$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: Gj5oyyBS23S6jhOQmZDOR8XNFUvmifISGAPYQH/Td+Q= Subject key identifier: F7:D3:89:C7:2E:E9:1F:C4:00:3A:E7:93:E0:11:9A:AC:17:DF:D9:59 Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 17264F40A4B9E309781115DB7E9CC2557D016B89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0293 Signing time: Wed 25 Mar 2026 15:10:48 +0000 Manifest this update: Wed 25 Mar 2026 15:05:48 +0000 Manifest next update: Thu 26 Mar 2026 15:55:48 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: CnQRXZ92+ojakZ4LIBiEj/AGk1ddh7MnW+cCmQgptkg=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: sWQMzSPI6Bg4G4IKisjp9DHougwIrJ9n/xHdiIfWjWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 15:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:26:4f:40:a4:b9:e3:09:78:11:15:db:7e:9c:c2:55:7d:01:6b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Mar 25 15:05:48 2026 GMT Not After : Mar 26 15:55:48 2026 GMT Subject: CN=F7D389C72EE91FC4003AE793E0119AAC17DFD959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:f4:c3:f1:49:6a:06:e1:36:01:22:ee:42: a4:0d:2b:30:0c:2b:a2:c0:36:e7:98:0f:57:4c:ab: 94:a6:90:85:e1:ea:11:48:b8:c9:7d:f9:e8:66:c4: 27:72:5c:9b:e7:b1:aa:95:d2:ea:14:5c:b0:54:9e: ab:e3:f1:79:d4:ad:fe:fe:34:25:47:a0:75:77:97: 58:38:c8:d1:b3:a2:97:92:5c:e2:94:84:bb:57:c6: 39:40:c3:76:ac:b9:40:b8:21:48:70:80:80:92:cc: 46:d0:34:de:df:7c:a9:8d:7f:51:0e:5f:27:d7:ae: d5:25:bc:e4:b6:83:a4:55:40:8d:ec:86:56:45:12: 09:a6:31:af:e0:dd:fe:f3:50:d9:e8:69:c5:54:39: aa:f1:50:c0:5c:32:c6:1e:2b:2c:85:a6:a5:6e:33: 20:b1:6b:e7:64:6c:e4:88:ef:14:fb:03:a1:35:fb: ba:7e:f0:2c:92:5d:80:80:36:82:c4:06:90:11:35: f1:43:c5:cc:3a:d1:c8:a2:7c:39:e9:26:15:6a:db: 30:1c:c0:5b:81:a8:37:cd:85:2d:52:51:3b:8e:a5: 9f:bc:6c:64:d0:89:67:58:10:3e:f9:ba:3f:df:64: 8b:df:c0:2f:26:b5:17:d7:e5:dd:3a:55:58:a1:38: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D3:89:C7:2E:E9:1F:C4:00:3A:E7:93:E0:11:9A:AC:17:DF:D9:59 X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:48:99:d8:d9:01:f1:0a:69:20:aa:76:f2:82:d8:f0:a5:ba: 23:18:28:f4:65:ac:c2:51:5d:03:d7:71:3f:6b:c9:6d:6b:cd: 30:9a:b3:e0:ff:be:d1:a2:5e:fe:55:ba:f9:46:84:22:97:eb: b6:f2:65:e5:33:02:36:6a:2f:ac:60:19:24:08:df:0f:16:97: 55:b2:fb:3c:e9:3e:66:68:43:9a:a0:d6:b6:49:58:2a:51:71: 21:37:ca:1f:0c:e5:20:a2:27:8a:95:ea:7a:b4:72:32:1a:ba: 90:30:d3:f1:e0:2d:ef:0b:92:75:6f:f8:ab:b1:01:04:11:55: dd:4b:83:36:34:c5:07:10:8f:bd:b7:54:4e:86:71:b0:15:9c: 6e:31:8c:72:f8:b3:a4:bc:52:b3:f4:ab:31:33:f1:b1:1b:1e: 9e:c1:97:cd:cb:21:84:95:6d:ad:33:4a:6d:6b:50:10:2c:3d: 8c:20:31:f1:d4:31:66:f9:59:64:b3:7d:4f:5f:ee:87:76:ae: dd:ee:cc:26:f6:f5:17:6f:c4:3b:3a:db:ce:bf:e0:8a:15:02: 08:d6:8c:9e:f4:b5:2c:6d:71:ac:bc:cd:26:c5:4b:eb:e2:9e: 66:dc:67:57:77:b6:f8:16:ae:25:1d:d3:23:16:47:2a:68:20: 62:ac:7f:c7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUFyZPQKS54wl4ERXbfpzCVX0Ba4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MDMyNTE1MDU0OFoX DTI2MDMyNjE1NTU0OFowMzExMC8GA1UEAxMoRjdEMzg5QzcyRUU5MUZDNDAwM0FF NzkzRTAxMTlBQUMxN0RGRDk1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrR9MPxSWoG4TYBIu5CpA0rMAwrosA255gPV0yrlKaQheHqEUi4yX356GbE J3Jcm+exqpXS6hRcsFSeq+PxedSt/v40JUegdXeXWDjI0bOil5Jc4pSEu1fGOUDD dqy5QLghSHCAgJLMRtA03t98qY1/UQ5fJ9eu1SW85LaDpFVAjeyGVkUSCaYxr+Dd /vNQ2ehpxVQ5qvFQwFwyxh4rLIWmpW4zILFr52Rs5IjvFPsDoTX7un7wLJJdgIA2 gsQGkBE18UPFzDrRyKJ8OekmFWrbMBzAW4GoN82FLVJRO46ln7xsZNCJZ1gQPvm6 P99ki9/ALya1F9fl3TpVWKE4qVcCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBT304nH LukfxAA655PgEZqsF9/ZWTAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJJImdjZAfEKaSCqdvKC 2PCluiMYKPRlrMJRXQPXcT9ryW1rzTCas+D/vtGiXv5VuvlGhCKX67byZeUzAjZq L6xgGSQI3w8Wl1Wy+zzpPmZoQ5qg1rZJWCpRcSE3yh8M5SCiJ4qV6nq0cjIaupAw 0/HgLe8LknVv+KuxAQQRVd1LgzY0xQcQj723VE6GcbAVnG4xjHL4s6S8UrP0qzEz 8bEbHp7Bl83LIYSVba0zSm1rUBAsPYwgMfHUMWb5WWSzfU9f7od2rt3uzCb29Rdv xDs6286/4IoVAgjWjJ70tSxtcay8zSbFS+vinmbcZ1d3tvgWriUd0yMWRypoIGKs f8c= -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:09 2026 by rpki-client