$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: TQGuvzfnT3P9jJ6tYfdKu+Kg/sH76wPT4ZSOHLQFK50= Subject key identifier: CF:8E:AB:C7:EA:78:61:90:C1:03:98:CA:28:B6:DB:C9:13:2B:73:BB Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 779ECD1DBC1A09C5053778C6526C31CED8DDB561 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0160 Signing time: Mon 16 Jun 2025 00:06:18 +0000 Manifest this update: Mon 16 Jun 2025 00:01:18 +0000 Manifest next update: Tue 17 Jun 2025 02:51:18 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: roFc+R9N7gFGertN8HwiLo5zK8QWeoV3r+wnf8Bo1+Y=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: dQX8k3kIeqGp3P2icN5/lEkgJizu7NVM5zOKZXx0I5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 02:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9e:cd:1d:bc:1a:09:c5:05:37:78:c6:52:6c:31:ce:d8:dd:b5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Jun 16 00:01:18 2025 GMT Not After : Jun 17 02:51:18 2025 GMT Subject: CN=CF8EABC7EA786190C10398CA28B6DBC9132B73BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:48:5a:d2:35:58:d3:a8:3b:ac:10:cc:f8: 00:30:ce:eb:e5:40:5d:f7:82:d1:99:06:d8:a8:d0: 6b:bc:ee:bc:86:f3:59:3c:5c:ac:4b:52:96:79:a9: ab:be:ce:97:a2:a0:c4:f4:d8:22:fa:ad:76:91:ed: f8:3f:25:a0:8a:fc:9d:0f:61:67:81:c8:b0:30:f6: ad:15:e1:fe:b3:d9:a0:84:ca:43:6f:1f:a3:cb:ae: f0:d5:c0:45:61:5a:c0:1b:f8:6c:6d:eb:ba:77:28: d3:47:67:26:40:2e:91:8d:df:2b:18:ac:a3:55:82: cb:7e:9d:4b:0c:b1:e2:de:36:d4:cd:04:a7:f2:38: ed:fe:81:d9:7b:e0:81:be:9d:d2:d0:9a:b4:61:ec: 97:63:58:3e:c2:13:fe:bb:0f:45:42:31:78:2f:9a: 13:44:3d:4a:64:73:71:a9:b4:c6:71:62:ae:7f:8e: 8e:6b:f8:44:b9:a3:5d:34:60:c7:be:c6:83:2d:9f: 4b:ba:e9:a7:28:2a:53:82:1e:35:90:64:ab:4b:2b: 13:2e:db:95:9f:76:3a:c6:d1:64:46:b3:81:f3:fe: ec:12:e2:41:32:51:6f:3d:08:7f:44:3d:b7:28:72: 6d:fd:71:68:ee:57:9e:a4:db:cd:f8:dd:df:55:03: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:AB:C7:EA:78:61:90:C1:03:98:CA:28:B6:DB:C9:13:2B:73:BB X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b4:d5:72:e4:c0:70:ce:bd:eb:19:09:35:87:40:63:b7:52: 2c:d6:78:6d:7a:be:3d:c4:1c:a9:a5:85:3a:d1:c9:e0:21:e1: cc:0b:bf:6c:d3:34:79:73:31:f3:5f:12:84:46:ef:96:ef:21: 90:5c:8c:b7:c6:df:b0:51:39:96:59:f9:2e:ea:0a:1d:d6:a7: 4e:8e:ea:6d:13:15:f0:cd:16:0e:f5:7e:ea:aa:e5:c9:45:e8: 00:04:02:ce:9d:a9:34:4b:84:9a:9a:77:03:4e:0d:87:50:16: cb:6c:54:b7:08:5a:48:4c:cb:21:43:75:f8:8d:27:bc:de:7e: 29:1b:12:24:85:dc:cf:19:9e:1c:33:a3:e7:65:6f:20:9f:3e: bb:b7:34:57:b8:40:64:23:5f:3d:1d:e8:90:1c:70:8e:8d:db: bc:11:01:46:05:b7:63:92:33:eb:85:87:06:02:2b:6d:cf:06: 3e:33:1f:8c:d4:f4:ee:d8:64:03:ad:9e:3d:f8:be:db:4f:fd: c8:e1:e6:bd:c7:0c:f3:55:c3:11:52:08:03:dc:f5:5d:40:bf: 69:4b:8c:f8:69:8b:34:bc:69:82:36:e9:9b:49:26:d6:e8:01: ad:1a:8a:63:a4:43:e8:35:04:bb:ea:66:91:b6:2f:e0:2b:b2: 25:d9:3c:5b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUd57NHbwaCcUFN3jGUmwxztjdtWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI1MDYxNjAwMDExOFoX DTI1MDYxNzAyNTExOFowMzExMC8GA1UEAxMoQ0Y4RUFCQzdFQTc4NjE5MEMxMDM5 OENBMjhCNkRCQzkxMzJCNzNCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEeSFrSNVjTqDusEMz4ADDO6+VAXfeC0ZkG2KjQa7zuvIbzWTxcrEtSlnmp q77Ol6KgxPTYIvqtdpHt+D8loIr8nQ9hZ4HIsDD2rRXh/rPZoITKQ28fo8uu8NXA RWFawBv4bG3runco00dnJkAukY3fKxiso1WCy36dSwyx4t421M0Ep/I47f6B2Xvg gb6d0tCatGHsl2NYPsIT/rsPRUIxeC+aE0Q9SmRzcam0xnFirn+Ojmv4RLmjXTRg x77Ggy2fS7rppygqU4IeNZBkq0srEy7blZ92OsbRZEazgfP+7BLiQTJRbz0If0Q9 tyhybf1xaO5XnqTbzfjd31UDtWECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTPjqvH 6nhhkMEDmMoottvJEytzuzAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMC01XLkwHDOvesZCTWH QGO3UizWeG16vj3EHKmlhTrRyeAh4cwLv2zTNHlzMfNfEoRG75bvIZBcjLfG37BR OZZZ+S7qCh3Wp06O6m0TFfDNFg71fuqq5clF6AAEAs6dqTRLhJqadwNODYdQFsts VLcIWkhMyyFDdfiNJ7zefikbEiSF3M8Znhwzo+dlbyCfPru3NFe4QGQjXz0d6JAc cI6N27wRAUYFt2OSM+uFhwYCK23PBj4zH4zU9O7YZAOtnj34vttP/cjh5r3HDPNV wxFSCAPc9V1Av2lLjPhpizS8aYI26ZtJJtboAa0aimOkQ+g1BLvqZpG2L+ArsiXZ PFs= -----END CERTIFICATE-----Generated at Mon Jun 16 03:07:13 2025 by rpki-client