$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft File: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft (raw, json) Hash identifier: B7RvSRl2cV0wygxtTtiBUu9SHXJeJKtak8t4nkosUcg= Subject key identifier: 6C:D5:66:1E:12:00:16:D5:BB:08:1E:9C:F5:E1:92:1F:9E:A3:DC:14 Authority key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 Certificate issuer: /CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Certificate serial: 1B04566354E0467F76D6084EC46B71EB82725D80 Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft Manifest number: 1A Signing time: Wed 15 Jul 2026 01:27:28 +0000 Manifest this update: Wed 15 Jul 2026 01:22:28 +0000 Manifest next update: Thu 16 Jul 2026 03:36:28 +0000 Files and hashes: 1: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl (hash: H3dk1HcN6PlYohdX9Sfu+Mzj7tpGnu7kakIDFnu+9cU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Jul 2026 03:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:04:56:63:54:e0:46:7f:76:d6:08:4e:c4:6b:71:eb:82:72:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Validity Not Before: Jul 15 01:22:28 2026 GMT Not After : Jul 16 03:36:28 2026 GMT Subject: CN=6CD5661E120016D5BB081E9CF5E1921F9EA3DC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:10:6a:ce:85:ca:98:38:61:e7:79:68:b9: 1f:5b:42:11:5e:57:ff:d5:f9:85:30:46:3d:6a:88: 9c:60:6e:00:61:f8:e1:3d:f3:c9:dc:21:4e:6e:26: f6:38:98:f8:98:0e:5d:ff:9a:fa:d2:14:a9:ae:ad: 72:ae:cb:e6:b4:cb:05:1d:8b:e3:24:4c:f2:bd:4f: b5:78:79:37:8b:7e:fb:fa:19:52:4b:88:e7:30:dc: 1d:90:f1:ab:bb:b2:28:c9:99:1f:6d:2e:50:bc:49: 4e:82:4e:38:d7:fa:72:4e:98:39:b0:1a:3e:1d:0b: 3a:d0:72:f2:56:60:06:04:f5:9a:25:85:1d:c9:5f: 78:9a:c9:f2:8c:49:2b:ec:30:b2:2f:8e:e1:db:e4: fb:dd:f8:dc:0b:fd:68:c0:25:aa:84:60:35:0e:61: 6d:45:51:d4:5a:0c:08:8d:37:49:c7:77:dc:93:25: a8:ac:03:ad:27:cf:2f:58:3a:45:1f:7c:7f:6f:28: c7:d5:3f:17:2f:42:44:c4:be:93:bd:23:21:bc:42: 54:ac:cc:99:9a:ad:f8:2b:2d:db:7b:05:4f:fb:ec: 3e:8f:f3:61:25:42:b7:c7:34:09:71:2f:4e:35:37: 68:3d:16:2d:63:bc:07:ea:83:9b:e6:3d:1d:a8:46: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D5:66:1E:12:00:16:D5:BB:08:1E:9C:F5:E1:92:1F:9E:A3:DC:14 X509v3 Authority Key Identifier: keyid:64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:96:cc:e3:76:c5:c8:99:a7:b3:39:7a:83:16:49:f4:84:8b: 8b:c8:67:7a:05:86:33:02:ed:bc:d6:cc:7a:72:c9:fd:11:51: 23:b7:8d:d1:c6:b9:55:80:ae:f5:ba:72:34:a6:e6:c6:e5:ac: 44:8b:5d:01:e8:47:c0:97:8f:78:fc:bd:8c:28:54:cc:64:ac: d3:be:27:0a:6f:ae:67:5c:a3:e1:79:69:81:d1:39:cb:e5:85: c2:3d:08:c0:c4:3c:39:a4:b7:15:52:30:f7:18:13:ff:8b:df: 54:8d:58:56:ce:ec:5f:16:5b:dd:0a:ac:a6:10:20:1f:23:13: 6a:41:47:7a:7c:cf:88:8f:c8:ff:9e:db:ae:88:c7:b6:f2:2c: 70:18:f5:18:f1:a8:df:9b:5b:08:12:6a:70:a5:f5:70:30:7a: c9:38:49:61:87:de:49:d7:d3:80:b4:3d:04:2b:55:e2:87:1e: 48:b1:14:71:44:c6:38:0f:a1:2c:ef:36:12:7c:5d:a2:3d:9b: a1:aa:c2:c0:22:20:c6:78:9d:dd:56:c9:08:83:92:81:98:d8: f1:62:20:97:89:17:82:fc:7c:99:9d:6a:1b:e0:7f:9f:22:f0: 5c:9e:d1:47:3e:2a:ea:a1:7d:2a:d9:71:a7:86:cc:32:2e:07: f5:3c:79:dd -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUGwRWY1TgRn921ghOxGtx64JyXYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NURE MEE3QzdCNTAeFw0yNjA3MTUwMTIyMjhaFw0yNjA3MTYwMzM2MjhaMDMxMTAvBgNV BAMTKDZDRDU2NjFFMTIwMDE2RDVCQjA4MUU5Q0Y1RTE5MjFGOUVBM0RDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYBBqzoXKmDhh53louR9bQhFe V//V+YUwRj1qiJxgbgBh+OE988ncIU5uJvY4mPiYDl3/mvrSFKmurXKuy+a0ywUd i+MkTPK9T7V4eTeLfvv6GVJLiOcw3B2Q8au7sijJmR9tLlC8SU6CTjjX+nJOmDmw Gj4dCzrQcvJWYAYE9ZolhR3JX3iayfKMSSvsMLIvjuHb5Pvd+NwL/WjAJaqEYDUO YW1FUdRaDAiNN0nHd9yTJaisA60nzy9YOkUffH9vKMfVPxcvQkTEvpO9IyG8QlSs zJmarfgrLdt7BU/77D6P82ElQrfHNAlxL041N2g9Fi1jvAfqg5vmPR2oRs6TAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUbNVmHhIAFtW7CB6c9eGSH56j3BQwHwYDVR0j BBgwFoAUZC3T4aEizqEK7wrJu8goXdCnx7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5j cmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFyc3luYzovL3Jwa2kuc3Vi LmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUwRTREMDAwMC8wLzY0MkREM0UxQTEy MkNFQTEwQUVGMEFDOUJCQzgyODVERDBBN0M3QjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NUREMEE3QzdCNS5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAH6WzON2xciZp7M5eoMWSfSEi4vIZ3oFhjMC7bzWzHpyyf0RUSO3 jdHGuVWArvW6cjSm5sblrESLXQHoR8CXj3j8vYwoVMxkrNO+Jwpvrmdco+F5aYHR OcvlhcI9CMDEPDmktxVSMPcYE/+L31SNWFbO7F8WW90KrKYQIB8jE2pBR3p8z4iP yP+e266Ix7byLHAY9RjxqN+bWwgSanCl9XAwesk4SWGH3knX04C0PQQrVeKHHkix FHFExjgPoSzvNhJ8XaI9m6GqwsAiIMZ4nd1WyQiDkoGY2PFiIJeJF4L8fJmdahvg f58i8Fye0Uc+KuqhfSrZcaeGzDIuB/U8ed0= -----END CERTIFICATE-----Generated at Wed Jul 15 16:33:39 2026 by rpki-client