$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: p2rmOj51fxRaoVIWDgS5TGp4Zjq9SUDmnQOXkIqy6Hc= Subject key identifier: 5D:B3:CB:BA:4B:F1:AD:B5:FD:E8:F0:2F:92:00:42:0D:CE:31:05:4A Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 20499A2AA14FBF301EB626DEE5A16EBD6D22875D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 02D3 Signing time: Tue 12 May 2026 06:32:57 +0000 Manifest this update: Tue 12 May 2026 06:27:57 +0000 Manifest next update: Wed 13 May 2026 10:16:57 +0000 Files and hashes: 1: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: sWQMzSPI6Bg4G4IKisjp9DHougwIrJ9n/xHdiIfWjWY=) 2: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: qd3a97PntfpV8lXetTAW4JaBa14eGWw9Dj2w+HxtQCU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:49:9a:2a:a1:4f:bf:30:1e:b6:26:de:e5:a1:6e:bd:6d:22:87:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: May 12 06:27:57 2026 GMT Not After : May 13 10:16:57 2026 GMT Subject: CN=5DB3CBBA4BF1ADB5FDE8F02F9200420DCE31054A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:b8:af:58:91:de:a2:0f:34:4e:2d:bc:ba: 40:80:40:84:b7:a5:4d:42:83:eb:da:65:a2:8b:83: da:05:6e:24:1d:5b:fa:b1:01:cc:3b:98:cd:03:90: 21:4f:55:f7:2f:46:23:9a:02:b6:34:16:3d:b6:e9: a2:50:4c:12:88:b5:4a:e7:9a:70:e7:2d:0f:07:1b: 5b:9d:13:ae:a0:e9:f6:21:5b:e4:91:32:b6:0f:84: 3f:0c:c9:8b:6f:f9:2f:ed:79:10:82:02:85:48:53: 7b:74:d2:67:e0:f0:73:4a:6f:55:e1:71:1a:2b:74: 4b:c4:cb:73:6f:55:b2:12:b6:d6:ee:31:6a:a0:1f: d6:92:53:d1:e3:4c:e7:5d:76:0e:3f:91:8b:62:07: 0a:71:49:16:7a:5f:b2:f2:57:8d:6e:6e:45:97:9e: 14:a4:9e:b1:e8:52:36:5b:fb:60:b5:98:a2:8c:58: da:e8:f2:df:3a:21:da:34:0a:89:02:d5:ae:70:0b: 86:bd:3c:4d:b0:5b:55:05:ca:d6:1b:e0:1e:4e:c1: bc:a3:b9:ca:39:c2:ca:89:9f:43:e5:c8:66:68:40: f0:45:48:08:16:94:ce:b6:e1:d1:f0:dc:62:19:53: 29:8f:d9:7e:5f:21:1c:56:1d:83:ac:70:e6:ea:62: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B3:CB:BA:4B:F1:AD:B5:FD:E8:F0:2F:92:00:42:0D:CE:31:05:4A X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bb:8b:38:e3:d2:02:ad:e7:fe:63:56:e8:9f:4e:8a:99:1e: 8d:07:31:c0:2b:f9:4c:49:fd:32:94:92:7e:c3:4d:c8:7e:ef: 91:d0:50:ca:c6:d6:ca:85:9a:18:37:e1:e3:ff:29:7d:82:b0: 96:76:bc:1f:24:ff:33:fb:10:5d:55:89:b7:27:3a:b9:02:20: a5:e0:f4:39:ff:a5:87:e9:84:d9:a7:37:7f:fa:85:54:90:d7: e3:dc:e2:13:52:0a:2c:e5:13:5b:bd:22:c3:fb:7f:fc:36:37: 2e:f6:1e:f1:10:7c:9b:72:d8:af:e7:90:6e:6f:83:a9:35:15: 99:7c:e0:65:46:ac:3b:07:1d:2e:1d:90:d0:de:a5:97:84:64: bd:de:f9:92:db:86:9f:a6:58:20:c3:7f:8e:1d:96:bb:81:45: 40:f7:ea:6e:24:5f:57:a8:5c:4c:00:ca:8c:fd:d0:e9:11:4d: 43:65:db:2c:05:09:5d:af:90:22:7c:4d:f8:de:37:68:04:e9: d9:54:dd:c9:d9:ec:3c:e5:ea:17:1f:c3:dc:77:79:02:bc:d3: db:2f:4c:f8:77:49:f2:72:7d:86:ec:c9:f1:3e:3d:a6:59:4c: 35:0e:37:d9:b1:40:b3:d9:af:19:85:81:01:4a:50:75:c2:4b: 2e:56:05:9c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIEmaKqFPvzAetibe5aFuvW0ih10wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MDUxMjA2Mjc1N1oX DTI2MDUxMzEwMTY1N1owMzExMC8GA1UEAxMoNURCM0NCQkE0QkYxQURCNUZERThG MDJGOTIwMDQyMERDRTMxMDU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfeuK9Ykd6iDzROLby6QIBAhLelTUKD69ploouD2gVuJB1b+rEBzDuYzQOQ IU9V9y9GI5oCtjQWPbbpolBMEoi1SueacOctDwcbW50TrqDp9iFb5JEytg+EPwzJ i2/5L+15EIIChUhTe3TSZ+Dwc0pvVeFxGit0S8TLc29VshK21u4xaqAf1pJT0eNM 5112Dj+Ri2IHCnFJFnpfsvJXjW5uRZeeFKSesehSNlv7YLWYooxY2ujy3zoh2jQK iQLVrnALhr08TbBbVQXK1hvgHk7BvKO5yjnCyomfQ+XIZmhA8EVICBaUzrbh0fDc YhlTKY/Zfl8hHFYdg6xw5upiNCUCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRds8u6 S/Gttf3o8C+SAEINzjEFSjAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAe7izjj0gKt5/5jVuif ToqZHo0HMcAr+UxJ/TKUkn7DTch+75HQUMrG1sqFmhg34eP/KX2CsJZ2vB8k/zP7 EF1VibcnOrkCIKXg9Dn/pYfphNmnN3/6hVSQ1+Pc4hNSCizlE1u9IsP7f/w2Ny72 HvEQfJty2K/nkG5vg6k1FZl84GVGrDsHHS4dkNDepZeEZL3e+ZLbhp+mWCDDf44d lruBRUD36m4kX1eoXEwAyoz90OkRTUNl2ywFCV2vkCJ8TfjeN2gE6dlU3cnZ7Dzl 6hcfw9x3eQK809svTPh3SfJyfYbsyfE+PaZZTDUON9mxQLPZrxmFgQFKUHXCSy5W BZw= -----END CERTIFICATE-----Generated at Wed May 13 03:10:56 2026 by rpki-client