$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: 00/8aGnKMkcLfZaoPDHsuU3ZYWZNVF98Jt+1xs5f8gI= Subject key identifier: 54:BA:87:AA:10:9C:2D:C1:05:33:34:0F:B9:68:A4:91:AB:B1:46:01 Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 1E1DABD76EA842950DDCEBCB58B70784710477ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0383 Signing time: Sun 20 Sep 2026 06:47:34 +0000 Manifest this update: Sun 20 Sep 2026 06:42:34 +0000 Manifest next update: Mon 21 Sep 2026 07:36:34 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: 3Kfqr9+njUihBaGoaGOIBTnUx6tM2VVOYBDHNhOpWdE=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: /kUIE99bCsbCmIiQPzpAlxDF+o+xvCZcWPfm8GnkM3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 07:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1d:ab:d7:6e:a8:42:95:0d:dc:eb:cb:58:b7:07:84:71:04:77:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Sep 20 06:42:34 2026 GMT Not After : Sep 21 07:36:34 2026 GMT Subject: CN=54BA87AA109C2DC10533340FB968A491ABB14601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:8f:f7:de:b4:2f:fb:57:0b:f6:53:d3:29: 54:b0:36:1f:5a:d3:66:50:b0:cd:4f:32:a4:ac:16: 3c:35:9e:ac:e7:d9:ee:17:7e:92:e1:35:e2:82:45: 5f:3a:36:93:e9:7f:f9:a9:27:4f:3f:72:42:45:ec: bf:82:6e:e3:a6:5c:94:be:f7:f6:1b:9d:5c:eb:57: 86:a6:e4:05:cc:82:03:89:3e:4c:e9:b5:e7:87:a9: 6a:76:68:e0:72:ab:31:23:3d:8b:03:4a:70:d0:85: fa:7a:09:72:55:ec:91:87:a9:24:92:2d:16:b3:aa: d9:d1:d1:eb:da:1b:5f:a4:b1:49:f8:00:4d:a7:80: 79:ab:9e:aa:9f:23:b2:1c:33:41:3d:0c:00:4a:13: ea:aa:67:6a:40:a4:6d:13:84:14:8a:c2:46:6f:34: d5:c6:c0:88:4e:da:64:c6:aa:c6:4f:ac:0d:f0:50: da:f0:fe:6b:8b:3c:21:e2:e9:1f:ef:9c:97:af:36: 1e:63:7f:c2:29:92:b0:f1:c9:2f:f6:1a:e8:ce:76: f9:aa:da:f4:c8:d0:30:de:10:53:61:13:41:1f:f4: 9a:e6:b1:33:5f:e5:a7:b0:6a:54:b3:46:a6:f7:8d: c4:74:00:0c:af:8f:70:d8:78:40:97:e6:19:ec:fa: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BA:87:AA:10:9C:2D:C1:05:33:34:0F:B9:68:A4:91:AB:B1:46:01 X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6c:33:61:ea:0f:8d:7d:dc:a3:49:0a:7c:98:3a:00:16:d9: 03:85:f2:59:d9:20:7b:44:52:93:c9:d4:40:ab:f2:f7:a8:d1: ce:60:88:0f:31:68:6e:59:fd:10:b5:1d:91:0c:6f:e9:df:8b: 72:bb:ed:b2:93:24:b4:0a:11:10:dc:7f:5c:3a:3f:b2:16:85: 42:6c:36:79:49:6d:1a:04:2e:f3:01:2b:7b:5c:e4:cf:6d:db: 65:8e:c4:a6:f3:46:33:6c:63:6f:47:5e:3b:39:f7:b7:1e:62: 9d:53:56:27:20:01:f1:c3:b7:54:38:7c:22:d2:ec:04:51:8f: 9b:95:bc:d6:17:a7:73:1a:29:37:84:8e:ac:68:93:f5:41:11: 6c:38:3f:5a:70:62:52:9c:60:12:c7:e1:50:f2:31:82:05:69: 40:bb:f3:19:78:84:5d:20:b8:49:e1:9d:0c:7f:67:47:46:54: 5e:3d:71:0d:1b:06:40:16:ba:61:1c:ad:db:06:98:f7:cb:7f: a5:7a:de:88:41:f9:c4:10:04:58:e8:62:d9:cb:21:10:4a:12: 6d:3c:eb:67:0d:6c:07:98:33:ec:cc:4f:2b:01:ad:82:62:f6: 00:a3:6f:a3:0f:ff:d0:c3:9c:81:1b:f3:e1:f2:17:9d:e8:08: 6b:73:b0:cf -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHh2r126oQpUN3OvLWLcHhHEEd+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MDkyMDA2NDIzNFoX DTI2MDkyMTA3MzYzNFowMzExMC8GA1UEAxMoNTRCQTg3QUExMDlDMkRDMTA1MzMz NDBGQjk2OEE0OTFBQkIxNDYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4nj/fetC/7Vwv2U9MpVLA2H1rTZlCwzU8ypKwWPDWerOfZ7hd+kuE14oJF Xzo2k+l/+aknTz9yQkXsv4Ju46ZclL739hudXOtXhqbkBcyCA4k+TOm154epanZo 4HKrMSM9iwNKcNCF+noJclXskYepJJItFrOq2dHR69obX6SxSfgATaeAeaueqp8j shwzQT0MAEoT6qpnakCkbROEFIrCRm801cbAiE7aZMaqxk+sDfBQ2vD+a4s8IeLp H++cl682HmN/wimSsPHJL/Ya6M52+ara9MjQMN4QU2ETQR/0muaxM1/lp7BqVLNG pveNxHQADK+PcNh4QJfmGez6MT8CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRUuoeq EJwtwQUzNA+5aKSRq7FGATAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACBsM2HqD4193KNJCnyY OgAW2QOF8lnZIHtEUpPJ1ECr8veo0c5giA8xaG5Z/RC1HZEMb+nfi3K77bKTJLQK ERDcf1w6P7IWhUJsNnlJbRoELvMBK3tc5M9t22WOxKbzRjNsY29HXjs597ceYp1T VicgAfHDt1Q4fCLS7ARRj5uVvNYXp3MaKTeEjqxok/VBEWw4P1pwYlKcYBLH4VDy MYIFaUC78xl4hF0guEnhnQx/Z0dGVF49cQ0bBkAWumEcrdsGmPfLf6V63ohB+cQQ BFjoYtnLIRBKEm0862cNbAeYM+zMTysBrYJi9gCjb6MP/9DDnIEb8+HyF53oCGtz sM8= -----END CERTIFICATE-----Generated at Sun Sep 20 23:54:17 2026 by rpki-client