$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: uCGfjb5Sh2K9MnwT9VhBkg/yNoODRyFZG9+nmK1wP6c= Subject key identifier: D8:BA:1C:21:8A:2C:CF:F5:D5:82:5D:DD:8D:FB:99:C6:82:3B:4C:1A Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 32CB864C0C43F37E2BA71A14772D057126B8F26F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: FD Signing time: Wed 04 Nov 2026 15:53:17 +0000 Manifest this update: Wed 04 Nov 2026 15:48:17 +0000 Manifest next update: Thu 05 Nov 2026 18:00:17 +0000 Files and hashes: 1: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: +gRZeqAwTz/NLxXeRfQ7WdCuZI+8GGrI55RkCJBCIgg=) 2: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cb:86:4c:0c:43:f3:7e:2b:a7:1a:14:77:2d:05:71:26:b8:f2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Nov 4 15:48:17 2026 GMT Not After : Nov 5 18:00:17 2026 GMT Subject: CN=D8BA1C218A2CCFF5D5825DDD8DFB99C6823B4C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:41:50:e1:13:15:4c:8f:89:20:f9:8e:f0: 7b:1a:41:66:a5:35:a2:76:8c:a7:97:5b:51:52:e4: 2f:0a:91:90:b4:9a:4c:4a:18:95:94:b2:8b:fc:c8: 42:b9:b4:70:e2:73:8e:f5:a8:c4:32:03:24:90:4f: 22:02:4b:d0:5f:1b:86:06:1f:ec:04:a9:68:63:08: 64:80:24:49:c6:5a:c1:2d:d4:ca:a1:44:7d:04:2c: 34:67:86:04:5e:29:c8:fb:bf:e7:38:e7:33:50:61: 07:7c:15:12:3b:db:39:bb:d3:cb:d6:80:a6:c1:11: 11:56:43:e1:0a:27:b5:8a:09:59:58:94:2a:c0:49: bb:7e:2b:bc:ae:e7:83:67:2a:50:1b:92:f2:dc:40: 22:ea:3f:d7:d8:f6:5c:c7:2d:30:e7:56:f7:9f:a9: 00:73:2d:b4:e7:89:86:fb:e4:cb:2c:8d:a8:a0:c1: 50:d9:da:16:32:84:23:86:c6:cf:08:4f:88:79:bc: 11:76:93:66:8f:6e:6c:46:a8:3a:ba:65:e8:1e:55: e0:a6:b3:8c:95:28:fd:d2:a3:f2:6c:e0:4c:56:9a: 20:4f:d5:97:d4:25:e1:f3:d4:8a:40:e8:79:86:fa: b8:5b:a5:c8:18:1f:05:ea:90:77:8f:40:bf:c5:fb: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BA:1C:21:8A:2C:CF:F5:D5:82:5D:DD:8D:FB:99:C6:82:3B:4C:1A X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:75:cd:bc:f2:88:f9:ea:91:c0:62:b5:0e:bb:d9:33:bf:6f: 72:b0:d0:95:47:15:3f:d6:bb:9c:68:99:1c:11:11:6e:ee:0d: 77:2f:86:a7:60:6f:01:4f:34:1a:d6:d0:5a:e8:ee:59:c7:37: 4a:af:0f:99:25:41:68:3b:44:a7:10:ce:04:11:1c:7d:d0:27: 26:63:98:ef:ec:f5:33:34:2f:53:b0:f0:a5:29:6a:52:a9:af: 7c:46:de:89:82:ac:20:2f:4c:d1:6b:2c:79:e6:da:86:c2:25: 9c:a6:af:e4:8e:20:86:e6:4f:84:05:21:bb:3c:30:a2:7a:f2: 3c:6f:49:3d:12:af:66:88:40:9c:06:c2:6d:db:4c:29:b3:17: df:f7:af:b6:50:53:aa:73:58:8d:09:b4:c5:b4:4f:1e:65:ae: df:b4:1f:b6:36:3f:f8:e1:0f:75:47:de:ed:df:4b:65:10:45: 85:c2:ad:7b:b8:b1:14:f8:ee:51:48:48:df:32:52:b3:4b:40: 5b:68:2d:50:b6:f7:17:d3:bb:fb:a7:ac:fd:8b:7e:6c:53:80: 6d:9d:8d:54:04:33:c4:29:09:e4:e9:9f:24:7f:33:08:10:c9: 78:82:18:8d:a0:54:01:85:5d:98:92:b3:8a:b5:08:d5:aa:1a: 71:eb:96:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsuGTAxD834rpxoUdy0FcSa48m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjExMDQxNTQ4MTdaFw0yNjExMDUxODAwMTdaMDMxMTAvBgNV BAMTKEQ4QkExQzIxOEEyQ0NGRjVENTgyNURERDhERkI5OUM2ODIzQjRDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHUFQ4RMVTI+JIPmO8HsaQWal NaJ2jKeXW1FS5C8KkZC0mkxKGJWUsov8yEK5tHDic471qMQyAySQTyICS9BfG4YG H+wEqWhjCGSAJEnGWsEt1MqhRH0ELDRnhgReKcj7v+c45zNQYQd8FRI72zm708vW gKbBERFWQ+EKJ7WKCVlYlCrASbt+K7yu54NnKlAbkvLcQCLqP9fY9lzHLTDnVvef qQBzLbTniYb75MssjaigwVDZ2hYyhCOGxs8IT4h5vBF2k2aPbmxGqDq6ZegeVeCm s4yVKP3So/Js4ExWmiBP1ZfUJeHz1IpA6HmG+rhbpcgYHwXqkHePQL/F+1lFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LocIYosz/XVgl3djfuZxoI7TBowHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN1zbzyiPnqkcBitQ672TO/b3Kw0JVHFT/W u5xomRwREW7uDXcvhqdgbwFPNBrW0Fro7lnHN0qvD5klQWg7RKcQzgQRHH3QJyZj mO/s9TM0L1Ow8KUpalKpr3xG3omCrCAvTNFrLHnm2obCJZymr+SOIIbmT4QFIbs8 MKJ68jxvST0Sr2aIQJwGwm3bTCmzF9/3r7ZQU6pzWI0JtMW0Tx5lrt+0H7Y2P/jh D3VH3u3fS2UQRYXCrXu4sRT47lFISN8yUrNLQFtoLVC29xfTu/unrP2LfmxTgG2d jVQEM8QpCeTpnyR/MwgQyXiCGI2gVAGFXZiSs4q1CNWqGnHrlm0= -----END CERTIFICATE-----Generated at Thu Nov 5 09:38:28 2026 by rpki-client