Forensic expert seeks transfer of Machar’s laptop to China

JUBA – The South African forensic expert who failed to unlock the devices belonging to suspended First Vice President Riek Machar, has on Wednesday asked the special court to authorise the transfer of a laptop belonging to the accused to China for advanced examination, arguing that only a specialised laboratory in the Asian country has the capacity to unlock the device without compromising critical data.

Ratlhogo Peter Calvin Rafadi requested ongoing proceedings in the high-profile trial of Machar and seven other SPLM/A-IO co-accused, who face multiple charges, including murder, conspiracy, terrorism, treason, destruction of public property, and crimes against humanity.

Earlier this week, Rafadi told the court that attempts to extract data from the seized MacBook had been only partially successful due to strong encryption and built-in security protections. Prosecutors believe the laptop may contain communications and documents central to investigations into what they describe as the alleged “Nasir attack plan.”

According to the prosecution, retrieving the data is vital to reconstructing the sequence of events surrounding the March 2025 assault on the Nasir garrison and determining whether there was coordination between the accused and forces on the ground.

Testifying before the court on Wednesday, Rafadi said the device’s security architecture makes it extremely difficult to access without the correct password.

He argued that a certified forensic laboratory in China — where the MacBook was manufactured — possesses the technical expertise and tools required for a secure and comprehensive data recovery process.

“Such a device is very vulnerable to interrogation without a password,” Rafadi told the court. Referring to the laptop’s serial number, which begins with “COZ,” he said this indicates the product was manufactured in China. “That is where the advanced technical tools and certification exist to properly handle such devices.”

He added that both the MacBook and a Samsung Galaxy phone allegedly belonging to Dr Machar are protected by strong encryption systems. While Samsung devices are typically manufactured in India and Vietnam, Rafadi maintained that the MacBook’s origin and technical design make China the most appropriate location for specialised forensic intervention.

Rafadi emphasised that preserving the integrity of the evidence remains paramount. He told the court that he had kept the laptop sealed in a plastic evidence bag and stored securely in his safe to prevent tampering.

“The integrity of this MacBook has to be kept safe,” he said. “If someone attempts to breach the password incorrectly, there is a high likelihood that the data may become irretrievable.”

He warned that Apple devices operate with sophisticated encryption protocols and that repeated or improper attempts to bypass security could trigger mechanisms that render data inaccessible. “Once the encryption system is triggered improperly, the data is 99 per cent not recoverable,” he said.

Defence counsel Deng John Deng raised concerns over discrepancies between the original forensic report and the copy provided to the defence. He told the court that differences in pagination and content could affect their ability to effectively cross-examine the witness.

“As there is a difference between the original and the copy, we pray to this honourable court to avail us a copy of the original report of the eight accused persons to enable the defence to properly cross-examine the witness,” Deng submitted.

Presiding Judge James Alala Deng ruled that the court would print the relevant pages from the original document and provide them to the defence team to ensure procedural fairness.

The session was adjourned until Friday, February 13, 2026, when the defence is expected to begin cross-examining the forensic expert.

Dr Machar and his co-accused are accused of orchestrating the March 2025 attack on the Nasir garrison, allegedly carried out by forces aligned with the Sudan People’s Liberation Movement-in-Opposition (SPLM/A-IO) in collaboration with the White Army.

Prosecutors claim that 257 soldiers of the South Sudan People’s Defence Forces, including Commander General David Majur Dak, were killed in the assault, and that military equipment valued at approximately $58 million was destroyed or seized.

The court’s decision on whether to permit the laptop’s transfer to China could prove pivotal in determining how much digital evidence will ultimately be available in one of the country’s most closely watched trials.