$ rpki-client -vvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: brXQJKBnrQmc64biDuHgX8u3TMJnJPrTqBdSMuFbTss= Subject key identifier: FE:12:91:B2:26:37:DA:3D:3F:95:83:2C:7B:E1:3D:7A:D9:59:99:E6 Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 36742BF7CE3C0384052CB469EFAB3C198C124C9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: 64 Signing time: Mon 13 Jul 2026 17:21:34 +0000 Manifest this update: Mon 13 Jul 2026 17:16:34 +0000 Manifest next update: Tue 14 Jul 2026 18:06:34 +0000 Files and hashes: 1: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: 671k/lyUpzeNoRtwjyI4XrpU5Oai55GKKvyD1vfK1i4=) 2: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) 3: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 18:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:74:2b:f7:ce:3c:03:84:05:2c:b4:69:ef:ab:3c:19:8c:12:4c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Jul 13 17:16:34 2026 GMT Not After : Jul 14 18:06:34 2026 GMT Subject: CN=FE1291B22637DA3D3F95832C7BE13D7AD95999E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:e7:07:e2:f9:23:bb:8d:f7:54:92:24:e1: aa:63:66:8a:53:85:07:2b:31:7b:35:bd:a8:f9:7a: 33:0a:a3:9e:f9:f0:10:d3:cd:38:74:1f:01:c7:da: 10:cd:21:94:b5:9b:0f:39:3f:8a:04:9d:db:23:1f: e7:be:32:c8:c9:43:83:68:8f:04:ee:46:7c:22:b4: 56:11:6d:12:35:44:73:5e:50:ef:be:93:6b:04:8f: 94:e8:27:92:a9:ad:c1:04:c7:8c:f4:8b:3d:35:2d: e8:7a:64:46:75:70:e0:d3:1b:a1:cf:18:ba:99:e8: b4:50:3c:eb:c8:2c:86:d5:52:b5:07:2d:fe:83:e0: 48:65:ed:dd:8b:23:f3:d4:d1:18:ff:7a:a8:f8:bf: f9:5b:7f:88:4a:e7:ef:0e:f2:b4:44:06:21:4e:bc: 7a:59:51:95:43:33:58:6b:31:3d:df:79:50:54:b4: bc:f2:e9:86:1e:62:6c:fb:ef:c0:2b:4c:29:52:3c: e9:70:70:22:e2:14:02:f9:09:90:24:99:49:12:10: d1:8b:14:ed:e4:03:fa:4d:ae:3c:92:47:9a:08:25: f1:ef:2e:05:41:a2:8c:2d:4e:a6:52:4c:5f:a6:8c: e2:91:1d:98:7e:14:5f:7a:62:ae:ec:59:bf:cc:de: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:12:91:B2:26:37:DA:3D:3F:95:83:2C:7B:E1:3D:7A:D9:59:99:E6 X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f5:a9:b4:17:78:66:c7:15:f0:6e:e1:82:a8:65:8f:1a:8a: fc:ec:a1:c3:cb:f6:62:6a:aa:15:26:70:d2:e4:87:37:8a:34: 48:36:2c:7d:cf:ae:de:58:6c:d4:73:bb:34:88:30:4d:5c:62: 38:d2:d2:4f:ba:24:7d:97:29:11:0f:99:e5:0e:fe:f2:61:50: 7a:62:31:86:0f:60:c3:a3:f9:6e:8a:7c:56:da:48:4d:ba:32: 5b:9c:67:a3:83:b0:ce:c7:75:87:04:1e:ea:0a:84:5e:88:b5: 26:78:44:6f:60:55:6d:3e:e3:0e:2b:00:0b:c1:46:38:57:65: cd:6d:05:3e:06:14:57:86:99:57:da:da:e1:83:70:1d:7e:26: 24:f1:3d:1f:e7:24:6d:a3:f8:b7:3b:ce:16:aa:35:b6:39:a0: 4f:f4:7f:13:6a:8d:a3:7e:28:6b:29:6f:d0:4f:2d:ff:ee:5d: 9a:eb:2c:31:22:7f:50:f3:a0:ff:f9:75:a2:a2:a1:92:49:7d: e0:22:61:d4:80:bb:29:94:53:21:da:e0:b8:ff:0f:3a:f0:85: 6a:19:fe:9e:ba:93:9c:b0:7f:96:e3:58:8d:f5:dd:9b:d0:ea: 56:1c:36:54:4b:c2:55:4d:66:18:cd:2b:a6:ce:b7:8d:66:2a: a2:53:9b:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnQr9848A4QFLLRp76s8GYwSTJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA3MTMxNzE2MzRaFw0yNjA3MTQxODA2MzRaMDMxMTAvBgNV BAMTKEZFMTI5MUIyMjYzN0RBM0QzRjk1ODMyQzdCRTEzRDdBRDk1OTk5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86ecH4vkju433VJIk4apjZopT hQcrMXs1vaj5ejMKo5758BDTzTh0HwHH2hDNIZS1mw85P4oEndsjH+e+MsjJQ4No jwTuRnwitFYRbRI1RHNeUO++k2sEj5ToJ5KprcEEx4z0iz01Leh6ZEZ1cODTG6HP GLqZ6LRQPOvILIbVUrUHLf6D4Ehl7d2LI/PU0Rj/eqj4v/lbf4hK5+8O8rREBiFO vHpZUZVDM1hrMT3feVBUtLzy6YYeYmz778ArTClSPOlwcCLiFAL5CZAkmUkSENGL FO3kA/pNrjySR5oIJfHvLgVBoowtTqZSTF+mjOKRHZh+FF96Yq7sWb/M3v6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/hKRsiY32j0/lYMse+E9etlZmeYwHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHj1qbQXeGbHFfBu4YKoZY8aivzsocPL9mJq qhUmcNLkhzeKNEg2LH3Prt5YbNRzuzSIME1cYjjS0k+6JH2XKREPmeUO/vJhUHpi MYYPYMOj+W6KfFbaSE26MlucZ6ODsM7HdYcEHuoKhF6ItSZ4RG9gVW0+4w4rAAvB RjhXZc1tBT4GFFeGmVfa2uGDcB1+JiTxPR/nJG2j+Lc7zhaqNbY5oE/0fxNqjaN+ KGspb9BPLf/uXZrrLDEif1DzoP/5daKioZJJfeAiYdSAuymUUyHa4Lj/DzrwhWoZ /p66k5ywf5bjWI313ZvQ6lYcNlRLwlVNZhjNK6bOt41mKqJTm9M= -----END CERTIFICATE-----Generated at Tue Jul 14 03:43:02 2026 by rpki-client