$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: vrwhGlqnGeNcdMmIuA/QgMv2hQ5hyp+jITykhDufaeI= Subject key identifier: A7:4B:9C:29:6C:3B:76:B4:6C:50:C8:06:8E:E5:C1:CF:06:83:D5:C3 Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 50F455AC9F78E0BA3DFE7FE025C7AE346626EF19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 01F4 Signing time: Mon 20 Oct 2025 06:50:54 +0000 Manifest this update: Mon 20 Oct 2025 06:45:54 +0000 Manifest next update: Tue 21 Oct 2025 07:55:54 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: PcK1BEYnvZdiPjrQE7Fya6SQw/UbhsEBP1n8aYgpGw8=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: sWQMzSPI6Bg4G4IKisjp9DHougwIrJ9n/xHdiIfWjWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 07:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f4:55:ac:9f:78:e0:ba:3d:fe:7f:e0:25:c7:ae:34:66:26:ef:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Oct 20 06:45:54 2025 GMT Not After : Oct 21 07:55:54 2025 GMT Subject: CN=A74B9C296C3B76B46C50C8068EE5C1CF0683D5C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:f7:2b:74:a1:5e:08:68:93:cf:a5:da:48: da:5d:53:91:41:8b:4f:d4:72:8d:17:e0:11:e3:00: eb:5b:0b:0e:3c:36:0b:48:8c:25:70:d6:5a:42:ad: fd:47:69:ec:7f:da:ff:49:64:1f:56:3c:b9:f0:71: 3c:44:40:0a:3f:26:6b:4a:22:44:a4:74:5a:d2:92: 67:ca:55:b4:08:89:72:3b:d9:c8:d1:a8:c9:b0:b2: 90:38:38:6e:e8:05:5f:a9:5a:cc:a9:08:d6:ea:5d: d7:03:56:a1:fb:56:e2:20:1a:5f:73:5b:54:55:6b: de:00:57:98:e5:6f:64:ad:e7:f8:f0:e8:06:a1:91: 5f:a1:35:f3:d7:10:df:8f:6c:a8:0b:a8:93:0c:76: 0d:c8:c2:3b:34:ea:fb:b3:32:36:4a:6f:a2:6b:f1: 72:8e:94:43:cf:da:4d:81:10:f1:ee:4f:bd:17:12: b8:e3:92:75:4b:08:d4:66:66:0d:3a:29:33:aa:fe: ae:e0:9c:2d:0f:a3:d4:de:db:17:d9:fd:db:b4:eb: 94:ea:09:e0:6f:38:20:4c:0b:a8:32:81:f6:2e:6e: 10:77:5f:b1:d3:07:65:8f:a8:0b:13:1b:dd:4b:f8: 35:11:25:d1:9c:ab:67:e3:de:60:ae:0e:b3:20:9c: 90:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:9C:29:6C:3B:76:B4:6C:50:C8:06:8E:E5:C1:CF:06:83:D5:C3 X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:30:52:3f:db:98:5e:9f:62:83:45:90:16:b9:c9:6a:e4:f0: d9:78:99:f1:36:55:51:bf:b2:4a:05:f2:38:9e:1d:22:ce:9d: 24:a8:a4:3f:7c:f6:15:b1:e2:cc:8c:02:b3:7e:81:5c:54:9b: 52:a4:e9:48:d4:16:a5:87:4c:2b:d7:bf:35:23:8a:99:7e:4a: a1:65:a3:66:60:c8:8b:76:e8:19:f2:f4:44:60:5b:33:a5:0b: ab:ac:fd:9e:ad:01:32:bd:7c:7b:51:e6:77:3a:c1:84:f5:80: 8f:35:8f:97:c1:db:d9:8e:85:a2:cb:d3:94:c6:9d:35:8f:11: 24:26:4e:40:da:e6:c8:fa:1b:a8:94:ba:37:2a:13:78:98:7a: 05:3a:72:82:d3:45:98:0e:21:90:26:12:89:31:cb:64:7a:7f: 83:f2:d7:b6:fb:90:17:4f:f9:a9:38:33:05:ba:0b:53:bd:27: b2:45:21:92:65:ff:6a:03:1f:29:fb:3c:f2:d0:bf:a6:16:9d: 24:96:6c:a2:20:bd:47:32:00:fb:bd:7b:b8:13:77:48:8e:30: 73:3b:79:73:c5:50:49:bc:75:2b:52:81:fe:59:c5:d1:6b:b0: 12:da:dd:99:ba:cd:78:b5:71:2f:14:ab:7e:45:9a:f8:c0:b8: 17:e3:95:90 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUPRVrJ944Lo9/n/gJceuNGYm7xkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI1MTAyMDA2NDU1NFoX DTI1MTAyMTA3NTU1NFowMzExMC8GA1UEAxMoQTc0QjlDMjk2QzNCNzZCNDZDNTBD ODA2OEVFNUMxQ0YwNjgzRDVDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxR9yt0oV4IaJPPpdpI2l1TkUGLT9RyjRfgEeMA61sLDjw2C0iMJXDWWkKt /Udp7H/a/0lkH1Y8ufBxPERACj8ma0oiRKR0WtKSZ8pVtAiJcjvZyNGoybCykDg4 bugFX6lazKkI1upd1wNWoftW4iAaX3NbVFVr3gBXmOVvZK3n+PDoBqGRX6E189cQ 349sqAuokwx2DcjCOzTq+7MyNkpvomvxco6UQ8/aTYEQ8e5PvRcSuOOSdUsI1GZm DTopM6r+ruCcLQ+j1N7bF9n927TrlOoJ4G84IEwLqDKB9i5uEHdfsdMHZY+oCxMb 3Uv4NREl0ZyrZ+PeYK4OsyCckFECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSnS5wp bDt2tGxQyAaO5cHPBoPVwzAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHEwUj/bmF6fYoNFkBa5 yWrk8Nl4mfE2VVG/skoF8jieHSLOnSSopD989hWx4syMArN+gVxUm1Kk6UjUFqWH TCvXvzUjipl+SqFlo2ZgyIt26Bny9ERgWzOlC6us/Z6tATK9fHtR5nc6wYT1gI81 j5fB29mOhaLL05TGnTWPESQmTkDa5sj6G6iUujcqE3iYegU6coLTRZgOIZAmEokx y2R6f4Py17b7kBdP+ak4MwW6C1O9J7JFIZJl/2oDHyn7PPLQv6YWnSSWbKIgvUcy APu9e7gTd0iOMHM7eXPFUEm8dStSgf5ZxdFrsBLa3Zm6zXi1cS8Uq35FmvjAuBfj lZA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:54:38 2025 by rpki-client