$ rpki-client -vvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: u47adBDJgogeG3fUU1x1f0dGovbEQBvompdKqgcr56c= Subject key identifier: 8A:FA:2D:C1:BC:5A:02:5B:E0:3E:12:F1:B1:79:65:83:28:C3:47:FC Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 23A04E771303E468325C59FC58F52DC1447F9E24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: 72 Signing time: Fri 24 Jul 2026 06:42:35 +0000 Manifest this update: Fri 24 Jul 2026 06:37:35 +0000 Manifest next update: Sat 25 Jul 2026 07:01:35 +0000 Files and hashes: 1: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: fSMfzsKqmE4Vx8I5aziMtgUMKbjJVQClloBU+TKmpDE=) 2: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a0:4e:77:13:03:e4:68:32:5c:59:fc:58:f5:2d:c1:44:7f:9e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Jul 24 06:37:35 2026 GMT Not After : Jul 25 07:01:35 2026 GMT Subject: CN=8AFA2DC1BC5A025BE03E12F1B179658328C347FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:c5:b0:eb:77:af:8d:38:63:a6:f7:79:f1: 78:b2:d0:fd:6a:09:4b:85:43:92:1d:f6:b5:1f:dd: 13:f4:c5:3a:c0:71:7f:5b:24:4f:7b:fd:c0:ca:7d: 7f:21:45:b4:ea:f9:83:c7:26:f5:cd:7c:7b:95:9e: 4e:54:a4:c2:ad:67:2f:0d:02:59:f7:04:ed:b0:50: 72:d9:07:3f:78:3c:98:40:89:a5:35:4d:aa:2b:6c: 75:11:88:e2:98:86:d6:dd:14:25:20:e1:0f:52:45: df:68:df:af:06:03:fb:79:19:1f:98:87:e6:8d:a8: dc:59:de:95:da:84:e9:1c:6a:6d:79:ab:57:56:ee: 65:1a:1e:76:29:37:3d:fb:78:92:a6:32:49:81:ad: 2c:1b:45:5b:96:da:b7:e5:b7:96:43:97:df:38:88: e0:ec:c8:5b:f8:e0:04:72:2f:64:4a:b8:69:32:0c: ee:8a:0f:c3:cc:86:3a:f1:79:b0:a0:44:99:79:33: 5a:47:fd:e2:98:ab:ff:ec:11:c4:65:7e:24:4c:73: 50:1a:89:99:57:5d:50:23:8c:64:56:88:17:5c:fe: 3a:c8:e0:12:5a:cc:b9:76:ca:d9:3e:9e:8a:be:40: be:fa:82:ce:2a:01:e2:1b:0f:ce:dc:b4:fa:b2:55: 8e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FA:2D:C1:BC:5A:02:5B:E0:3E:12:F1:B1:79:65:83:28:C3:47:FC X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5e:36:70:4f:9c:eb:4b:92:8b:6d:80:23:7c:50:8a:87:47: 4e:ed:9d:b1:df:13:25:2c:57:96:aa:44:f2:02:1e:0c:54:dc: 4d:61:3b:64:61:12:4d:51:75:37:13:bf:cc:36:1c:42:44:b2: cc:e7:41:13:73:c5:87:3e:ea:7a:75:ad:65:09:15:38:1f:88: 9a:f2:64:96:aa:38:57:67:46:a7:88:cc:f9:07:32:b4:3c:90: ab:20:d2:ce:e9:55:67:b8:38:e2:79:b0:f8:78:1d:54:8d:63: 52:56:68:bc:b9:7d:1f:0b:9b:2e:e1:ed:a2:00:18:ae:7d:0a: b3:bd:8f:70:74:56:25:b6:e2:0d:bb:7e:54:b8:7b:ba:ab:98: 21:d1:8a:09:8b:9f:fe:00:5e:87:5a:48:6f:05:c6:77:3a:b3: e5:3b:e1:44:7b:18:28:3c:26:2b:79:3e:67:5d:1f:ae:5d:ca: 63:82:bb:04:93:c2:3a:74:7e:b6:91:05:76:3f:a3:4e:10:1b: 5b:f9:74:90:33:42:f6:c3:3d:1a:eb:30:c9:b8:c0:de:56:78: 51:4f:55:66:32:85:7d:3c:1f:f5:d4:cd:db:ab:92:78:94:5c: bb:9c:0d:28:98:5c:0c:b7:8a:8d:1b:4a:ca:33:ef:d8:47:ca: 10:d6:d3:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6BOdxMD5GgyXFn8WPUtwUR/niQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA3MjQwNjM3MzVaFw0yNjA3MjUwNzAxMzVaMDMxMTAvBgNV BAMTKDhBRkEyREMxQkM1QTAyNUJFMDNFMTJGMUIxNzk2NTgzMjhDMzQ3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfMWw63evjThjpvd58Xiy0P1q CUuFQ5Id9rUf3RP0xTrAcX9bJE97/cDKfX8hRbTq+YPHJvXNfHuVnk5UpMKtZy8N Aln3BO2wUHLZBz94PJhAiaU1TaorbHURiOKYhtbdFCUg4Q9SRd9o368GA/t5GR+Y h+aNqNxZ3pXahOkcam15q1dW7mUaHnYpNz37eJKmMkmBrSwbRVuW2rflt5ZDl984 iODsyFv44ARyL2RKuGkyDO6KD8PMhjrxebCgRJl5M1pH/eKYq//sEcRlfiRMc1Aa iZlXXVAjjGRWiBdc/jrI4BJazLl2ytk+noq+QL76gs4qAeIbD87ctPqyVY55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivotwbxaAlvgPhLxsXllgyjDR/wwHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIReNnBPnOtLkottgCN8UIqHR07tnbHfEyUs V5aqRPICHgxU3E1hO2RhEk1RdTcTv8w2HEJEssznQRNzxYc+6np1rWUJFTgfiJry ZJaqOFdnRqeIzPkHMrQ8kKsg0s7pVWe4OOJ5sPh4HVSNY1JWaLy5fR8Lmy7h7aIA GK59CrO9j3B0ViW24g27flS4e7qrmCHRigmLn/4AXodaSG8Fxnc6s+U74UR7GCg8 Jit5PmddH65dymOCuwSTwjp0fraRBXY/o04QG1v5dJAzQvbDPRrrMMm4wN5WeFFP VWYyhX08H/XUzdurkniUXLucDSiYXAy3io0bSsoz79hHyhDW08k= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:36 2026 by rpki-client