$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: SUSJlIq80/gU4uM5df8aMEAM9pCCDiWPKNG0AA4krMY= Subject key identifier: B0:2A:57:B3:65:9C:F3:37:CA:5B:F1:92:49:C1:31:6A:53:97:3B:C3 Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 717A95B5A57539E4E2EC4B28BEE1B4360EB4FA58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0273 Signing time: Sun 01 Mar 2026 10:18:30 +0000 Manifest this update: Sun 01 Mar 2026 10:13:30 +0000 Manifest next update: Mon 02 Mar 2026 12:19:30 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: efcVz5bHiY4bR6rMa1erbwrlb6bEX8eUC+lelvdNv1I=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: sWQMzSPI6Bg4G4IKisjp9DHougwIrJ9n/xHdiIfWjWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 12:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7a:95:b5:a5:75:39:e4:e2:ec:4b:28:be:e1:b4:36:0e:b4:fa:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Mar 1 10:13:30 2026 GMT Not After : Mar 2 12:19:30 2026 GMT Subject: CN=B02A57B3659CF337CA5BF19249C1316A53973BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c1:73:38:f3:e5:2f:b9:cd:c7:09:e6:e5:ff: 75:0e:a5:bc:33:af:50:25:35:56:81:72:f4:57:93: 3f:59:49:72:ef:b8:e9:3e:92:51:32:09:55:2c:5d: 6b:87:6b:97:f2:b8:cc:10:48:24:f9:38:60:2b:c3: 08:45:7f:67:d5:04:fe:c2:c6:50:c0:26:f0:29:87: 4b:3e:f6:18:20:8a:02:86:7a:34:d9:35:9e:47:cb: 8e:44:66:43:c8:1e:35:b1:69:20:4a:7b:4a:4f:48: a6:82:70:0d:7a:0d:90:10:38:83:fe:fd:ca:9d:a9: 05:d2:0d:ce:0c:df:b6:1c:7c:8e:82:44:c7:4d:02: 9a:63:df:18:70:00:dd:c5:f0:e6:6b:59:e6:69:ea: d6:3f:9f:a0:ad:c0:1c:fb:d1:7f:39:16:9d:63:ec: 5e:a2:5d:5f:e2:e4:a4:5f:5f:16:c9:a5:54:0f:11: 12:df:21:b3:be:dc:1b:0f:df:fb:03:9f:36:da:06: 04:bc:e7:86:da:fe:96:59:8a:9f:51:9d:10:73:83: 46:9a:b1:a5:8c:84:9a:3d:8d:5f:34:61:7c:b7:c1: 7b:aa:87:35:bf:bf:62:5c:20:02:68:c0:99:65:3b: d2:31:d6:3d:7d:90:03:b8:df:39:0e:9a:42:67:1a: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:57:B3:65:9C:F3:37:CA:5B:F1:92:49:C1:31:6A:53:97:3B:C3 X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:66:47:54:65:21:12:3f:dd:63:5e:b7:ec:55:56:35:1f:db: 4e:a3:d8:d1:63:ee:00:3b:b1:5f:c7:ee:f9:16:34:22:b1:cf: a0:9a:a3:a9:7f:5b:3a:df:1b:87:3e:43:89:4e:7a:3e:80:14: 79:2a:10:15:dd:5f:0f:54:29:6b:fa:44:fa:af:7c:f8:13:93: d0:1b:8a:00:35:74:c9:84:00:cc:60:51:9c:c0:22:34:ea:64: f8:39:8a:1b:70:6c:8b:e5:b9:7d:48:7d:2b:58:89:61:ac:cd: 75:ce:f6:dc:74:ae:0c:4d:90:40:5c:61:99:f1:21:e0:8c:08: 36:78:cf:29:0c:ae:5a:41:30:cd:ca:f8:44:dc:78:c5:6a:ae: 5e:19:57:69:49:24:aa:33:96:03:fd:07:b6:6e:47:8b:85:a6: 4f:73:f3:6c:e2:fd:98:c7:1f:95:b0:ca:c0:6b:c1:52:77:d2: 24:b9:69:6e:1c:84:a5:40:cf:5d:8e:8b:dc:81:00:b7:d3:33: 95:e3:7e:72:4f:93:c7:86:64:54:8a:17:26:ac:52:64:d4:47: 92:c5:10:20:7d:35:c7:95:f4:e8:f5:3c:ea:8d:e0:a0:39:1a: 42:ac:a6:95:63:fe:ed:9d:c2:ed:2b:6d:91:6b:a5:c6:75:de: 69:a3:aa:73 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcXqVtaV1OeTi7EsovuG0Ng60+lgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MDMwMTEwMTMzMFoX DTI2MDMwMjEyMTkzMFowMzExMC8GA1UEAxMoQjAyQTU3QjM2NTlDRjMzN0NBNUJG MTkyNDlDMTMxNkE1Mzk3M0JDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOjBczjz5S+5zccJ5uX/dQ6lvDOvUCU1VoFy9FeTP1lJcu+46T6SUTIJVSxd a4drl/K4zBBIJPk4YCvDCEV/Z9UE/sLGUMAm8CmHSz72GCCKAoZ6NNk1nkfLjkRm Q8geNbFpIEp7Sk9IpoJwDXoNkBA4g/79yp2pBdINzgzfthx8joJEx00CmmPfGHAA 3cXw5mtZ5mnq1j+foK3AHPvRfzkWnWPsXqJdX+LkpF9fFsmlVA8REt8hs77cGw/f +wOfNtoGBLznhtr+llmKn1GdEHODRpqxpYyEmj2NXzRhfLfBe6qHNb+/YlwgAmjA mWU70jHWPX2QA7jfOQ6aQmcaSokCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSwKlez ZZzzN8pb8ZJJwTFqU5c7wzAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJxmR1RlIRI/3WNet+xV VjUf206j2NFj7gA7sV/H7vkWNCKxz6Cao6l/WzrfG4c+Q4lOej6AFHkqEBXdXw9U KWv6RPqvfPgTk9AbigA1dMmEAMxgUZzAIjTqZPg5ihtwbIvluX1IfStYiWGszXXO 9tx0rgxNkEBcYZnxIeCMCDZ4zykMrlpBMM3K+ETceMVqrl4ZV2lJJKozlgP9B7Zu R4uFpk9z82zi/ZjHH5WwysBrwVJ30iS5aW4chKVAz12Oi9yBALfTM5XjfnJPk8eG ZFSKFyasUmTUR5LFECB9NceV9Oj1POqN4KA5GkKsppVj/u2dwu0rbZFrpcZ13mmj qnM= -----END CERTIFICATE-----Generated at Sun Mar 1 18:14:52 2026 by rpki-client