$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: m4wC3IsHFn5OsaiMry/GTkm+fe/9d71bHCxNU1mHrlI= Subject key identifier: F6:8D:EE:96:BD:D5:E0:38:9B:B8:8E:CC:E4:B3:7E:FC:DF:AC:25:6E Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 4ACC729B4FB7C724CAEE9C23B9CBA2AB2C578998 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0150 Signing time: Sat 26 Apr 2025 11:54:18 +0000 Manifest this update: Sat 26 Apr 2025 11:49:18 +0000 Manifest next update: Sun 27 Apr 2025 14:01:18 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: O/xjgonri2EshGONApejgc4rnlMGyw3hWmJmwX7Nlv4=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: dQX8k3kIeqGp3P2icN5/lEkgJizu7NVM5zOKZXx0I5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cc:72:9b:4f:b7:c7:24:ca:ee:9c:23:b9:cb:a2:ab:2c:57:89:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Apr 26 11:49:18 2025 GMT Not After : Apr 27 14:01:18 2025 GMT Subject: CN=F68DEE96BDD5E0389BB88ECCE4B37EFCDFAC256E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:9f:2f:ca:64:3f:ef:1f:37:df:32:60:8c: 95:97:3d:c0:45:cd:47:2a:6e:5d:77:7b:45:a9:f4: 62:8e:b3:53:98:e6:5d:e2:4f:9e:3a:d9:3c:69:e7: 68:f4:d2:02:c1:37:58:f8:a6:ff:00:37:ba:b5:4c: 00:eb:a1:7c:b3:d1:5c:d5:d2:f3:aa:85:6d:93:f1: 87:16:0f:05:db:1d:a6:39:a1:27:d7:9a:b2:41:23: 31:6a:76:2f:fb:7b:de:ee:f1:68:a1:51:d4:21:2f: ab:59:13:78:1d:50:ac:a3:dd:45:57:76:8d:c4:0d: d1:68:95:10:24:ea:6a:49:17:3c:b5:92:36:3b:6a: 29:1a:11:29:c5:74:56:d3:2e:a1:80:11:29:91:34: 77:41:28:6e:b3:ca:69:54:c4:45:a7:42:cb:b1:01: ad:b1:52:c6:8d:eb:55:34:c3:57:6b:a2:0b:4b:73: 9b:83:cc:9e:4c:10:c2:e3:46:8b:6e:bb:7c:be:10: 1e:f9:08:52:a1:cc:32:d9:ea:0b:ad:6b:36:02:df: ab:1f:a7:52:6d:ac:63:40:24:f0:6a:14:90:ab:bf: cc:49:9a:8a:3b:76:7b:ae:77:05:b9:95:bb:68:a8: d9:a9:45:fa:b9:38:68:dd:0b:28:0b:8b:76:99:43: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8D:EE:96:BD:D5:E0:38:9B:B8:8E:CC:E4:B3:7E:FC:DF:AC:25:6E X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f4:8a:02:b3:72:79:3f:ce:7d:42:d7:d2:b5:36:8b:0b:b6: ea:40:7a:b6:4e:c4:15:88:5c:d0:65:46:e3:52:8d:43:65:e2: 72:99:90:bd:68:15:a2:5f:60:ca:8a:9a:3b:81:6e:1e:e0:37: 73:97:31:73:5f:af:54:f4:ff:39:35:c7:f7:43:6e:61:6c:48: a7:90:6a:c9:d8:b7:07:e1:bc:7f:b4:62:58:86:d9:ab:66:5c: 16:46:10:d1:0b:e5:4d:a6:c0:d7:be:25:3c:bf:ac:b7:29:39: 38:68:16:16:ea:4f:40:df:89:49:29:87:f6:e9:7d:fc:83:40: 39:20:11:7b:59:15:04:af:9d:8f:98:ae:be:2e:f4:a6:53:30: 8c:0b:42:28:ee:e1:3f:9c:62:f4:01:4d:30:ff:c2:d1:43:74: 68:5a:93:14:24:dd:a7:38:ce:73:0d:5d:3e:0b:05:ed:90:77: 31:40:e4:eb:5d:53:bb:bc:0c:9b:3a:d5:09:df:20:54:59:36: d5:7c:5b:56:05:22:e2:5a:f2:21:a3:a6:4c:db:1d:2a:f5:a0: 35:fb:e0:b8:8a:85:0e:5d:62:0d:f4:64:01:98:99:7a:57:cf: 60:33:dc:de:d6:4b:8d:49:60:aa:15:76:25:82:36:9f:fb:05: 10:ec:c1:65 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSsxym0+3xyTK7pwjucuiqyxXiZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI1MDQyNjExNDkxOFoX DTI1MDQyNzE0MDExOFowMzExMC8GA1UEAxMoRjY4REVFOTZCREQ1RTAzODlCQjg4 RUNDRTRCMzdFRkNERkFDMjU2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2iny/KZD/vHzffMmCMlZc9wEXNRypuXXd7Ran0Yo6zU5jmXeJPnjrZPGnn aPTSAsE3WPim/wA3urVMAOuhfLPRXNXS86qFbZPxhxYPBdsdpjmhJ9easkEjMWp2 L/t73u7xaKFR1CEvq1kTeB1QrKPdRVd2jcQN0WiVECTqakkXPLWSNjtqKRoRKcV0 VtMuoYARKZE0d0EobrPKaVTERadCy7EBrbFSxo3rVTTDV2uiC0tzm4PMnkwQwuNG i267fL4QHvkIUqHMMtnqC61rNgLfqx+nUm2sY0Ak8GoUkKu/zEmaijt2e653BbmV u2io2alF+rk4aN0LKAuLdplDobkCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBT2je6W vdXgOJu4jszks37836wlbjAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAL0igKzcnk/zn1C19K1 NosLtupAerZOxBWIXNBlRuNSjUNl4nKZkL1oFaJfYMqKmjuBbh7gN3OXMXNfr1T0 /zk1x/dDbmFsSKeQasnYtwfhvH+0YliG2atmXBZGENEL5U2mwNe+JTy/rLcpOTho FhbqT0DfiUkph/bpffyDQDkgEXtZFQSvnY+Yrr4u9KZTMIwLQiju4T+cYvQBTTD/ wtFDdGhakxQk3ac4znMNXT4LBe2QdzFA5OtdU7u8DJs61QnfIFRZNtV8W1YFIuJa 8iGjpkzbHSr1oDX74LiKhQ5dYg30ZAGYmXpXz2Az3N7WS41JYKoVdiWCNp/7BRDs wWU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:18:35 2025 by rpki-client