$ rpki-client -vvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: VZmAuc9Ms6OI+YTjvTr+ltjTRm/EK9YwC34b1nkbJT4= Subject key identifier: 66:BE:29:F8:0C:F1:C7:B3:69:F0:3D:05:BB:A8:64:67:C4:4A:ED:52 Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 57B550748B4098299F78A47F381F53DFB82D28AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: 10 Signing time: Tue 12 May 2026 04:44:39 +0000 Manifest this update: Tue 12 May 2026 04:39:39 +0000 Manifest next update: Wed 13 May 2026 06:46:39 +0000 Files and hashes: 1: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: ktOOab4JWWAbjjLN835jO8xU2hzXEqcYarknvaZsnAY=) 2: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) 3: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b5:50:74:8b:40:98:29:9f:78:a4:7f:38:1f:53:df:b8:2d:28:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: May 12 04:39:39 2026 GMT Not After : May 13 06:46:39 2026 GMT Subject: CN=66BE29F80CF1C7B369F03D05BBA86467C44AED52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:d1:2d:59:b9:d6:a0:24:4d:2b:2c:fb:02: f4:c7:d5:c5:5d:17:fd:1d:a6:9a:c8:c3:35:98:4c: be:be:eb:15:76:5f:3d:17:28:29:70:b0:f1:f2:c2: a2:5e:50:e1:27:b3:71:55:01:69:9d:eb:3a:dd:46: 6b:8f:6e:c3:91:58:c0:e7:9a:46:97:3b:73:20:58: 82:f1:96:b9:42:ac:fe:c1:5b:77:87:ab:a6:d1:31: 7f:e3:a7:c5:16:35:6e:8a:94:75:d3:d0:e1:fe:88: 3e:45:69:d8:37:eb:e2:ff:d9:f7:e3:ec:11:c2:9e: 2b:d9:1f:f9:80:8f:2d:89:8b:64:a3:9f:a2:57:a9: 7d:2d:b6:fa:9d:e9:2d:2f:54:7c:5c:c3:2d:a5:6e: d8:11:a0:13:ff:72:2b:01:40:40:f8:d1:b8:32:fe: ff:a5:44:f7:69:83:46:2d:71:b4:aa:81:3c:11:b0: 34:a4:81:17:dd:43:2c:b4:02:80:87:2b:9a:69:bb: 66:c6:1b:e4:94:12:94:d7:b2:08:8d:71:af:32:87: 66:c6:10:57:8c:40:60:df:97:18:eb:b5:a9:89:32: ad:84:a6:5d:2f:0e:0c:03:ac:be:82:4b:2c:e1:02: ee:cd:bc:9e:16:60:c0:31:94:c0:75:66:14:ee:18: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BE:29:F8:0C:F1:C7:B3:69:F0:3D:05:BB:A8:64:67:C4:4A:ED:52 X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8d:04:e7:03:0c:13:15:29:23:76:ba:dc:06:fa:d9:58:32: 7a:3d:b3:72:25:07:db:cd:f4:06:24:68:2e:00:00:1d:9e:eb: ae:32:c4:fb:dd:b9:4a:f0:a1:2f:d7:77:83:58:76:96:21:1c: 3f:83:42:0e:2e:fc:1a:6f:66:20:8a:58:d7:89:1e:86:b9:1b: e9:5e:9f:72:1b:a9:53:49:24:e5:c6:f2:53:25:57:d1:dc:b4: 18:8d:7f:f6:c0:9f:d4:5f:21:94:c4:9e:e9:1e:d3:e8:1a:d6: 5a:64:ff:d8:7e:80:79:eb:9f:c9:31:4f:3c:72:1d:53:f5:1f: 9e:9e:6c:18:5d:2e:42:5d:6b:5e:c5:00:ca:31:2a:70:39:13: 48:68:40:33:12:33:e5:1e:f9:23:2f:b6:62:d5:65:e7:93:2a: ab:a7:9b:b2:18:12:56:e7:51:05:a8:57:9b:1a:7c:f2:12:ea: e0:2b:03:17:c2:48:c9:e3:88:d3:98:75:84:a1:3e:6a:d4:3a: 0d:4a:3d:43:3d:b8:c0:bf:9b:56:bf:ad:41:f1:56:f3:94:67: 0b:3d:fc:83:cb:e6:98:df:98:65:03:82:c8:a2:ec:fe:5f:73: ff:d9:39:b9:a0:b4:21:ff:04:bb:7f:3d:14:98:73:03:5f:f5: 98:e3:11:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7VQdItAmCmfeKR/OB9T37gtKKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA1MTIwNDM5MzlaFw0yNjA1MTMwNjQ2MzlaMDMxMTAvBgNV BAMTKDY2QkUyOUY4MENGMUM3QjM2OUYwM0QwNUJCQTg2NDY3QzQ0QUVENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX59EtWbnWoCRNKyz7AvTH1cVd F/0dpprIwzWYTL6+6xV2Xz0XKClwsPHywqJeUOEns3FVAWmd6zrdRmuPbsORWMDn mkaXO3MgWILxlrlCrP7BW3eHq6bRMX/jp8UWNW6KlHXT0OH+iD5Fadg36+L/2ffj 7BHCnivZH/mAjy2Ji2Sjn6JXqX0ttvqd6S0vVHxcwy2lbtgRoBP/cisBQED40bgy /v+lRPdpg0YtcbSqgTwRsDSkgRfdQyy0AoCHK5ppu2bGG+SUEpTXsgiNca8yh2bG EFeMQGDflxjrtamJMq2Epl0vDgwDrL6CSyzhAu7NvJ4WYMAxlMB1ZhTuGHtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZr4p+Azxx7Np8D0Fu6hkZ8RK7VIwHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqNBOcDDBMVKSN2utwG+tlYMno9s3IlB9vN 9AYkaC4AAB2e664yxPvduUrwoS/Xd4NYdpYhHD+DQg4u/BpvZiCKWNeJHoa5G+le n3IbqVNJJOXG8lMlV9HctBiNf/bAn9RfIZTEnuke0+ga1lpk/9h+gHnrn8kxTzxy HVP1H56ebBhdLkJda17FAMoxKnA5E0hoQDMSM+Ue+SMvtmLVZeeTKqunm7IYElbn UQWoV5safPIS6uArAxfCSMnjiNOYdYShPmrUOg1KPUM9uMC/m1a/rUHxVvOUZws9 /IPL5pjfmGUDgsii7P5fc//ZObmgtCH/BLt/PRSYcwNf9ZjjEaw= -----END CERTIFICATE-----Generated at Tue May 12 22:20:10 2026 by rpki-client