$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: paqASv2stFakn7bXUGt5OfsG86gjGAvcJDIpu8VIZNY= Subject key identifier: DE:1D:14:ED:BA:A5:30:50:99:33:3E:99:FC:52:80:61:22:73:8B:D2 Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 52E0DDA67A8618F9CD590A5FB96930B4058243C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: 37 Signing time: Thu 11 Jun 2026 23:40:14 +0000 Manifest this update: Thu 11 Jun 2026 23:35:14 +0000 Manifest next update: Fri 12 Jun 2026 23:40:14 +0000 Files and hashes: 1: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 2: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 4: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: QZhdOTZvrkL2iAFeJzFRQps0qGXBeYFEanYJ6ooZv+M=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e0:dd:a6:7a:86:18:f9:cd:59:0a:5f:b9:69:30:b4:05:82:43:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Jun 11 23:35:14 2026 GMT Not After : Jun 12 23:40:14 2026 GMT Subject: CN=DE1D14EDBAA5305099333E99FC52806122738BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:19:b9:29:f4:0a:0e:7c:de:b8:9b:9c:ed:ea: 80:36:88:77:3c:80:8d:e2:49:c1:8b:1b:e6:f0:4f: 0b:c3:d0:51:c4:52:48:3d:01:ad:40:84:45:84:29: 55:23:5d:f3:ae:dd:35:46:a3:44:45:34:84:d9:06: 1a:3a:78:8e:a0:2e:c3:73:a3:8e:ea:6d:04:c7:35: 23:b7:72:c0:ca:e5:e8:17:c9:4a:16:0b:68:46:12: 74:15:59:53:cd:88:cf:48:2a:b0:e7:e7:52:db:93: 61:62:3d:90:b0:0c:fb:b5:7e:b1:38:28:80:23:6c: 72:34:96:14:a0:c5:56:d3:9b:92:f7:19:50:a3:3e: 03:34:3c:38:ef:93:1d:a9:8e:fa:d9:af:1d:49:ee: 4d:ce:69:49:eb:cb:76:be:9a:16:8b:1d:8f:f3:b6: 89:49:52:78:48:a7:5e:95:72:0d:bf:23:79:61:e3: 5a:0f:b6:66:12:b8:6b:32:4d:4f:83:8a:42:b0:51: 72:d3:07:88:65:d1:39:96:ba:57:d3:78:d1:d2:0d: 71:57:b6:7b:2f:7d:0b:6b:7c:93:38:a0:1d:7a:d6: 8f:6b:35:a5:94:5e:73:a4:3d:77:70:ab:a5:1c:54: fd:cd:e5:16:80:dc:bb:4e:36:2e:b2:18:2f:12:8d: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:14:ED:BA:A5:30:50:99:33:3E:99:FC:52:80:61:22:73:8B:D2 X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4a:78:0e:c8:6c:6e:11:0a:76:21:8d:5b:19:1e:09:16:15: 22:15:c4:48:34:19:1b:f3:6f:46:91:51:4c:c9:e3:0b:f4:6a: cf:8b:b1:75:8c:93:56:01:a5:92:e7:cb:08:93:01:ff:35:76: 71:54:7e:41:03:ec:6b:3c:9f:ba:dd:a1:a7:c6:b5:e1:ab:1d: 88:1c:d7:56:dc:fd:9e:43:3f:b7:6a:91:e7:40:06:87:e8:d9: 05:e6:4e:e1:15:45:8c:28:2b:b1:05:e4:94:47:a4:b8:bf:f7: c6:08:1c:f9:c8:65:44:09:c6:b6:04:ba:e0:72:15:89:58:16: bf:04:52:fb:aa:64:56:07:18:ac:81:0a:39:35:7e:8f:28:82: af:21:ad:75:a3:9f:ba:73:af:38:6d:75:29:fe:f8:0c:14:b4: b2:86:49:61:18:66:84:ac:65:06:45:5d:68:b6:ed:6e:04:b6: 7b:7f:24:d1:78:bf:e9:bd:73:b0:5a:86:38:02:24:14:55:18: a7:e3:bb:72:46:01:c5:96:65:6b:b2:cc:d9:5f:a1:39:84:b2: fc:a9:2e:4f:3f:29:8e:97:87:a1:fc:de:fc:14:90:da:65:f0: e7:a7:5e:c8:5a:e0:57:c3:4e:88:54:36:a0:4e:b4:b0:85:88: f8:ec:e3:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUuDdpnqGGPnNWQpfuWkwtAWCQ8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjA2MTEyMzM1MTRaFw0yNjA2MTIyMzQwMTRaMDMxMTAvBgNV BAMTKERFMUQxNEVEQkFBNTMwNTA5OTMzM0U5OUZDNTI4MDYxMjI3MzhCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Gbkp9AoOfN64m5zt6oA2iHc8 gI3iScGLG+bwTwvD0FHEUkg9Aa1AhEWEKVUjXfOu3TVGo0RFNITZBho6eI6gLsNz o47qbQTHNSO3csDK5egXyUoWC2hGEnQVWVPNiM9IKrDn51Lbk2FiPZCwDPu1frE4 KIAjbHI0lhSgxVbTm5L3GVCjPgM0PDjvkx2pjvrZrx1J7k3OaUnry3a+mhaLHY/z tolJUnhIp16Vcg2/I3lh41oPtmYSuGsyTU+DikKwUXLTB4hl0TmWulfTeNHSDXFX tnsvfQtrfJM4oB161o9rNaWUXnOkPXdwq6UcVP3N5RaA3LtONi6yGC8SjWyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3h0U7bqlMFCZMz6Z/FKAYSJzi9IwHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9KeA7IbG4RCnYhjVsZHgkWFSIVxEg0GRvz b0aRUUzJ4wv0as+LsXWMk1YBpZLnywiTAf81dnFUfkED7Gs8n7rdoafGteGrHYgc 11bc/Z5DP7dqkedABofo2QXmTuEVRYwoK7EF5JRHpLi/98YIHPnIZUQJxrYEuuBy FYlYFr8EUvuqZFYHGKyBCjk1fo8ogq8hrXWjn7pzrzhtdSn++AwUtLKGSWEYZoSs ZQZFXWi27W4Etnt/JNF4v+m9c7BahjgCJBRVGKfju3JGAcWWZWuyzNlfoTmEsvyp Lk8/KY6Xh6H83vwUkNpl8OenXsha4FfDTohUNqBOtLCFiPjs4x0= -----END CERTIFICATE-----Generated at Fri Jun 12 06:04:41 2026 by rpki-client