$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft File: 02421F1D8F0911482A3B964167D5292F7B46D2A0.mft (raw, json) Hash identifier: Y7CSzASxwaWN6NT0YkQZ5FIyrDZfLO5dQupTTpi4lIg= Subject key identifier: 6F:D0:BD:BA:8A:E0:4C:4F:F6:22:B6:B0:2B:7E:EE:E9:40:EB:AA:FC Authority key identifier: 02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 Certificate issuer: /CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Certificate serial: 1049A0C96D282FD862FE00448107E749B4A3F33E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft Manifest number: C1 Signing time: Sun 20 Sep 2026 17:48:55 +0000 Manifest this update: Sun 20 Sep 2026 17:43:55 +0000 Manifest next update: Mon 21 Sep 2026 18:51:55 +0000 Files and hashes: 1: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: HOcPS4qdpb2ompwF0Iuz3Hp7HISNtqZpLKOOQ+UHNFc=) 2: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: SL9aBMi2vvV2NPAf/otqFcnRvZaq49Vl9gxg4icgFKg=) 3: 02421F1D8F0911482A3B964167D5292F7B46D2A0.crl (hash: DufI6fm8ofR4H6O5aYjRszxi6HYRO/K31SuPgAc2t1Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:49:a0:c9:6d:28:2f:d8:62:fe:00:44:81:07:e7:49:b4:a3:f3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02421F1D8F0911482A3B964167D5292F7B46D2A0 Validity Not Before: Sep 20 17:43:55 2026 GMT Not After : Sep 21 18:51:55 2026 GMT Subject: CN=6FD0BDBA8AE04C4FF622B6B02B7EEEE940EBAAFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:0a:ee:4b:13:5a:b7:b1:79:70:8f:19:59: f3:ad:34:8d:63:d2:e7:b1:e3:92:35:26:4c:da:17: e4:5d:14:3c:7e:ae:3d:1d:ac:83:d2:f6:7b:a9:b0: ec:ad:52:57:94:94:eb:f8:00:1e:d5:e4:2d:08:76: 54:98:08:54:15:e6:ec:43:e9:7f:2e:3d:df:ff:23: 3f:86:ca:c4:6e:7c:ad:a4:2b:57:3d:57:1c:85:69: d3:5a:80:5e:49:c9:e3:e7:2a:e3:40:f2:43:0e:a7: 61:9e:c7:a6:86:cc:15:03:09:c4:bb:e7:c2:ec:fa: 89:ca:31:b6:a3:da:bd:89:38:dd:cf:5f:93:fa:41: 31:b6:69:59:2c:cb:56:91:09:68:b6:48:af:22:b4: 33:09:3b:b0:bc:36:68:a2:58:4b:a2:42:bc:48:0d: 5b:01:f2:90:60:f4:bb:12:e2:14:7d:02:c7:a0:83: 8c:6e:1e:24:06:80:1a:65:8b:ca:ea:3b:3b:c5:69: ee:eb:bf:99:fa:3d:40:81:ee:8d:af:d9:08:d8:a5: 74:43:ed:ea:62:1f:45:cb:2a:c9:18:40:44:20:63: c8:e6:6d:b4:ae:a8:00:0d:52:16:e0:0d:07:3c:cd: d7:d1:9e:30:67:f4:40:7a:53:8e:a6:e3:68:e4:0f: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D0:BD:BA:8A:E0:4C:4F:F6:22:B6:B0:2B:7E:EE:E9:40:EB:AA:FC X509v3 Authority Key Identifier: keyid:02:42:1F:1D:8F:09:11:48:2A:3B:96:41:67:D5:29:2F:7B:46:D2:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/02421F1D8F0911482A3B964167D5292F7B46D2A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b7:4e:fc:05:5b:d2:34:97:5c:00:20:5d:0c:d6:f3:68:40: 48:d0:f0:f3:fb:79:36:b0:5c:89:24:e3:ad:56:c5:63:02:a3: 29:c2:07:f2:17:11:f7:cf:c1:73:2a:c1:63:22:4d:6c:5a:68: 6b:4e:a6:77:94:d3:7d:b8:45:53:14:ec:06:a6:50:7f:9b:cf: d0:2f:52:ea:1d:99:6b:58:e0:a0:d0:9b:5d:83:7f:3b:fb:23: e4:15:71:e6:c8:60:4d:dc:89:af:66:97:2b:62:59:06:26:49: 8c:75:d5:a8:7f:89:d0:eb:07:04:14:1f:b0:c9:59:f9:d2:c4: 70:32:5b:69:6e:fc:96:86:62:a2:92:2e:6a:be:5e:13:e9:65: e8:7d:64:b3:0f:cd:28:d6:20:9f:dc:a4:4b:75:3a:df:34:39: 94:cb:b8:2a:62:6a:58:c7:7e:d8:b2:43:25:c2:80:1e:60:9a: c2:4f:e0:0a:d2:2c:ae:2e:a8:d9:02:1a:d9:b9:f7:b2:d5:5c: e2:07:d5:28:4d:27:d0:c9:96:88:89:19:75:ed:14:28:fe:dc: f5:b1:ed:6d:c6:66:a9:f6:b8:30:63:21:e2:a1:6d:96:66:00: 46:53:63:71:ba:03:8e:fa:27:aa:a7:b3:9a:58:4b:7c:ab:ef: 90:66:5f:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEmgyW0oL9hi/gBEgQfnSbSj8z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3 QjQ2RDJBMDAeFw0yNjA5MjAxNzQzNTVaFw0yNjA5MjExODUxNTVaMDMxMTAvBgNV BAMTKDZGRDBCREJBOEFFMDRDNEZGNjIyQjZCMDJCN0VFRUU5NDBFQkFBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFQruSxNat7F5cI8ZWfOtNI1j 0uex45I1JkzaF+RdFDx+rj0drIPS9nupsOytUleUlOv4AB7V5C0IdlSYCFQV5uxD 6X8uPd//Iz+GysRufK2kK1c9VxyFadNagF5JyePnKuNA8kMOp2Gex6aGzBUDCcS7 58Ls+onKMbaj2r2JON3PX5P6QTG2aVksy1aRCWi2SK8itDMJO7C8NmiiWEuiQrxI DVsB8pBg9LsS4hR9Asegg4xuHiQGgBpli8rqOzvFae7rv5n6PUCB7o2v2QjYpXRD 7epiH0XLKskYQEQgY8jmbbSuqAANUhbgDQc8zdfRnjBn9EB6U46m42jkD/ypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb9C9uorgTE/2IrawK37u6UDrqvwwHwYDVR0j BBgwFoAUAkIfHY8JEUgqO5ZBZ9UpL3tG0qAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY0NDI2M2EtOGVlMi00ZWVjLWE4MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4 RjA5MTE0ODJBM0I5NjQxNjdENTI5MkY3QjQ2RDJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjQyMUYxRDhGMDkxMTQ4MkEzQjk2NDE2N0Q1MjkyRjdCNDZE MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvMDI0MjFGMUQ4RjA5MTE0ODJBM0I5NjQxNjdENTI5 MkY3QjQ2RDJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA23TvwFW9I0l1wAIF0M1vNoQEjQ8PP7eTaw XIkk461WxWMCoynCB/IXEffPwXMqwWMiTWxaaGtOpneU0324RVMU7AamUH+bz9Av UuodmWtY4KDQm12Dfzv7I+QVcebIYE3cia9mlytiWQYmSYx11ah/idDrBwQUH7DJ WfnSxHAyW2lu/JaGYqKSLmq+XhPpZeh9ZLMPzSjWIJ/cpEt1Ot80OZTLuCpialjH ftiyQyXCgB5gmsJP4ArSLK4uqNkCGtm597LVXOIH1ShNJ9DJloiJGXXtFCj+3PWx 7W3GZqn2uDBjIeKhbZZmAEZTY3G6A476J6qns5pYS3yr75BmX+M= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:12 2026 by rpki-client