$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: ikiBIHwupXFAfPA4/xDmiTACm7a+ZecU+45wczdVzdE= Subject key identifier: C7:A9:4B:BD:68:C9:FF:D0:79:B3:9E:8F:FC:68:F7:83:5B:8C:40:B8 Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 0A9B5483A7F4EE017076E88A23FA4C961D5A8A56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: 010A Signing time: Sat 14 Nov 2026 08:24:50 +0000 Manifest this update: Sat 14 Nov 2026 08:19:50 +0000 Manifest next update: Sun 15 Nov 2026 08:59:50 +0000 Files and hashes: 1: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: TGVCA1No2h4dqLJTpg3b9bhQb5kGCGtJj6DYJ4zhszc=) 2: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) 3: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9b:54:83:a7:f4:ee:01:70:76:e8:8a:23:fa:4c:96:1d:5a:8a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Nov 14 08:19:50 2026 GMT Not After : Nov 15 08:59:50 2026 GMT Subject: CN=C7A94BBD68C9FFD079B39E8FFC68F7835B8C40B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:81:27:29:e1:ad:c3:f6:4f:47:79:f0:6e:ce: 0d:94:f0:3e:46:4c:9f:da:62:fa:f0:ca:c2:32:45: 2d:85:29:5b:f8:86:85:33:c5:69:d3:98:0f:36:cc: 39:3b:dc:ce:8a:af:fc:2d:0f:9e:5a:32:2a:07:c0: 16:2c:db:70:5d:87:97:cc:91:f5:a5:21:85:96:6c: 11:d0:27:13:c6:6f:94:37:1f:a0:6b:3e:8f:7b:ae: 6b:a6:e0:ba:99:11:15:ef:a1:6f:66:cf:40:29:00: 1b:01:f6:81:2f:49:e4:e0:ec:eb:a4:d4:ef:e1:45: 5a:0c:6e:58:a6:d3:fb:90:1a:3e:69:dd:c2:cc:b1: f3:39:01:e2:f3:c6:2a:c0:6c:76:97:59:1a:3e:e6: 0f:f8:71:6a:16:b2:c4:80:ec:ae:01:84:ae:83:26: 7c:b3:01:92:05:1b:76:98:cb:3a:cb:94:77:76:4f: ef:0c:5a:4e:c6:4a:06:b2:04:ff:54:43:e6:bb:ea: 68:e8:ad:cf:7b:12:8d:4e:3c:1f:fb:75:d2:73:be: fc:a8:e3:eb:6f:1c:60:29:63:ac:11:92:de:ca:4d: c6:1a:94:54:ac:fd:af:25:1d:32:41:a1:08:0f:4e: a2:e9:cc:b4:25:ea:b9:3a:bc:50:e9:af:2e:db:70: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A9:4B:BD:68:C9:FF:D0:79:B3:9E:8F:FC:68:F7:83:5B:8C:40:B8 X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:79:c2:fa:35:2a:ac:be:64:bb:96:5c:f0:75:78:5a:c4:e1: 89:24:7c:ed:c8:45:fa:36:09:1f:0e:d3:6b:10:a0:80:f9:bf: 39:51:3d:d5:ab:2f:bd:47:af:bc:11:59:54:ab:7a:07:74:0a: dd:a6:5b:8a:cd:e8:81:a0:79:98:76:af:4f:3d:bd:1a:72:8b: a8:ba:2e:ee:df:18:7a:fb:49:4e:bc:64:6a:70:a6:c6:a8:67: fd:64:d8:93:0c:7d:45:b6:71:8f:9a:4b:a4:d0:00:7b:dc:b1: 54:94:9d:05:51:4f:c6:d5:80:df:3e:94:d9:46:55:89:0a:69: cf:d9:1b:e0:63:16:1a:9a:f7:5c:d6:e3:45:b0:c9:f1:9b:bc: d5:8c:3f:64:ac:62:2e:e0:8e:ca:a9:8f:37:e8:67:44:fe:7a: 92:bf:8c:3c:e3:3e:b5:d2:a0:d1:e2:5e:1c:92:1a:0b:37:c5: 80:10:82:7a:a5:94:49:53:3c:a0:3f:ba:a4:02:d8:3b:93:e7: 04:e2:48:89:b7:fa:1f:de:a0:0f:59:53:04:41:cb:d2:f7:27: 32:16:6d:da:9b:34:82:3e:65:8f:ca:db:b2:74:9a:c8:f8:d0: 79:53:4a:9b:51:f5:d7:02:ef:c7:bf:a4:e5:89:23:3d:0d:90: 2f:dd:76:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCptUg6f07gFwduiKI/pMlh1ailYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjExMTQwODE5NTBaFw0yNjExMTUwODU5NTBaMDMxMTAvBgNV BAMTKEM3QTk0QkJENjhDOUZGRDA3OUIzOUU4RkZDNjhGNzgzNUI4QzQwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDngScp4a3D9k9HefBuzg2U8D5G TJ/aYvrwysIyRS2FKVv4hoUzxWnTmA82zDk73M6Kr/wtD55aMioHwBYs23Bdh5fM kfWlIYWWbBHQJxPGb5Q3H6BrPo97rmum4LqZERXvoW9mz0ApABsB9oEvSeTg7Ouk 1O/hRVoMblim0/uQGj5p3cLMsfM5AeLzxirAbHaXWRo+5g/4cWoWssSA7K4BhK6D JnyzAZIFG3aYyzrLlHd2T+8MWk7GSgayBP9UQ+a76mjorc97Eo1OPB/7ddJzvvyo 4+tvHGApY6wRkt7KTcYalFSs/a8lHTJBoQgPTqLpzLQl6rk6vFDpry7bcK5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6lLvWjJ/9B5s56P/Gj3g1uMQLgwHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh5wvo1Kqy+ZLuWXPB1eFrE4YkkfO3IRfo2 CR8O02sQoID5vzlRPdWrL71Hr7wRWVSregd0Ct2mW4rN6IGgeZh2r089vRpyi6i6 Lu7fGHr7SU68ZGpwpsaoZ/1k2JMMfUW2cY+aS6TQAHvcsVSUnQVRT8bVgN8+lNlG VYkKac/ZG+BjFhqa91zW40WwyfGbvNWMP2SsYi7gjsqpjzfoZ0T+epK/jDzjPrXS oNHiXhySGgs3xYAQgnqllElTPKA/uqQC2DuT5wTiSIm3+h/eoA9ZUwRBy9L3JzIW bdqbNII+ZY/K27J0msj40HlTSptR9dcC78e/pOWJIz0NkC/ddvQ= -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:14 2026 by rpki-client