$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: Mjcg95BxvtPJMrJlwPbigY9IUehZZ0LqAFyZZANwDxQ= Subject key identifier: 71:B8:68:69:41:B0:78:0D:42:17:45:28:A7:24:A6:F5:E7:C3:ED:CA Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 4B4B1AE320917CBF857AA3773F69A0EEF9A58DA8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 01A4 Signing time: Sun 03 Aug 2025 19:17:58 +0000 Manifest this update: Sun 03 Aug 2025 19:12:58 +0000 Manifest next update: Mon 04 Aug 2025 22:39:58 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: Ov3GvnlZOxiGq48awLN3S1RHIrWd2+hWZCrurQIuPWs=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: sWQMzSPI6Bg4G4IKisjp9DHougwIrJ9n/xHdiIfWjWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 22:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4b:1a:e3:20:91:7c:bf:85:7a:a3:77:3f:69:a0:ee:f9:a5:8d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Aug 3 19:12:58 2025 GMT Not After : Aug 4 22:39:58 2025 GMT Subject: CN=71B8686941B0780D42174528A724A6F5E7C3EDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:e6:39:a6:dd:dd:48:7c:85:79:52:00:86: 16:0f:39:75:96:81:9b:7e:6e:1d:7c:36:9a:e6:d7: fb:42:16:19:94:19:34:65:b5:92:2a:06:5a:43:43: 32:83:28:41:e2:eb:82:07:d7:b8:3c:fd:ea:4c:e8: 21:19:d2:21:82:28:78:9e:11:a1:9b:45:39:c2:a7: 2b:01:b1:f2:47:83:a4:85:91:b3:a7:cf:45:7b:b9: a0:e3:5c:ed:82:e9:31:a1:24:cc:df:bf:51:d5:3b: a9:8c:91:88:68:73:56:b3:9e:b1:5d:08:2e:d1:89: b2:d9:41:7e:9b:ff:ae:5b:c1:8c:88:f8:3c:03:71: de:8f:19:f2:91:5f:b6:22:27:8c:ba:6c:50:9e:e3: 5e:20:e5:2d:3a:55:34:3e:1d:f4:b6:87:95:1c:9f: 23:a4:6f:8a:a3:89:d7:94:fd:27:9a:1b:b5:2d:b6: 8f:13:f8:24:00:b8:57:e6:e3:8a:9f:d0:47:90:30: 23:e9:99:d4:30:67:93:91:b1:09:a3:05:1c:8d:a6: ec:39:3b:e1:41:03:5c:07:75:76:47:2c:73:13:94: d2:43:49:91:6d:21:e3:a9:3b:b9:00:ca:1d:80:50: 1d:22:36:96:cf:6e:30:c5:43:d3:8c:ff:22:06:8e: 78:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:68:69:41:B0:78:0D:42:17:45:28:A7:24:A6:F5:E7:C3:ED:CA X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e9:83:a8:ed:b4:ca:13:c1:b2:10:2f:60:c1:c1:fb:62:ce: 80:11:fe:15:b4:fb:b9:1b:fe:84:d2:07:58:9b:f1:c0:48:8a: 21:5c:6d:b7:a9:5b:b8:4f:f0:77:54:b0:cc:6d:f2:78:8b:8d: e4:a2:74:b2:74:ab:b4:d9:d0:0e:cf:00:69:de:3c:ec:c6:0b: d2:06:cb:45:b7:f8:68:2f:5f:57:fb:9a:5f:34:14:c4:c1:8d: 9a:65:e3:fd:8f:58:a5:dd:2e:cf:20:fa:12:cf:a6:ee:b5:d7: 77:5f:0e:c2:24:cd:e9:56:e8:92:e3:95:b1:41:b5:8d:51:0e: bc:97:2a:6b:a9:e1:8d:91:ba:11:5d:c7:08:9a:7b:69:44:bd: 94:4a:6b:c7:74:4b:50:5c:f4:83:df:87:c6:ac:c0:de:91:ff: a1:c5:26:f7:00:9f:6a:3d:d7:c2:2a:62:0e:42:b7:2b:c7:0b: aa:95:96:aa:2a:c5:a4:69:a8:71:3b:4f:7c:fe:3d:c5:af:7b: da:71:7f:20:28:59:49:89:b2:b2:cc:44:6c:ed:75:9f:e7:35: 5e:5d:1a:56:84:61:cf:71:1f:ac:5b:5c:76:b0:e3:fc:4a:96: 93:27:55:77:6e:1f:dc:81:59:ca:f9:4f:4d:18:24:ce:eb:5f: 07:b3:f8:c2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS0sa4yCRfL+FeqN3P2mg7vmljagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI1MDgwMzE5MTI1OFoX DTI1MDgwNDIyMzk1OFowMzExMC8GA1UEAxMoNzFCODY4Njk0MUIwNzgwRDQyMTc0 NTI4QTcyNEE2RjVFN0MzRURDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIC5jmm3d1IfIV5UgCGFg85dZaBm35uHXw2mubX+0IWGZQZNGW1kioGWkND MoMoQeLrggfXuDz96kzoIRnSIYIoeJ4RoZtFOcKnKwGx8keDpIWRs6fPRXu5oONc 7YLpMaEkzN+/UdU7qYyRiGhzVrOesV0ILtGJstlBfpv/rlvBjIj4PANx3o8Z8pFf tiInjLpsUJ7jXiDlLTpVND4d9LaHlRyfI6RviqOJ15T9J5obtS22jxP4JAC4V+bj ip/QR5AwI+mZ1DBnk5GxCaMFHI2m7Dk74UEDXAd1dkcscxOU0kNJkW0h46k7uQDK HYBQHSI2ls9uMMVD04z/IgaOeDMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRxuGhp QbB4DUIXRSinJKb158PtyjAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAInpg6jttMoTwbIQL2DB wftizoAR/hW0+7kb/oTSB1ib8cBIiiFcbbepW7hP8HdUsMxt8niLjeSidLJ0q7TZ 0A7PAGnePOzGC9IGy0W3+GgvX1f7ml80FMTBjZpl4/2PWKXdLs8g+hLPpu6113df DsIkzelW6JLjlbFBtY1RDryXKmup4Y2RuhFdxwiae2lEvZRKa8d0S1Bc9IPfh8as wN6R/6HFJvcAn2o918IqYg5CtyvHC6qVlqoqxaRpqHE7T3z+PcWve9pxfyAoWUmJ srLMRGztdZ/nNV5dGlaEYc9xH6xbXHaw4/xKlpMnVXduH9yBWcr5T00YJM7rXwez +MI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:19 2025 by rpki-client