$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft File: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft (raw, json) Hash identifier: yrIONEc9YfIsErrv/oHHeeMeL9qlIGMva72MmJ5tsao= Subject key identifier: 2B:E1:30:E0:A7:7D:6C:3F:B8:39:B8:16:F3:B9:ED:A6:86:7F:74:3E Authority key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 Certificate issuer: /CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Certificate serial: 60DF554FF0E1357F12432CC63D89DD61D808AA37 Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft Manifest number: 6B Signing time: Sun 13 Sep 2026 09:49:35 +0000 Manifest this update: Sun 13 Sep 2026 09:44:35 +0000 Manifest next update: Mon 14 Sep 2026 12:28:35 +0000 Files and hashes: 1: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl (hash: 4lrXWiFlyUoKkXW11tUuWj2dGuX9gY682EjQBgZ+Mgw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 12:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:df:55:4f:f0:e1:35:7f:12:43:2c:c6:3d:89:dd:61:d8:08:aa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Validity Not Before: Sep 13 09:44:35 2026 GMT Not After : Sep 14 12:28:35 2026 GMT Subject: CN=2BE130E0A77D6C3FB839B816F3B9EDA6867F743E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:d6:6e:fb:97:8f:4b:11:42:23:ab:3e:28: a2:34:07:37:0b:58:80:dd:18:65:3b:90:3c:af:6d: 0d:6f:1d:22:fe:5a:4d:02:b4:33:e8:bf:e2:af:4c: f5:cf:10:a4:51:01:19:f9:7c:6d:89:d1:00:e5:f2: df:a5:a3:cf:6d:bd:4d:8c:00:5a:b9:52:fc:24:21: 38:be:a7:67:d7:22:1a:e3:4c:a3:22:0b:6d:08:0b: fd:05:8d:15:c9:75:61:2a:04:c3:ce:0c:10:ab:e8: e9:47:f7:ef:46:2e:c6:f8:b7:56:04:0b:d8:80:bb: ab:ca:35:6d:4f:dc:4b:96:5e:28:41:2e:45:14:3f: e8:4f:42:a4:05:25:19:ce:1a:d2:46:b4:e1:9a:c9: 0b:80:15:37:ce:23:e8:1a:94:0f:c1:a6:bb:1d:84: cc:e6:df:de:58:37:c8:38:e5:17:77:24:32:69:2a: b4:bf:2c:8d:aa:30:d1:2f:f7:95:ec:e7:40:29:dd: 5c:e9:de:69:ad:e8:ac:0f:7d:aa:84:8d:2b:9a:32: 14:2a:17:7b:68:89:19:00:7e:be:7a:6d:1b:ee:57: a5:c3:76:26:af:66:b7:6f:4e:29:c3:33:a3:a9:eb: fa:e1:2d:ef:02:00:d0:2b:ef:b6:c5:7e:2c:fd:13: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:30:E0:A7:7D:6C:3F:B8:39:B8:16:F3:B9:ED:A6:86:7F:74:3E X509v3 Authority Key Identifier: keyid:64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:df:74:62:64:cb:1e:60:67:b0:83:ff:f3:b4:d6:b7:3f:67: 1a:67:87:79:6d:24:26:93:b5:80:cd:68:b3:4a:3a:a9:0a:2c: 92:06:79:61:b3:f7:1f:c3:ca:3f:53:83:e4:c0:94:29:9b:84: b2:fb:d8:c7:d1:6e:ae:ac:a5:e4:89:51:44:49:1e:99:9b:7e: f5:3a:43:fe:88:66:01:c5:a7:3f:65:cb:1f:ea:d6:f1:ef:f7: f1:e7:37:4f:b4:44:5f:e1:8b:fd:d9:95:c3:0f:73:da:73:88: 08:a7:ea:19:a2:e7:d9:fc:74:ed:5f:29:ff:19:a1:06:d7:9b: 8a:54:9f:dc:95:fb:32:40:f8:dd:8b:aa:91:08:11:dc:9c:22: 12:5e:ff:5c:07:7d:0c:4f:13:aa:bd:1b:c4:d5:7c:94:9c:dc: 32:ab:a4:3f:94:60:f9:77:d6:43:9c:d2:42:20:c1:f0:a1:7e: 88:14:8b:6c:f9:e1:1f:a0:9c:a0:b0:34:44:f5:b2:32:67:80: 50:bc:8d:e0:a2:4d:7a:cc:57:2d:32:5e:3a:a7:65:e8:71:57: 25:26:33:ea:e7:f6:ba:fc:88:1d:70:ce:23:f2:75:ce:22:c6: de:28:ff:bb:53:64:7f:35:f7:c8:e2:18:ed:07:8c:b3:5e:fe: 3c:12:57:6c -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUYN9VT/DhNX8SQyzGPYndYdgIqjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NURE MEE3QzdCNTAeFw0yNjA5MTMwOTQ0MzVaFw0yNjA5MTQxMjI4MzVaMDMxMTAvBgNV BAMTKDJCRTEzMEUwQTc3RDZDM0ZCODM5QjgxNkYzQjlFREE2ODY3Rjc0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eNZu+5ePSxFCI6s+KKI0BzcL WIDdGGU7kDyvbQ1vHSL+Wk0CtDPov+KvTPXPEKRRARn5fG2J0QDl8t+lo89tvU2M AFq5UvwkITi+p2fXIhrjTKMiC20IC/0FjRXJdWEqBMPODBCr6OlH9+9GLsb4t1YE C9iAu6vKNW1P3EuWXihBLkUUP+hPQqQFJRnOGtJGtOGayQuAFTfOI+galA/Bprsd hMzm395YN8g45Rd3JDJpKrS/LI2qMNEv95Xs50Ap3Vzp3mmt6KwPfaqEjSuaMhQq F3toiRkAfr56bRvuV6XDdiavZrdvTinDM6Op6/rhLe8CANAr77bFfiz9ExTxAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUK+Ew4Kd9bD+4ObgW87ntpoZ/dD4wHwYDVR0j BBgwFoAUZC3T4aEizqEK7wrJu8goXdCnx7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5j cmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFyc3luYzovL3Jwa2kuc3Vi LmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUwRTREMDAwMC8wLzY0MkREM0UxQTEy MkNFQTEwQUVGMEFDOUJCQzgyODVERDBBN0M3QjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAITfdGJkyx5gZ7CD//O01rc/Zxpnh3ltJCaTtYDNaLNKOqkKLJIG eWGz9x/Dyj9Tg+TAlCmbhLL72MfRbq6speSJUURJHpmbfvU6Q/6IZgHFpz9lyx/q 1vHv9/HnN0+0RF/hi/3ZlcMPc9pziAin6hmi59n8dO1fKf8ZoQbXm4pUn9yV+zJA +N2LqpEIEdycIhJe/1wHfQxPE6q9G8TVfJSc3DKrpD+UYPl31kOc0kIgwfChfogU i2z54R+gnKCwNET1sjJngFC8jeCiTXrMVy0yXjqnZehxVyUmM+rn9rr8iB1wziPy dc4ixt4o/7tTZH8198jiGO0HjLNe/jwSV2w= -----END CERTIFICATE-----Generated at Mon Sep 14 02:11:51 2026 by rpki-client