7:e0:12:28:f7:3f:3b:b2:83:c8:86:bd:2e:49:43: 57:cd:cb:02:f7:a0:52:1f:63:d0:46:6d:a5:f4:9c: c8:16:95:38:2e:79:2b:2a:eb:fe:41:63:22:3a:18: 1c:1c:b8:da:66:aa:92:df:1c:c4:68:72:1d:3b:7c: ba:fd:b2:a5:c4:6e:21:ac:ca:8a:c7:d4:d6:e6:c3: ef:d7:e5:60:73:98:98:b2:ba:e2:e4:c7:c0:55:f4: 6c:1b:31:f0:6f:6c:48:0c:7c:f1:da:fe:fe:a9:bf: 6a:90:e3:2e:d6:8e:f3:fa:ba:d5:d3:45:95:37:ac: 91:02:ca:36:88:d9:64:c9:d2:be:a1:8d:08:9a:c7: e1:de:2f:3e:1b:ab:19:44:14:57:3b:b7:5f:c8:ed: 8f:15:0e:9e:39:47:25:55:7c:7f:0f:1e:3c:4e:73: 1f:ad:11:aa:49:fd:ba:9b:a1:a0:e1:84:f8:b5:31: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CC:13:AF:B2:F6:01:27:E9:8E:35:EF:5D:CD:EE:0D:3D:B1:21:4E X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cb:f2:f1:90:8d:31:7d:56:55:7a:71:bc:67:2d:04:82:79: 21:4c:23:74:36:17:13:47:e1:85:92:8a:8e:1f:84:3b:8d:40: 13:61:01:c6:09:a2:d4:d4:19:e3:ef:81:5c:20:96:3b:10:73: da:7c:bd:aa:50:f1:f2:10:8a:69:33:03:27:0d:22:47:5e:fa: d5:f4:c5:f2:b3:cd:6d:1e:f8:f2:e5:17:10:3e:d5:cd:a6:6d: 92:bb:a2:a6:fd:86:c2:cd:29:b3:df:19:f2:ea:c5:8e:87:e2: dc:34:88:fd:b3:3f:06:d6:c8:12:82:01:a3:8e:ef:a6:94:0e: b2:3d:2f:cf:3d:36:b3:cc:67:b7:42:6d:9c:91:21:b9:82:19: 86:cf:b0:44:05:82:7c:f4:76:0b:03:29:eb:1f:57:ee:6b:3e: 34:27:ac:5c:b4:1b:1e:67:f1:9f:e1:b5:50:e6:43:24:1c:0c: 7a:a0:35:b8:7e:20:60:64:54:8b:1c:92:fa:83:8e:f6:77:ba: d0:79:1d:25:2c:a0:40:90:a3:ee:25:5e:17:5a:1b:51:fe:d8: 44:8a:19:d3:bb:ec:75:89:d1:53:60:bb:92:a8:ca:09:9e:07: 3e:18:78:d8:24:ad:0d:89:9d:6f:47:87:0b:e4:a1:0b:37:e3: b0:fc:72:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcV10JXRpYRxRGyMLwDTJUz1TeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA3MjYyMjE1NTRaFw0yNjA3MjcyMzQ0NTRaMDMxMTAvBgNV BAMTKEM1Q0MxM0FGQjJGNjAxMjdFOThFMzVFRjVEQ0RFRTBEM0RCMTIxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu78rU/+lcJ5rq3xMr6Dkbwl2c TJ17qX2OGNeSei0pk4a/bFyIiN0Ieu0noW5kCHG0HvrLucdIZMpwB5D0zNGTSn0V ECplSKHmu8fgEij3Pzuyg8iGvS5JQ1fNywL3oFIfY9BGbaX0nMgWlTgueSsq6/5B YyI6GBwcuNpmqpLfHMRoch07fLr9sqXEbiGsyorH1Nbmw+/X5WBzmJiyuuLkx8BV 9GwbMfBvbEgMfPHa/v6pv2qQ4y7WjvP6utXTRZU3rJECyjaI2WTJ0r6hjQiax+He Lz4bqxlEFFc7t1/I7Y8VDp45RyVVfH8PHjxOcx+tEapJ/bqboaDhhPi1MWlnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcwTr7L2ASfpjjXvXc3uDT2xIU4wHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXL8vGQjTF9VlV6cbxnLQSCeSFMI3Q2FxNH 4YWSio4fhDuNQBNhAcYJotTUGePvgVwgljsQc9p8vapQ8fIQimkzAycNIkde+tX0 xfKzzW0e+PLlFxA+1c2mbZK7oqb9hsLNKbPfGfLqxY6H4tw0iP2zPwbWyBKCAaOO 76aUDrI9L889NrPMZ7dCbZyRIbmCGYbPsEQFgnz0dgsDKesfV+5rPjQnrFy0Gx5n 8Z/htVDmQyQcDHqgNbh+IGBkVIsckvqDjvZ3utB5HSUsoECQo+4lXhdaG1H+2ESK GdO77HWJ0VNgu5KoygmeBz4YeNgkrQ2JnW9HhwvkoQs347D8cj4= -----END CERTIFICATE-----Generated at Mon Jul 27 14:23:30 2026 by rpki-client