$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft File: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft (raw, json) Hash identifier: E7OVgAeOYYsgBMWKEMm9w37Y7uXYqeqIeygva36pHho= Subject key identifier: 27:F9:F9:99:F5:37:31:0E:50:85:8D:2C:EF:DA:3B:85:E8:7C:4B:25 Authority key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 Certificate issuer: /CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Certificate serial: 31081D5C5B77FA05A3FA5D59902936BA97B18688 Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft Manifest number: 26 Signing time: Fri 24 Jul 2026 06:07:48 +0000 Manifest this update: Fri 24 Jul 2026 06:02:48 +0000 Manifest next update: Sat 25 Jul 2026 07:17:48 +0000 Files and hashes: 1: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl (hash: 3zbUr2DxXZ9DM++0+G/6+M/w+oADj/cqrmt54+Ks5es=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:08:1d:5c:5b:77:fa:05:a3:fa:5d:59:90:29:36:ba:97:b1:86:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Validity Not Before: Jul 24 06:02:48 2026 GMT Not After : Jul 25 07:17:48 2026 GMT Subject: CN=27F9F999F537310E50858D2CEFDA3B85E87C4B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:1b:5d:e9:c7:5a:66:b7:44:c0:0f:4d:cc: ec:4e:db:d1:c7:8c:92:87:8b:c9:d7:b3:00:04:68: 74:c7:a4:3d:8d:e7:9d:6e:46:f2:bd:62:a8:7d:22: 6b:3f:6f:f0:2a:3d:24:80:c6:66:40:da:bd:5f:5e: 3b:ab:76:43:08:5c:4d:d1:9a:98:8b:17:57:2f:14: 2a:81:00:65:27:af:99:6b:37:80:ce:0d:78:3f:51: 11:57:5f:e4:85:c6:0b:fb:3c:b0:b1:1a:1c:65:a7: 97:20:ad:79:3c:59:f2:ea:7f:ca:8f:31:98:f3:37: 2e:f4:a9:1c:3d:45:e8:7b:b8:2d:2f:75:36:6e:aa: 67:7a:37:f1:48:2b:6a:e2:7e:05:24:51:e0:4b:99: 2f:37:95:7b:ac:db:d1:7f:48:52:18:0a:f0:3f:6e: 06:75:4f:d9:12:d3:42:16:be:b2:94:90:fc:a2:7f: 1e:b6:fc:c9:13:fe:6e:f2:d5:d4:d7:5e:6e:d7:ef: 5e:95:f2:db:f4:e7:d3:49:1f:aa:06:69:fd:fc:81: 33:aa:66:8c:0c:73:bd:13:a7:eb:ba:e5:ce:b2:1f: d5:b7:2f:fe:d8:bb:d7:70:13:88:60:3b:2a:bc:0c: 5e:e3:62:62:e1:a2:68:36:90:96:4b:a9:75:a2:95: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F9:F9:99:F5:37:31:0E:50:85:8D:2C:EF:DA:3B:85:E8:7C:4B:25 X509v3 Authority Key Identifier: keyid:64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ad:f7:76:bd:51:96:8c:ea:57:c7:7b:45:0c:58:d9:c3:c2: f6:64:05:89:e3:8d:92:51:63:13:e1:7a:fc:8a:ac:56:b3:8f: 1e:db:f3:7b:fd:f4:bd:e2:5c:a3:2d:da:16:25:c2:2b:f0:16: fc:6b:6e:92:65:52:fb:f7:8c:b3:fd:6e:55:ca:2c:2b:d9:3e: 5f:6b:9f:44:8b:a7:73:7c:ed:53:b5:c9:c3:1c:0d:03:a8:cc: 76:35:23:48:63:1f:0d:6c:a0:e0:26:d1:63:41:47:67:88:7b: 8d:a9:2e:8b:35:22:14:9e:89:85:30:4c:55:5a:c1:d5:82:c5: 8f:a2:86:73:b6:0e:cb:b4:4e:bd:bd:8a:c8:4f:7a:1a:4f:64: 46:c4:ed:83:ca:92:5d:5e:12:3a:c8:c1:a9:6d:7d:f1:0e:98: ef:eb:b2:d6:80:f4:04:d1:4b:e5:3c:c5:d9:5c:7e:61:0a:cb: 84:88:e5:70:af:20:f0:24:4a:f8:85:e8:c1:e6:6b:66:23:16: 0e:f4:f6:13:11:d9:82:a9:73:41:82:77:89:4c:9f:13:be:a1: ee:e8:9b:9f:95:10:d3:7f:eb:32:e9:82:95:e9:3d:1a:d2:b3: f0:25:e7:7c:70:55:e5:87:5c:98:4a:a6:ff:18:b5:00:b5:e6: 90:d8:f2:1c -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUMQgdXFt3+gWj+l1ZkCk2upexhogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NURE MEE3QzdCNTAeFw0yNjA3MjQwNjAyNDhaFw0yNjA3MjUwNzE3NDhaMDMxMTAvBgNV BAMTKDI3RjlGOTk5RjUzNzMxMEU1MDg1OEQyQ0VGREEzQjg1RTg3QzRCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeExtd6cdaZrdEwA9NzOxO29HH jJKHi8nXswAEaHTHpD2N551uRvK9Yqh9Ims/b/AqPSSAxmZA2r1fXjurdkMIXE3R mpiLF1cvFCqBAGUnr5lrN4DODXg/URFXX+SFxgv7PLCxGhxlp5cgrXk8WfLqf8qP MZjzNy70qRw9Reh7uC0vdTZuqmd6N/FIK2rifgUkUeBLmS83lXus29F/SFIYCvA/ bgZ1T9kS00IWvrKUkPyifx62/MkT/m7y1dTXXm7X716V8tv059NJH6oGaf38gTOq ZowMc70Tp+u65c6yH9W3L/7Yu9dwE4hgOyq8DF7jYmLhomg2kJZLqXWilfiBAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUJ/n5mfU3MQ5QhY0s79o7heh8SyUwHwYDVR0j BBgwFoAUZC3T4aEizqEK7wrJu8goXdCnx7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5j cmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFyc3luYzovL3Jwa2kuc3Vi LmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUwRTREMDAwMC8wLzY0MkREM0UxQTEy MkNFQTEwQUVGMEFDOUJCQzgyODVERDBBN0M3QjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBABOt93a9UZaM6lfHe0UMWNnDwvZkBYnjjZJRYxPhevyKrFazjx7b 83v99L3iXKMt2hYlwivwFvxrbpJlUvv3jLP9blXKLCvZPl9rn0SLp3N87VO1ycMc DQOozHY1I0hjHw1soOAm0WNBR2eIe42pLos1IhSeiYUwTFVawdWCxY+ihnO2Dsu0 Tr29ishPehpPZEbE7YPKkl1eEjrIwaltffEOmO/rstaA9ATRS+U8xdlcfmEKy4SI 5XCvIPAkSviF6MHma2YjFg709hMR2YKpc0GCd4lMnxO+oe7om5+VENN/6zLpgpXp PRrSs/Al53xwVeWHXJhKpv8YtQC15pDY8hw= -----END CERTIFICATE-----Generated at Fri Jul 24 22:23:57 2026 by rpki-client