$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: H3LYJbLAcnqDxqUxb4QH49FTCsgnNH4eAXfIcqInIKQ= Subject key identifier: 12:8D:A1:7F:0A:CC:D1:D4:E0:7D:B9:3A:21:A5:97:63:54:A1:15:75 Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 204FAD7202A9DE9473C741C91D7398C325A4EC73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0387 Signing time: Wed 23 Sep 2026 03:57:43 +0000 Manifest this update: Wed 23 Sep 2026 03:52:43 +0000 Manifest next update: Thu 24 Sep 2026 04:33:43 +0000 Files and hashes: 1: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: /kUIE99bCsbCmIiQPzpAlxDF+o+xvCZcWPfm8GnkM3k=) 2: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: Z/2VcwVIwO5umVQ/D70inpV4S0roqn9pQDgMdAojTcU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4f:ad:72:02:a9:de:94:73:c7:41:c9:1d:73:98:c3:25:a4:ec:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Sep 23 03:52:43 2026 GMT Not After : Sep 24 04:33:43 2026 GMT Subject: CN=128DA17F0ACCD1D4E07DB93A21A5976354A11575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:51:05:3d:15:c0:ba:d4:cc:c2:f1:36:a4: 3c:fd:3c:ef:d0:8f:35:11:8f:32:df:f5:71:af:9f: 57:82:45:c5:f1:cf:0a:c9:33:d3:c5:22:76:02:e5: fa:97:b9:b2:7f:f3:a6:cb:89:ff:33:c4:64:7d:21: f3:ff:de:e6:d0:f0:11:73:43:83:b9:44:0a:f5:aa: 49:9b:18:23:ef:8e:c7:ad:f3:c7:48:e3:21:d2:6f: 1c:ca:21:82:62:5d:3d:96:01:4d:1d:92:20:f5:53: 2d:50:a8:3c:00:ac:6c:f3:56:6c:9f:8f:bb:b9:fc: af:89:f8:14:dc:db:c0:0c:a0:e9:c6:cf:29:16:03: 7e:4b:28:ca:67:64:81:da:ea:d0:cc:99:13:4e:a9: 0e:68:08:d8:b7:96:89:b1:80:69:9e:dd:0c:a3:90: 2e:79:32:12:13:e0:a9:f7:83:33:8a:7f:19:06:33: d9:63:35:f9:af:65:e8:1b:fc:6a:cb:02:62:e6:2b: 3a:ca:4e:d1:58:c3:1e:6c:62:1c:24:1a:bb:cb:fb: 64:b3:b8:8e:75:38:aa:04:0a:28:76:16:bd:5a:89: f3:c6:5c:0b:ca:6f:95:6d:c1:c3:c5:c5:9e:60:1d: 3f:5b:c1:a6:fe:45:ab:d6:f5:65:2d:60:0d:70:50: 5b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:A1:7F:0A:CC:D1:D4:E0:7D:B9:3A:21:A5:97:63:54:A1:15:75 X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:e7:5d:da:c2:d0:94:52:5b:7e:30:ea:77:52:2c:19:9b:8b: 09:92:6e:23:4d:4d:38:5e:62:15:23:9f:57:62:44:e7:73:ab: 35:2d:2a:f7:4d:95:83:9a:0e:a3:63:6d:3f:73:4e:b4:ac:b8: 6f:bb:1f:97:15:c1:dc:b8:99:67:5f:9d:7d:51:71:dd:b2:d9: 73:ee:57:c3:f1:5f:d7:67:7f:d7:81:a6:3f:8c:67:b6:7d:8b: 8a:56:ae:6e:ad:6c:6c:ef:90:6d:c3:46:fe:fd:92:4d:1e:eb: bf:ee:3c:79:25:12:3f:3c:74:18:0a:67:52:35:76:5a:42:82: e2:64:24:ac:4a:66:4a:fd:c4:24:40:aa:5a:a0:76:24:ce:65: 9d:f1:83:2d:e0:76:76:10:f5:59:27:c6:06:fa:93:3a:7b:1a: 5d:c7:d3:84:88:fb:5a:74:5c:13:25:db:6f:70:a7:b1:4b:f2: 50:ba:fb:09:4c:ab:06:48:3c:84:a9:c8:38:c6:6c:3a:4f:2f: 81:5f:94:04:ca:96:97:85:fc:1b:c1:98:e8:aa:69:cc:09:58: d2:33:b3:b5:97:c2:35:62:55:0c:5c:17:f0:b0:f4:dc:ff:6e: 1d:19:38:36:1f:76:79:61:f7:5e:24:ca:52:c2:40:22:f9:02: 6f:db:88:13 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIE+tcgKp3pRzx0HJHXOYwyWk7HMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MDkyMzAzNTI0M1oX DTI2MDkyNDA0MzM0M1owMzExMC8GA1UEAxMoMTI4REExN0YwQUNDRDFENEUwN0RC OTNBMjFBNTk3NjM1NEExMTU3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3zUQU9FcC61MzC8TakPP0879CPNRGPMt/1ca+fV4JFxfHPCskz08UidgLl +pe5sn/zpsuJ/zPEZH0h8//e5tDwEXNDg7lECvWqSZsYI++Ox63zx0jjIdJvHMoh gmJdPZYBTR2SIPVTLVCoPACsbPNWbJ+Pu7n8r4n4FNzbwAyg6cbPKRYDfksoymdk gdrq0MyZE06pDmgI2LeWibGAaZ7dDKOQLnkyEhPgqfeDM4p/GQYz2WM1+a9l6Bv8 assCYuYrOspO0VjDHmxiHCQau8v7ZLO4jnU4qgQKKHYWvVqJ88ZcC8pvlW3Bw8XF nmAdP1vBpv5Fq9b1ZS1gDXBQW+kCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQSjaF/ CszR1OB9uTohpZdjVKEVdTAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM3nXdrC0JRSW34w6ndS LBmbiwmSbiNNTTheYhUjn1diROdzqzUtKvdNlYOaDqNjbT9zTrSsuG+7H5cVwdy4 mWdfnX1Rcd2y2XPuV8PxX9dnf9eBpj+MZ7Z9i4pWrm6tbGzvkG3DRv79kk0e67/u PHklEj88dBgKZ1I1dlpCguJkJKxKZkr9xCRAqlqgdiTOZZ3xgy3gdnYQ9Vknxgb6 kzp7Gl3H04SI+1p0XBMl229wp7FL8lC6+wlMqwZIPISpyDjGbDpPL4FflATKlpeF /BvBmOiqacwJWNIzs7WXwjViVQxcF/Cw9Nz/bh0ZODYfdnlh914kylLCQCL5Am/b iBM= -----END CERTIFICATE-----Generated at Wed Sep 23 10:03:40 2026 by rpki-client