$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: QUZCQxr52HQMKphQ+eCBMRR4yZrCYF3lSUSCQlvhux8= Subject key identifier: C2:B3:1C:2D:16:64:93:EF:F9:95:9B:8B:C2:E9:CF:AC:27:3C:5D:80 Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 435D5DF631BB5C8A15C1AA4B59F7F97C189CCDF6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0304 Signing time: Wed 17 Jun 2026 02:32:07 +0000 Manifest this update: Wed 17 Jun 2026 02:27:07 +0000 Manifest next update: Thu 18 Jun 2026 05:57:07 +0000 Files and hashes: 1: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: /kUIE99bCsbCmIiQPzpAlxDF+o+xvCZcWPfm8GnkM3k=) 2: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: Xf0iNznaPQb63kEwvJrgLtW6AAAQfVakiGtSpFUzymA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 05:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5d:5d:f6:31:bb:5c:8a:15:c1:aa:4b:59:f7:f9:7c:18:9c:cd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Jun 17 02:27:07 2026 GMT Not After : Jun 18 05:57:07 2026 GMT Subject: CN=C2B31C2D166493EFF9959B8BC2E9CFAC273C5D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:85:17:a9:62:38:97:c5:50:a5:d6:7e:08: c9:6b:b6:0c:94:d6:61:da:40:98:74:7d:ce:c3:4d: 31:32:47:d0:28:4f:d4:a7:7e:23:f3:86:7e:69:94: f3:08:ac:3c:06:32:91:29:62:68:6e:41:14:7e:b6: 74:f8:1a:55:2c:33:c8:7f:55:1d:c3:1e:62:4e:b1: b7:c7:54:29:6d:5e:61:6f:e8:fa:54:24:67:fc:6b: 8e:b9:69:a6:2a:07:51:4a:52:1f:97:ef:63:62:cf: 34:ea:db:f7:7f:4a:ab:e6:29:47:f9:f1:fa:f1:de: be:4f:54:14:19:4c:bd:15:d7:85:e4:b1:53:e1:6a: 2d:27:da:34:98:72:1f:a6:dc:a1:bd:6b:3c:3b:fa: 39:5b:ee:67:59:5e:b3:fa:11:80:4d:e1:6f:f7:63: 01:56:80:cc:56:09:34:13:83:0d:e0:63:ba:c5:dc: 68:a7:0f:90:34:bb:99:e1:08:96:8a:d2:4b:03:a5: ed:9e:83:47:b5:9e:14:f2:5f:73:36:4c:00:af:a7: 00:e9:64:21:37:1c:35:4c:c0:15:0b:2f:f9:7a:fe: da:e1:c3:2a:17:55:99:b8:47:9b:a7:be:cb:aa:8f: 12:14:51:a9:cb:d3:42:6f:7a:a3:1f:91:44:dc:20: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B3:1C:2D:16:64:93:EF:F9:95:9B:8B:C2:E9:CF:AC:27:3C:5D:80 X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:48:12:37:e3:6b:37:70:43:b6:fb:4e:70:d5:27:8a:99:3a: d6:60:64:09:7a:4a:0d:f3:af:45:eb:e4:a5:98:87:7d:ca:00: 21:d7:9f:e3:23:44:59:19:4c:f6:8c:ec:09:b1:ad:e8:51:ad: a6:11:29:f9:3a:53:6d:d5:83:96:70:dd:4d:6f:91:63:79:cc: e2:9c:7d:89:28:12:c7:6f:e3:51:22:5d:e4:6c:8d:24:b6:bc: 3e:dd:86:3e:3c:11:2f:9e:b0:4f:b8:49:b5:02:25:13:ca:09: 9a:13:99:7b:05:20:23:1d:18:ee:f2:e2:dc:b5:14:ca:33:80: 11:d0:83:18:89:46:b8:50:7c:0d:aa:24:29:ee:66:f7:76:21: b4:37:99:41:75:75:dd:25:cf:77:2b:be:b6:f3:c7:ff:d9:b1: 6c:6f:0a:01:ae:a3:d7:ee:22:f8:4c:68:d1:01:e3:54:d4:3a: d2:df:2a:1a:51:3d:06:39:08:ee:20:32:aa:67:c8:4d:2c:aa: 2b:6d:6b:3f:e2:3b:73:f1:fb:56:30:55:3e:10:9a:49:88:c4: 5e:61:ad:8f:de:17:8f:78:49:e0:b0:5c:09:1f:ad:71:fb:ae: 97:e0:67:6b:32:3e:28:b9:22:93:92:78:f8:20:37:82:63:dd: 21:4f:c5:1b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQ11d9jG7XIoVwapLWff5fBiczfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MDYxNzAyMjcwN1oX DTI2MDYxODA1NTcwN1owMzExMC8GA1UEAxMoQzJCMzFDMkQxNjY0OTNFRkY5OTU5 QjhCQzJFOUNGQUMyNzNDNUQ4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpEhRepYjiXxVCl1n4IyWu2DJTWYdpAmHR9zsNNMTJH0ChP1Kd+I/OGfmmU 8wisPAYykSliaG5BFH62dPgaVSwzyH9VHcMeYk6xt8dUKW1eYW/o+lQkZ/xrjrlp pioHUUpSH5fvY2LPNOrb939Kq+YpR/nx+vHevk9UFBlMvRXXheSxU+FqLSfaNJhy H6bcob1rPDv6OVvuZ1les/oRgE3hb/djAVaAzFYJNBODDeBjusXcaKcPkDS7meEI lorSSwOl7Z6DR7WeFPJfczZMAK+nAOlkITccNUzAFQsv+Xr+2uHDKhdVmbhHm6e+ y6qPEhRRqcvTQm96ox+RRNwgYAkCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTCsxwt FmST7/mVm4vC6c+sJzxdgDAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHdIEjfjazdwQ7b7TnDV J4qZOtZgZAl6Sg3zr0Xr5KWYh33KACHXn+MjRFkZTPaM7AmxrehRraYRKfk6U23V g5Zw3U1vkWN5zOKcfYkoEsdv41EiXeRsjSS2vD7dhj48ES+esE+4SbUCJRPKCZoT mXsFICMdGO7y4ty1FMozgBHQgxiJRrhQfA2qJCnuZvd2IbQ3mUF1dd0lz3crvrbz x//ZsWxvCgGuo9fuIvhMaNEB41TUOtLfKhpRPQY5CO4gMqpnyE0sqittaz/iO3Px +1YwVT4QmkmIxF5hrY/eF494SeCwXAkfrXH7rpfgZ2syPii5IpOSePggN4Jj3SFP xRs= -----END CERTIFICATE-----Generated at Wed Jun 17 09:18:36 2026 by rpki-client