$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft File: 855FB1394E274E698967BBB475F8817B92100FB4.mft (raw, json) Hash identifier: KRsyoE/+iuA8eY56KT3FDlsU0n2MYdcm9/HkXp8NvQo= Subject key identifier: 1C:91:F9:1D:64:4C:DB:DE:56:14:3B:45:30:AC:E4:D4:0B:2A:F5:89 Authority key identifier: 85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 Certificate issuer: /CN=855FB1394E274E698967BBB475F8817B92100FB4 Certificate serial: 4535278128ECA414C3DC1316ACEEADC504B708B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft Manifest number: ED Signing time: Mon 26 Oct 2026 09:49:11 +0000 Manifest this update: Mon 26 Oct 2026 09:44:11 +0000 Manifest next update: Tue 27 Oct 2026 11:17:11 +0000 Files and hashes: 1: 855FB1394E274E698967BBB475F8817B92100FB4.crl (hash: YTVj2a7dTET9NR4SsKEEt5TouuW7Y6LPbDCBmFLK67U=) 2: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: d+PtVYGvPdA7ms90PhjodPc3miQGDo2+ukHL0BfgKLE=) 3: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: HQCm3qwAScR/igpqWrG5cwARCu90Hji8rsjqlIgAeaM=) 4: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: KpKv9TSmOPjIVOCKaqlmxpQdih6hnZfQUxUapAqUQIw=) 5: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: U5jPUQcFUSF8Cs6G3z+HWq8nVnMWiXaM/O6dl9Aru1k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 11:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:35:27:81:28:ec:a4:14:c3:dc:13:16:ac:ee:ad:c5:04:b7:08:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855FB1394E274E698967BBB475F8817B92100FB4 Validity Not Before: Oct 26 09:44:11 2026 GMT Not After : Oct 27 11:17:11 2026 GMT Subject: CN=1C91F91D644CDBDE56143B4530ACE4D40B2AF589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:14:31:c2:8f:f3:e8:6c:4b:92:54:8c:40: 4f:70:68:7d:25:9c:f0:47:24:13:23:c4:c5:db:ef: 03:bf:72:18:f9:f4:bd:fd:71:29:9b:3b:17:36:df: 2d:24:af:e5:39:f2:1b:25:67:24:22:ef:8d:20:f5: 59:c3:6f:57:0f:37:44:90:ca:7e:33:63:64:15:3c: 3b:1e:ec:39:05:56:97:19:d9:5b:e2:b5:1c:5c:f7: 10:3e:ae:b2:65:87:e0:32:56:23:56:4d:8f:27:5d: c4:2f:0d:b5:44:8b:45:3d:87:9a:6a:9d:9a:1c:67: 75:31:45:7e:09:47:4e:5c:52:63:50:e0:fc:51:d4: 78:b5:47:d8:4a:fd:a4:21:31:72:8b:fc:8a:79:92: 6a:ad:85:ba:d3:40:00:0a:90:d5:bd:2c:63:53:a4: ef:27:e2:ad:b0:04:fe:7b:22:1f:81:bd:73:33:c5: ad:c2:da:59:ab:62:d5:dd:a6:45:1d:0f:dd:55:52: 7a:13:f5:0c:5a:c3:8c:6e:21:cd:73:cb:8e:a6:c6: 2c:7d:fe:6f:fa:cb:db:19:1a:8f:5e:55:88:14:8e: 06:80:21:34:f2:34:fb:ca:0d:d1:da:27:b4:2d:65: d4:7a:63:83:79:79:3a:4e:a6:14:4e:72:d9:76:5d: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:91:F9:1D:64:4C:DB:DE:56:14:3B:45:30:AC:E4:D4:0B:2A:F5:89 X509v3 Authority Key Identifier: keyid:85:5F:B1:39:4E:27:4E:69:89:67:BB:B4:75:F8:81:7B:92:10:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/855FB1394E274E698967BBB475F8817B92100FB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/855FB1394E274E698967BBB475F8817B92100FB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c4:f8:a4:a9:2d:1d:07:eb:e7:e6:d9:3b:61:b5:c8:3e:74: 24:98:38:98:9a:7a:37:3e:1e:ef:b4:01:b6:af:4b:3c:b2:83: fa:b4:43:9a:d4:a9:64:a3:ab:d0:3e:4a:ab:59:9d:f8:14:7b: 5d:94:f5:53:5a:22:30:fa:6d:20:91:67:74:a9:19:9f:1f:8a: 81:02:4e:17:c0:3d:2b:aa:61:34:74:89:92:ce:b4:d2:e2:db: b7:50:4d:f5:11:e7:72:60:c0:cc:0e:6b:23:a5:41:7d:19:1b: 3a:90:ed:ac:f2:9c:f3:bb:1c:e0:92:15:80:be:82:fa:26:d8: 5d:49:cb:f4:05:34:45:97:79:18:5d:c2:be:66:ba:21:64:13: e7:67:03:6f:a8:39:de:85:94:a2:4f:ee:45:eb:0c:2b:79:a4: c0:21:98:b7:45:e0:d9:7e:5b:e9:f9:c3:0f:72:58:10:0b:26: e9:fd:32:b2:b1:2a:22:d2:28:4f:1f:cd:d9:49:47:55:bf:c1: 77:59:46:d9:d8:5d:61:24:46:c9:8c:91:e6:45:4e:05:17:d4: f4:6a:7e:3f:d9:40:5a:ae:89:13:4b:7e:ca:c1:4d:7f:98:91: ef:c3:14:01:43:c8:0d:de:15:60:41:16:ef:fc:8e:3d:2c:fe: 5d:6b:65:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTUngSjspBTD3BMWrO6txQS3CLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5 MjEwMEZCNDAeFw0yNjEwMjYwOTQ0MTFaFw0yNjEwMjcxMTE3MTFaMDMxMTAvBgNV BAMTKDFDOTFGOTFENjQ0Q0RCREU1NjE0M0I0NTMwQUNFNEQ0MEIyQUY1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWxQxwo/z6GxLklSMQE9waH0l nPBHJBMjxMXb7wO/chj59L39cSmbOxc23y0kr+U58hslZyQi740g9VnDb1cPN0SQ yn4zY2QVPDse7DkFVpcZ2VvitRxc9xA+rrJlh+AyViNWTY8nXcQvDbVEi0U9h5pq nZocZ3UxRX4JR05cUmNQ4PxR1Hi1R9hK/aQhMXKL/Ip5kmqthbrTQAAKkNW9LGNT pO8n4q2wBP57Ih+BvXMzxa3C2lmrYtXdpkUdD91VUnoT9Qxaw4xuIc1zy46mxix9 /m/6y9sZGo9eVYgUjgaAITTyNPvKDdHaJ7QtZdR6Y4N5eTpOphROctl2Xe2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHJH5HWRM295WFDtFMKzk1Asq9YkwHwYDVR0j BBgwFoAUhV+xOU4nTmmJZ7u0dfiBe5IQD7QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUxMjljOTQtYzVhNi00ZGQ0LWIzNGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0 RTI3NEU2OTg5NjdCQkI0NzVGODgxN0I5MjEwMEZCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTVGQjEzOTRFMjc0RTY5ODk2N0JCQjQ3NUY4ODE3QjkyMTAw RkI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvODU1RkIxMzk0RTI3NEU2OTg5NjdCQkI0NzVGODgx N0I5MjEwMEZCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrE+KSpLR0H6+fm2Tthtcg+dCSYOJiaejc+ Hu+0AbavSzyyg/q0Q5rUqWSjq9A+SqtZnfgUe12U9VNaIjD6bSCRZ3SpGZ8fioEC ThfAPSuqYTR0iZLOtNLi27dQTfUR53JgwMwOayOlQX0ZGzqQ7azynPO7HOCSFYC+ gvom2F1Jy/QFNEWXeRhdwr5muiFkE+dnA2+oOd6FlKJP7kXrDCt5pMAhmLdF4Nl+ W+n5ww9yWBALJun9MrKxKiLSKE8fzdlJR1W/wXdZRtnYXWEkRsmMkeZFTgUX1PRq fj/ZQFquiRNLfsrBTX+Yke/DFAFDyA3eFWBBFu/8jj0s/l1rZdM= -----END CERTIFICATE-----Generated at Tue Oct 27 04:46:59 2026 by rpki-client