$ rpki-client -vvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: 3mhEylNDmgmU19vRvy/D5orq0UvormRj9Itcc6DKbbo= Subject key identifier: 75:60:9C:8C:CC:66:80:50:2E:A6:4D:E5:3D:FD:B5:D5:EB:04:7F:6E Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 505FB489E73B7BBD4F9BB9DC3210689A80D382FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: 40 Signing time: Wed 17 Jun 2026 04:12:52 +0000 Manifest this update: Wed 17 Jun 2026 04:07:52 +0000 Manifest next update: Thu 18 Jun 2026 04:13:52 +0000 Files and hashes: 1: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: qInYiuSzHB8emBjel2F3apHGb0Dm38xs8OV80WTKNW8=) 2: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5f:b4:89:e7:3b:7b:bd:4f:9b:b9:dc:32:10:68:9a:80:d3:82:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Jun 17 04:07:52 2026 GMT Not After : Jun 18 04:13:52 2026 GMT Subject: CN=75609C8CCC6680502EA64DE53DFDB5D5EB047F6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:e2:10:5f:b7:71:9f:e6:30:dd:fb:1b:8d: 07:ad:a9:89:1b:cc:13:16:9a:b3:93:d7:7e:a4:82: 88:f4:70:0a:57:b5:94:02:04:dd:46:9d:05:ce:bd: 03:4e:9d:b5:ee:b5:aa:c5:3e:28:f9:f5:40:e4:9e: 3b:c2:8b:3c:1d:6d:71:d6:0c:17:75:f8:e6:62:91: 31:a0:b3:4d:c6:0d:3a:7a:97:c9:70:11:d5:b5:df: 1e:dc:24:af:f7:6b:4c:7c:7c:86:ee:3d:c1:cf:10: ae:e0:f7:f1:59:9f:55:d2:1e:1c:19:fb:c1:d7:64: 7c:ae:65:5c:78:c3:87:2d:14:4c:a0:8e:6d:d1:e6: 4f:f3:3e:98:a9:be:4d:2c:e5:df:38:36:05:df:dc: 05:67:6a:0e:c7:be:f3:52:58:eb:0d:45:96:79:6a: 30:d5:86:33:01:d1:f1:bc:80:5c:31:8a:2a:60:92: 66:c6:c7:23:d7:09:df:55:71:7f:9e:12:1e:10:81: 3d:90:9f:3a:7b:fb:32:b7:9b:cb:62:44:3d:b9:12: 15:d4:a4:3d:fc:3a:a9:0d:3d:93:e1:c2:35:76:d9: 7f:98:00:da:d3:72:56:6a:f0:ac:30:77:a7:c5:41: f8:40:a8:dc:a7:24:02:86:3a:ce:76:e2:87:26:a6: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:60:9C:8C:CC:66:80:50:2E:A6:4D:E5:3D:FD:B5:D5:EB:04:7F:6E X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e2:6d:a1:93:c0:6d:59:c6:c4:67:bc:94:52:0b:2f:4e:dd: 8d:bb:49:35:3b:01:2b:ff:64:51:54:08:5f:8f:93:2c:bb:fc: 10:b1:6e:09:03:78:02:ec:08:77:89:d6:6d:32:31:db:e2:d8: 29:c3:e0:91:1b:4b:28:8c:18:d9:62:77:56:ce:1c:f4:ac:f9: e6:69:95:0a:ad:90:ac:26:b6:50:da:61:6b:2a:8a:78:aa:e2: 99:d5:ea:79:ca:90:a4:1b:45:f7:7b:40:f4:3a:61:8b:24:aa: 5c:b9:ed:05:97:b2:53:94:af:b9:ab:aa:20:c0:0a:51:85:5f: 72:fe:db:dd:c4:0f:07:f1:da:36:bd:23:ca:46:79:f1:61:14: c0:be:41:32:fa:2b:93:56:fe:41:4b:1d:46:c4:30:2e:df:44: 23:b1:7f:7d:68:69:44:77:c2:0f:14:af:ba:a5:e5:82:77:d3: 49:a3:a0:ba:2c:fc:f9:0f:bb:b4:dc:e3:88:50:99:99:14:33: 18:2b:6e:a8:ea:ba:9a:36:6f:bf:61:1e:3f:58:fb:f8:da:a4: ef:c2:87:e3:67:72:17:43:e2:92:12:57:85:1c:cd:5c:40:5a: cd:c3:23:3d:76:5a:6e:20:f4:d3:88:c4:81:25:a7:4d:c8:01: 40:0b:d3:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUF+0iec7e71Pm7ncMhBomoDTgv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA2MTcwNDA3NTJaFw0yNjA2MTgwNDEzNTJaMDMxMTAvBgNV BAMTKDc1NjA5QzhDQ0M2NjgwNTAyRUE2NERFNTNERkRCNUQ1RUIwNDdGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBeIQX7dxn+Yw3fsbjQetqYkb zBMWmrOT136kgoj0cApXtZQCBN1GnQXOvQNOnbXutarFPij59UDknjvCizwdbXHW DBd1+OZikTGgs03GDTp6l8lwEdW13x7cJK/3a0x8fIbuPcHPEK7g9/FZn1XSHhwZ +8HXZHyuZVx4w4ctFEygjm3R5k/zPpipvk0s5d84NgXf3AVnag7HvvNSWOsNRZZ5 ajDVhjMB0fG8gFwxiipgkmbGxyPXCd9VcX+eEh4QgT2Qnzp7+zK3m8tiRD25EhXU pD38OqkNPZPhwjV22X+YANrTclZq8Kwwd6fFQfhAqNynJAKGOs524ocmprNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdWCcjMxmgFAupk3lPf211esEf24wHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvibaGTwG1ZxsRnvJRSCy9O3Y27STU7ASv/ ZFFUCF+Pkyy7/BCxbgkDeALsCHeJ1m0yMdvi2CnD4JEbSyiMGNlid1bOHPSs+eZp lQqtkKwmtlDaYWsqiniq4pnV6nnKkKQbRfd7QPQ6YYskqly57QWXslOUr7mrqiDA ClGFX3L+293EDwfx2ja9I8pGefFhFMC+QTL6K5NW/kFLHUbEMC7fRCOxf31oaUR3 wg8Ur7ql5YJ300mjoLos/PkPu7Tc44hQmZkUMxgrbqjqupo2b79hHj9Y+/japO/C h+NnchdD4pISV4UczVxAWs3DIz12Wm4g9NOIxIElp03IAUAL0ws= -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:18 2026 by rpki-client