$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft File: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft (raw, json) Hash identifier: q4oTw/+tiaQLQeSTikdDVc16ZryCr7W2QCVy9sXeI0U= Subject key identifier: DF:73:2B:2E:DF:62:F3:10:3E:5C:2F:8B:6E:B3:5F:81:25:1A:AF:C3 Authority key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 Certificate issuer: /CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Certificate serial: 0D8F751EF8D9E14AD5B00566709F964363A14811 Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft Manifest number: 2C Signing time: Tue 28 Jul 2026 16:57:56 +0000 Manifest this update: Tue 28 Jul 2026 16:52:56 +0000 Manifest next update: Wed 29 Jul 2026 19:02:56 +0000 Files and hashes: 1: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl (hash: mLnEbbJBJiRwK5BB4K9SY6G/CW0v7tfz1N0mEgzorVI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8f:75:1e:f8:d9:e1:4a:d5:b0:05:66:70:9f:96:43:63:a1:48:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Validity Not Before: Jul 28 16:52:56 2026 GMT Not After : Jul 29 19:02:56 2026 GMT Subject: CN=DF732B2EDF62F3103E5C2F8B6EB35F81251AAFC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:1e:75:69:d6:11:77:ef:8c:7d:51:3c:9a: 55:1a:21:aa:b4:a5:d5:08:f6:56:dc:ca:31:2c:6c: 85:b5:6b:49:f4:69:06:25:ff:33:89:90:54:ec:dc: 0b:b2:a9:1c:e7:39:70:6b:c8:16:69:df:71:06:75: 74:67:e5:10:ad:1c:79:a7:59:b6:6e:4d:39:67:06: b1:1e:c8:53:62:9a:aa:65:3e:50:79:99:ed:6a:88: 37:8c:e9:a0:33:ba:70:51:39:c3:8a:06:de:12:f6: de:32:dc:9f:38:2b:96:51:ab:b7:db:e6:75:2d:85: 72:35:85:c9:23:f3:f7:34:01:f1:28:73:e8:af:2e: f0:95:8f:ec:57:f0:44:49:c2:87:16:b5:7b:54:cf: 82:85:7f:cb:f5:bd:73:c2:b3:98:25:99:f5:e1:37: 44:b9:4e:4b:7a:5f:c3:9c:41:a5:82:4a:0a:3b:db: 45:18:8f:15:3d:fe:4f:56:8e:ad:ef:90:19:7c:97: 42:5a:8f:67:14:a1:30:3a:62:37:ec:94:59:54:5b: b2:ec:b8:25:d8:a0:56:3d:df:cc:1d:f9:e9:b4:84: 87:19:2a:ed:6f:4d:08:4c:71:11:95:ca:c1:d5:b4: bc:e7:88:34:b4:e5:b8:bc:bb:12:42:60:d0:f4:0b: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:73:2B:2E:DF:62:F3:10:3E:5C:2F:8B:6E:B3:5F:81:25:1A:AF:C3 X509v3 Authority Key Identifier: keyid:64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a6:9f:5d:23:d7:13:46:01:97:ee:b1:6a:1a:dc:eb:f5:e6: 8c:be:22:29:fa:43:6b:67:ad:ec:64:68:58:48:ee:85:4b:0f: d0:36:94:82:0a:8d:ca:12:16:68:41:5e:57:37:a4:12:7c:0c: 2b:dc:b3:22:e8:12:de:8d:d4:19:02:27:6b:ec:b5:19:74:97: 1a:be:6a:05:66:b0:96:80:28:95:53:ff:02:3e:ff:59:b4:d2: f5:15:ef:a2:14:1f:32:d0:17:29:cd:a7:f7:a4:d0:b9:e8:46: e2:bb:85:0b:98:12:54:a9:93:c7:70:ee:9f:09:d3:c5:bf:ce: 7b:f3:5d:61:ab:d0:30:33:38:44:8f:83:f8:22:ff:66:6e:da: da:2f:49:bc:d8:6a:8b:43:59:eb:00:90:4c:a6:cd:06:91:20: 3e:7d:bc:b1:42:ba:8a:a2:19:37:99:d4:8f:df:b9:89:79:a2: 91:2c:e5:7e:6b:2d:a6:ca:19:b7:7a:80:1d:dd:60:83:6b:98: 5f:75:46:a5:01:d4:57:9d:d4:36:a6:ac:26:ad:21:6e:ca:f5: 96:9b:e3:91:7c:e8:e9:8e:96:b1:9c:07:ae:07:37:1a:03:ac: e7:d8:bb:1f:f3:21:0f:7e:0e:c2:97:b9:ec:20:97:93:a0:6b: af:74:59:8a -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUDY91HvjZ4UrVsAVmcJ+WQ2OhSBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NURE MEE3QzdCNTAeFw0yNjA3MjgxNjUyNTZaFw0yNjA3MjkxOTAyNTZaMDMxMTAvBgNV BAMTKERGNzMyQjJFREY2MkYzMTAzRTVDMkY4QjZFQjM1RjgxMjUxQUFGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1x51adYRd++MfVE8mlUaIaq0 pdUI9lbcyjEsbIW1a0n0aQYl/zOJkFTs3AuyqRznOXBryBZp33EGdXRn5RCtHHmn WbZuTTlnBrEeyFNimqplPlB5me1qiDeM6aAzunBROcOKBt4S9t4y3J84K5ZRq7fb 5nUthXI1hckj8/c0AfEoc+ivLvCVj+xX8ERJwocWtXtUz4KFf8v1vXPCs5glmfXh N0S5Tkt6X8OcQaWCSgo720UYjxU9/k9Wjq3vkBl8l0Jaj2cUoTA6YjfslFlUW7Ls uCXYoFY938wd+em0hIcZKu1vTQhMcRGVysHVtLzniDS05bi8uxJCYND0C7/BAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU33MrLt9i8xA+XC+LbrNfgSUar8MwHwYDVR0j BBgwFoAUZC3T4aEizqEK7wrJu8goXdCnx7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5j cmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFyc3luYzovL3Jwa2kuc3Vi LmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUwRTREMDAwMC8wLzY0MkREM0UxQTEy MkNFQTEwQUVGMEFDOUJCQzgyODVERDBBN0M3QjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBADemn10j1xNGAZfusWoa3Ov15oy+Iin6Q2tnrexkaFhI7oVLD9A2 lIIKjcoSFmhBXlc3pBJ8DCvcsyLoEt6N1BkCJ2vstRl0lxq+agVmsJaAKJVT/wI+ /1m00vUV76IUHzLQFynNp/ek0LnoRuK7hQuYElSpk8dw7p8J08W/znvzXWGr0DAz OESPg/gi/2Zu2tovSbzYaotDWesAkEymzQaRID59vLFCuoqiGTeZ1I/fuYl5opEs 5X5rLabKGbd6gB3dYINrmF91RqUB1Fed1DamrCatIW7K9Zab45F86OmOlrGcB64H NxoDrOfYux/zIQ9+DsKXuewgl5Oga690WYo= -----END CERTIFICATE-----Generated at Tue Jul 28 18:03:25 2026 by rpki-client