$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: IDWD6aVOjWlveTmPE8G0R69hR/20vpXer1wUB6d/e08= Subject key identifier: 7B:12:66:BC:8A:53:B6:E1:1F:E4:21:68:35:B5:2E:67:86:4E:D0:DE Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 04E518E21E6ACA2AF7D2A973C547EAAFF6F78827 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: BC Signing time: Thu 17 Sep 2026 05:55:49 +0000 Manifest this update: Thu 17 Sep 2026 05:50:49 +0000 Manifest next update: Fri 18 Sep 2026 05:59:49 +0000 Files and hashes: 1: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: 3vRni+KFw9aMaNlW1EPHaiiSto48a9GaavRdSQ7BHaY=) 2: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e5:18:e2:1e:6a:ca:2a:f7:d2:a9:73:c5:47:ea:af:f6:f7:88:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Sep 17 05:50:49 2026 GMT Not After : Sep 18 05:59:49 2026 GMT Subject: CN=7B1266BC8A53B6E11FE4216835B52E67864ED0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:b5:66:fa:dd:b5:c9:c2:64:a7:a6:02:76: e1:2e:14:70:4e:06:7a:be:c0:57:98:96:7a:c3:06: 37:5b:48:57:a1:95:8d:9b:b3:8f:1b:16:d0:e8:aa: 26:d5:71:33:c4:34:a2:57:d0:d1:d4:9f:44:60:ad: 66:a6:e3:1a:c6:03:a0:04:57:c2:a5:9b:c7:78:92: 25:a9:9f:fd:e2:ae:b2:d9:3d:94:0a:c9:64:28:7a: 1c:44:bb:51:63:3e:54:6c:d1:fd:67:3d:9c:83:ec: f3:fe:ef:31:83:f0:b6:01:32:7f:9d:15:dd:c7:30: fa:ae:e5:2f:e7:c9:65:ef:8c:2b:90:5c:c9:e5:5f: 51:34:fc:d9:3c:09:41:b6:f9:b2:7f:46:89:d7:b0: 44:fe:72:4e:5b:84:9c:b6:2f:f2:fd:b1:67:e8:ab: f5:e3:e8:2a:d9:95:1f:dc:c5:d9:b4:56:a0:c4:61: 2a:19:14:97:3d:c0:dd:d9:26:db:e8:84:34:a8:9e: d7:60:95:9e:e5:35:c1:be:b5:35:3d:cd:96:70:f6: 4c:ba:ad:21:67:f3:1f:01:d3:4f:ef:6a:68:0a:e7: 32:44:94:2f:3e:c6:17:e8:19:9e:94:d2:30:fa:b8: d0:7c:4d:5d:98:8f:b3:74:a7:ca:0f:c4:a7:03:a1: f3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:12:66:BC:8A:53:B6:E1:1F:E4:21:68:35:B5:2E:67:86:4E:D0:DE X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:bb:67:b3:c3:d4:22:4b:81:78:9e:82:aa:81:43:49:b3:34: 28:90:6f:a3:38:4c:cf:d9:91:1e:d1:f4:8d:f9:d3:33:1b:95: 12:e7:2e:3a:87:38:11:d1:a8:6a:ab:5c:d2:76:5e:23:91:2a: 19:a7:28:f0:f6:33:61:5d:d1:23:6c:75:97:3e:24:3b:0b:19: 06:d8:bb:4a:58:61:fb:90:82:9d:d7:01:30:fe:32:7d:21:ea: d1:53:1d:b5:8b:67:dd:e3:1c:b2:22:e5:8f:fa:ac:ac:cf:97: 45:75:a6:fe:ce:93:70:b1:f7:fb:d0:be:b2:97:fd:c2:82:06: 1a:ec:fb:7e:b1:f8:46:26:69:a0:b9:5f:b6:9b:ca:55:10:ed: 7c:e9:ad:b9:f8:76:a4:f0:43:43:aa:3d:0c:04:ca:fb:50:86: 12:4e:b4:99:b6:5d:2b:50:56:e8:e5:3d:42:16:df:f9:c0:d6: 6b:c0:4c:23:c0:60:df:e4:00:19:33:5a:a2:5f:ff:40:1e:08: 31:0c:81:51:e4:9d:b5:c4:aa:af:de:56:ab:24:14:cb:ed:ab: dd:18:a6:02:86:23:6d:4b:5c:d2:2f:86:8c:9a:61:48:8d:b5: ea:33:2f:e4:c8:25:e5:b2:de:c1:ea:05:51:12:1b:0f:0c:94: f3:4c:08:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOUY4h5qyir30qlzxUfqr/b3iCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA5MTcwNTUwNDlaFw0yNjA5MTgwNTU5NDlaMDMxMTAvBgNV BAMTKDdCMTI2NkJDOEE1M0I2RTExRkU0MjE2ODM1QjUyRTY3ODY0RUQwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SrVm+t21ycJkp6YCduEuFHBO Bnq+wFeYlnrDBjdbSFehlY2bs48bFtDoqibVcTPENKJX0NHUn0RgrWam4xrGA6AE V8Klm8d4kiWpn/3irrLZPZQKyWQoehxEu1FjPlRs0f1nPZyD7PP+7zGD8LYBMn+d Fd3HMPqu5S/nyWXvjCuQXMnlX1E0/Nk8CUG2+bJ/RonXsET+ck5bhJy2L/L9sWfo q/Xj6CrZlR/cxdm0VqDEYSoZFJc9wN3ZJtvohDSontdglZ7lNcG+tTU9zZZw9ky6 rSFn8x8B00/vamgK5zJElC8+xhfoGZ6U0jD6uNB8TV2Yj7N0p8oPxKcDofP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUexJmvIpTtuEf5CFoNbUuZ4ZO0N4wHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOq7Z7PD1CJLgXiegqqBQ0mzNCiQb6M4TM/Z kR7R9I350zMblRLnLjqHOBHRqGqrXNJ2XiORKhmnKPD2M2Fd0SNsdZc+JDsLGQbY u0pYYfuQgp3XATD+Mn0h6tFTHbWLZ93jHLIi5Y/6rKzPl0V1pv7Ok3Cx9/vQvrKX /cKCBhrs+36x+EYmaaC5X7abylUQ7Xzprbn4dqTwQ0OqPQwEyvtQhhJOtJm2XStQ VujlPUIW3/nA1mvATCPAYN/kABkzWqJf/0AeCDEMgVHknbXEqq/eVqskFMvtq90Y pgKGI21LXNIvhoyaYUiNteozL+TIJeWy3sHqBVESGw8MlPNMCII= -----END CERTIFICATE-----Generated at Thu Sep 17 15:11:42 2026 by rpki-client