$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: 8/p5Wb5Pdyf7e+wV9qcT+rSHN4wiXMIzfJQitXglRDw= Subject key identifier: 24:2D:5D:4B:CF:6C:7F:00:A5:56:40:93:AF:07:80:FC:85:37:EC:61 Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 4788FEC0F0D7C6EA1091224725D63DA5D5E04D79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 03AA Signing time: Mon 19 Oct 2026 10:53:30 +0000 Manifest this update: Mon 19 Oct 2026 10:48:30 +0000 Manifest next update: Tue 20 Oct 2026 14:39:30 +0000 Files and hashes: 1: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: /kUIE99bCsbCmIiQPzpAlxDF+o+xvCZcWPfm8GnkM3k=) 2: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: VOtKrzGXV2MiHtsiWwLCXZM/29wDHzxVSB6LGfo6vHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 14:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:88:fe:c0:f0:d7:c6:ea:10:91:22:47:25:d6:3d:a5:d5:e0:4d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Oct 19 10:48:30 2026 GMT Not After : Oct 20 14:39:30 2026 GMT Subject: CN=242D5D4BCF6C7F00A5564093AF0780FC8537EC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:80:73:3f:9b:cc:d9:06:18:fd:d4:dd:a8: ec:ec:ec:d0:5b:34:a3:90:1e:2e:fe:62:21:cb:bf: 62:61:3a:7a:fa:aa:62:6b:e6:77:63:01:f3:0f:34: 81:53:05:fd:e7:9d:02:6f:23:65:81:f6:24:9a:c2: 4c:95:dd:72:9f:2e:24:5f:9c:89:51:7d:59:36:d8: 1c:9f:40:47:59:d6:fd:1f:3b:be:b4:66:20:37:55: 58:0f:d2:56:cb:7a:85:40:a0:06:0e:02:d0:59:79: 64:a7:e8:38:30:e1:14:4a:c2:cc:b2:40:7f:60:9f: 3a:9d:31:30:1d:56:26:d1:a8:58:59:20:da:f0:65: 2c:43:e6:15:13:ce:d5:e7:70:4f:9e:e6:d5:76:40: 0e:20:eb:ed:65:d8:f4:d9:95:eb:a1:b1:aa:2b:a5: 8d:5d:d3:30:f2:d7:43:58:81:c5:36:11:36:f9:64: 4d:a2:74:a7:23:74:74:ac:fa:ad:d6:e7:8d:d3:15: 03:1d:05:26:6e:2c:db:a5:84:a3:0c:82:b7:06:d1: 5a:8a:4f:df:25:b2:47:e4:2e:82:69:e1:fe:f5:a5: 23:0d:32:e0:64:6d:e6:5f:c0:d9:e8:89:d2:16:ec: 50:f4:63:5d:b4:7a:b2:16:59:43:f2:a2:81:72:68: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2D:5D:4B:CF:6C:7F:00:A5:56:40:93:AF:07:80:FC:85:37:EC:61 X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4c:44:fc:3b:ac:e0:89:be:f6:31:b6:ca:e5:68:18:1c:69: 32:f3:e7:f6:86:f7:53:b2:59:60:ea:03:12:5e:5e:e0:73:82: b1:34:16:cd:70:13:91:10:52:3d:79:68:bd:64:01:e5:13:ef: 0d:c6:0c:ee:2a:19:2c:ee:76:49:19:56:e9:90:05:73:94:13: 98:75:d5:0f:ce:75:40:8a:99:a2:d5:94:47:16:8b:38:c8:e5: c3:91:55:b4:7a:41:85:d0:18:73:67:93:55:b1:04:83:47:f5: f8:2e:6d:df:cf:22:05:d1:53:0c:de:63:d1:84:9f:dc:f0:c9: 30:15:de:8b:81:1a:bc:1f:cf:11:f9:4a:87:61:9f:4f:e3:04: c1:b4:a9:e6:a5:7d:e2:d1:b5:5a:df:ed:31:75:fd:74:8e:93: af:4e:a8:2d:38:60:a8:a3:9c:9c:2a:61:ca:28:7e:f0:88:65: 5d:0d:25:db:6e:b8:49:5d:7e:d6:46:02:b2:06:37:b3:40:e7: 45:59:9b:f3:8b:67:f6:08:2e:e6:4c:22:bb:db:47:00:e0:fa: 0f:af:7c:f8:3c:04:57:68:10:d6:67:cb:76:db:90:80:88:99: e3:42:bc:d0:11:78:d5:1e:9e:21:6b:16:16:2f:92:dc:ba:f0: 9a:f9:51:7f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUR4j+wPDXxuoQkSJHJdY9pdXgTXkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI2MTAxOTEwNDgzMFoX DTI2MTAyMDE0MzkzMFowMzExMC8GA1UEAxMoMjQyRDVENEJDRjZDN0YwMEE1NTY0 MDkzQUYwNzgwRkM4NTM3RUM2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUegHM/m8zZBhj91N2o7Ozs0Fs0o5AeLv5iIcu/YmE6evqqYmvmd2MB8w80 gVMF/eedAm8jZYH2JJrCTJXdcp8uJF+ciVF9WTbYHJ9AR1nW/R87vrRmIDdVWA/S Vst6hUCgBg4C0Fl5ZKfoODDhFErCzLJAf2CfOp0xMB1WJtGoWFkg2vBlLEPmFRPO 1edwT57m1XZADiDr7WXY9NmV66GxqiuljV3TMPLXQ1iBxTYRNvlkTaJ0pyN0dKz6 rdbnjdMVAx0FJm4s26WEowyCtwbRWopP3yWyR+Qugmnh/vWlIw0y4GRt5l/A2eiJ 0hbsUPRjXbR6shZZQ/KigXJooH0CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQkLV1L z2x/AKVWQJOvB4D8hTfsYTAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKVMRPw7rOCJvvYxtsrl aBgcaTLz5/aG91OyWWDqAxJeXuBzgrE0Fs1wE5EQUj15aL1kAeUT7w3GDO4qGSzu dkkZVumQBXOUE5h11Q/OdUCKmaLVlEcWizjI5cORVbR6QYXQGHNnk1WxBINH9fgu bd/PIgXRUwzeY9GEn9zwyTAV3ouBGrwfzxH5Sodhn0/jBMG0qealfeLRtVrf7TF1 /XSOk69OqC04YKijnJwqYcoofvCIZV0NJdtuuEldftZGArIGN7NA50VZm/OLZ/YI LuZMIrvbRwDg+g+vfPg8BFdoENZny3bbkICImeNCvNAReNUeniFrFhYvkty68Jr5 UX8= -----END CERTIFICATE-----Generated at Mon Oct 19 17:06:52 2026 by rpki-client