$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: G0bWjDxk/fHRGrdpD02cHH3eSy6syCGqGhoyT64ucB8= Subject key identifier: 2D:84:41:D6:82:ED:A9:43:4B:6B:4A:4B:07:9E:92:19:36:E8:44:94 Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 721E8A0F5F08366D006D3FD59451DAFA365B78B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: C5 Signing time: Wed 23 Sep 2026 17:02:05 +0000 Manifest this update: Wed 23 Sep 2026 16:57:05 +0000 Manifest next update: Thu 24 Sep 2026 17:28:05 +0000 Files and hashes: 1: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) 2: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: iBNy572877mThmsBJkseTpSvJFYp1rwj/ADL1fYIrTg=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1e:8a:0f:5f:08:36:6d:00:6d:3f:d5:94:51:da:fa:36:5b:78:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Sep 23 16:57:05 2026 GMT Not After : Sep 24 17:28:05 2026 GMT Subject: CN=2D8441D682EDA9434B6B4A4B079E921936E84494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:42:27:0b:19:e9:c0:ff:c5:dc:e4:b2:13: 01:7d:52:ba:f7:85:7c:59:54:18:e9:c3:30:9a:2c: cb:5d:5b:c8:24:59:fd:64:7c:07:76:59:a2:ee:e6: a2:4b:5f:55:38:68:42:97:d3:dc:62:52:da:67:f6: 63:b8:2c:f0:65:89:d7:cb:d8:7b:a2:a2:87:85:0f: 3a:2b:5a:d6:d5:5d:8e:3c:a3:29:28:0b:7b:58:31: 03:69:88:d3:a2:b2:00:ca:6f:dd:5e:1a:44:99:0a: 68:95:e5:53:40:1a:c0:f7:04:ac:85:aa:8f:8a:17: 93:d5:8b:c7:84:dd:9e:f2:4d:1e:ef:c5:8d:ad:01: 63:ef:b1:3a:6c:d5:a5:f4:f4:36:f1:3d:7a:d1:6a: 67:22:34:71:e4:bb:f4:1a:3e:42:46:f5:15:08:b0: 64:3b:e4:77:3f:53:9e:0b:66:72:02:64:88:62:b6: 9d:1d:cc:27:a2:78:78:51:44:9e:4b:65:a9:02:fe: a1:65:e2:e0:a1:0e:0f:e3:e5:2a:9d:7c:fb:b1:95: 66:c8:c0:c2:2d:3c:69:ab:83:5e:07:17:d7:a0:bb: c3:83:30:91:ae:2e:70:a6:ff:3f:6d:f0:42:89:95: 32:8f:34:0e:28:99:73:e1:b8:af:a6:d9:cd:85:b6: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:84:41:D6:82:ED:A9:43:4B:6B:4A:4B:07:9E:92:19:36:E8:44:94 X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:8f:9c:d7:c4:de:cd:ec:bc:a7:f7:86:24:29:f5:f4:37:73: 16:ef:14:3f:68:24:a0:c1:67:8e:7b:ee:ae:b2:a5:bd:6c:e2: 2e:7a:d7:a1:76:c8:f7:67:68:19:aa:03:f1:ad:8d:06:e8:9b: 7b:d2:cc:d8:c5:8c:fd:78:ce:57:77:a5:f8:80:d0:df:7b:3a: 0a:c9:ef:8b:c4:3f:6a:45:fe:42:b7:42:52:05:29:63:56:f5: fb:63:cb:fa:59:3f:29:34:7d:c1:8d:35:c9:1e:d9:90:1b:e1: 28:02:29:03:4d:06:bc:6e:e4:29:c6:8b:93:59:66:2c:65:d4: 1e:af:bf:c8:0d:89:c2:7a:41:47:28:2d:1a:9e:9f:52:38:1a: cb:03:30:3b:df:a7:86:e5:37:56:34:0f:8a:8e:ab:0a:c9:72: 36:22:6e:85:4b:6d:06:2d:a5:39:7f:c7:ea:60:e2:4a:48:ad: 4e:35:48:b4:57:05:a9:4b:12:ac:4f:46:e0:21:47:b0:fd:b9: b4:10:d3:06:1e:0b:52:0c:40:01:9d:88:95:2e:c8:e2:d8:65: 40:16:ed:f3:e1:f4:46:82:94:24:63:1d:b8:23:70:7f:aa:89: 9a:de:1e:85:0c:10:05:9a:27:4e:ac:72:e1:7c:51:6f:3a:8f: d3:92:7b:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUch6KD18INm0AbT/VlFHa+jZbeLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA5MjMxNjU3MDVaFw0yNjA5MjQxNzI4MDVaMDMxMTAvBgNV BAMTKDJEODQ0MUQ2ODJFREE5NDM0QjZCNEE0QjA3OUU5MjE5MzZFODQ0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT0kInCxnpwP/F3OSyEwF9Urr3 hXxZVBjpwzCaLMtdW8gkWf1kfAd2WaLu5qJLX1U4aEKX09xiUtpn9mO4LPBlidfL 2HuiooeFDzorWtbVXY48oykoC3tYMQNpiNOisgDKb91eGkSZCmiV5VNAGsD3BKyF qo+KF5PVi8eE3Z7yTR7vxY2tAWPvsTps1aX09DbxPXrRamciNHHku/QaPkJG9RUI sGQ75Hc/U54LZnICZIhitp0dzCeieHhRRJ5LZakC/qFl4uChDg/j5SqdfPuxlWbI wMItPGmrg14HF9egu8ODMJGuLnCm/z9t8EKJlTKPNA4omXPhuK+m2c2FtjzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYRB1oLtqUNLa0pLB56SGTboRJQwHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiPnNfE3s3svKf3hiQp9fQ3cxbvFD9oJKDB Z4577q6ypb1s4i5616F2yPdnaBmqA/GtjQbom3vSzNjFjP14zld3pfiA0N97OgrJ 74vEP2pF/kK3QlIFKWNW9ftjy/pZPyk0fcGNNcke2ZAb4SgCKQNNBrxu5CnGi5NZ Zixl1B6vv8gNicJ6QUcoLRqen1I4GssDMDvfp4blN1Y0D4qOqwrJcjYiboVLbQYt pTl/x+pg4kpIrU41SLRXBalLEqxPRuAhR7D9ubQQ0wYeC1IMQAGdiJUuyOLYZUAW 7fPh9EaClCRjHbgjcH+qiZreHoUMEAWaJ06scuF8UW86j9OSe9k= -----END CERTIFICATE-----Generated at Thu Sep 24 08:40:31 2026 by rpki-client