$ rpki-client -vvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: 6f0ws2BTO4OJqmZmK9in4ODKtQgMiw0wwhrP0ZCZCIg= Subject key identifier: EF:9E:25:EC:FD:41:3F:B9:BE:58:09:69:6E:E5:83:F9:86:2F:B3:4A Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 22051C67A616DA88E4F7333DCFC3658AE631714D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: 16 Signing time: Sat 16 May 2026 15:33:53 +0000 Manifest this update: Sat 16 May 2026 15:28:53 +0000 Manifest next update: Sun 17 May 2026 16:36:53 +0000 Files and hashes: 1: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) 2: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: lXVm8au+1di8orTcDowRrNGnhdBpIXBnuLpVB86FNdE=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:05:1c:67:a6:16:da:88:e4:f7:33:3d:cf:c3:65:8a:e6:31:71:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: May 16 15:28:53 2026 GMT Not After : May 17 16:36:53 2026 GMT Subject: CN=EF9E25ECFD413FB9BE5809696EE583F9862FB34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:20:35:9d:3b:4d:22:bc:d9:57:29:9c:49: 21:3b:df:ae:29:ae:a2:66:93:82:20:6b:85:f6:20: 3d:9a:d3:44:62:ba:9d:14:5c:f7:3e:64:b4:69:46: 7f:f4:9b:07:b5:a7:7b:d6:26:1c:43:21:2f:d6:71: 8f:f5:34:35:14:bb:38:7f:e5:6b:c3:48:e7:98:81: 9e:dd:1b:b7:e4:19:11:84:2d:2f:70:7c:9c:1e:1d: 66:fa:af:00:05:9a:25:e5:e4:f4:f9:a5:39:3f:c9: 53:52:e2:73:c8:29:23:a0:6e:60:6d:e4:18:0b:6e: 7e:6d:de:58:15:b1:1f:90:48:82:f0:59:6c:03:7d: 72:76:fd:88:bc:f1:67:5a:89:c6:fe:31:24:3e:db: d7:0b:f5:b4:b1:39:22:86:6a:f6:48:cb:b2:19:13: d4:cd:7a:94:3d:51:1c:46:c1:2f:a6:a8:71:6c:97: 78:4e:ad:83:61:25:4b:62:76:03:d8:de:16:db:a1: 4b:1e:75:fe:c2:55:d0:1d:5d:97:7e:08:dc:7b:e4: a3:f9:a2:e4:1d:2a:9d:c4:0c:23:2a:87:c5:bf:ee: 31:b9:ac:68:db:79:2e:06:5f:0e:38:d5:68:af:57: 7f:05:95:1e:4a:fc:8b:98:6b:1c:81:59:fb:90:0d: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9E:25:EC:FD:41:3F:B9:BE:58:09:69:6E:E5:83:F9:86:2F:B3:4A X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:12:d7:98:60:8b:c6:0d:54:e9:93:c1:2c:74:7b:0b:aa:32: 6b:0d:5c:b2:26:69:92:07:d8:8e:08:98:d9:f7:76:7d:cc:a8: 0f:67:7f:1f:7d:13:23:15:bc:2a:40:9c:53:68:1c:f9:bd:23: 55:fd:e5:bd:1e:91:a2:3b:8f:3f:58:0c:a4:5d:ac:11:9b:0c: 82:d8:82:e5:07:d4:95:ed:d6:92:4c:29:f2:c0:4f:3e:83:86: 7c:47:d5:97:d9:37:9a:ac:f3:d6:08:4c:58:d1:05:d6:0c:e4: 14:9c:a7:4f:69:4e:4e:22:5c:eb:42:42:67:2e:28:51:87:05: 87:67:cd:aa:ea:a9:f8:e7:30:f5:c2:06:bd:05:d2:6f:5f:e2: e8:de:85:53:4a:58:31:8b:a7:54:ad:3e:42:21:f7:fa:68:70: 96:4c:63:a9:e5:90:16:e6:bb:30:3d:eb:dd:12:32:20:33:0b: 5c:c6:bb:68:d8:34:9b:ee:82:ce:b5:cd:83:72:a6:52:da:12: 15:3a:55:e1:a4:14:ee:0a:9d:8e:7c:cd:70:55:fa:50:44:24: c9:66:7a:04:23:be:bf:cd:65:90:58:ab:fe:91:0e:55:34:1a: 7e:cd:e1:99:ab:1d:6c:64:9b:a2:79:14:f7:eb:6f:24:cb:da: a9:7c:ef:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgUcZ6YW2ojk9zM9z8NliuYxcU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA1MTYxNTI4NTNaFw0yNjA1MTcxNjM2NTNaMDMxMTAvBgNV BAMTKEVGOUUyNUVDRkQ0MTNGQjlCRTU4MDk2OTZFRTU4M0Y5ODYyRkIzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJCA1nTtNIrzZVymcSSE7364p rqJmk4Iga4X2ID2a00Riup0UXPc+ZLRpRn/0mwe1p3vWJhxDIS/WcY/1NDUUuzh/ 5WvDSOeYgZ7dG7fkGRGELS9wfJweHWb6rwAFmiXl5PT5pTk/yVNS4nPIKSOgbmBt 5BgLbn5t3lgVsR+QSILwWWwDfXJ2/Yi88Wdaicb+MSQ+29cL9bSxOSKGavZIy7IZ E9TNepQ9URxGwS+mqHFsl3hOrYNhJUtidgPY3hbboUsedf7CVdAdXZd+CNx75KP5 ouQdKp3EDCMqh8W/7jG5rGjbeS4GXw441WivV38FlR5K/IuYaxyBWfuQDXqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU754l7P1BP7m+WAlpbuWD+YYvs0owHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUS15hgi8YNVOmTwSx0ewuqMmsNXLImaZIH 2I4ImNn3dn3MqA9nfx99EyMVvCpAnFNoHPm9I1X95b0ekaI7jz9YDKRdrBGbDILY guUH1JXt1pJMKfLATz6DhnxH1ZfZN5qs89YITFjRBdYM5BScp09pTk4iXOtCQmcu KFGHBYdnzarqqfjnMPXCBr0F0m9f4ujehVNKWDGLp1StPkIh9/pocJZMY6nlkBbm uzA9690SMiAzC1zGu2jYNJvugs61zYNyplLaEhU6VeGkFO4KnY58zXBV+lBEJMlm egQjvr/NZZBYq/6RDlU0Gn7N4ZmrHWxkm6J5FPfrbyTL2ql878A= -----END CERTIFICATE-----Generated at Sun May 17 00:03:52 2026 by rpki-client