$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: C5z8az/Rn8/f5BjGBaE0i45FEnmVPkbXD2SAmWxU5ak= Subject key identifier: 3E:2B:5F:C6:F6:1F:F0:19:2D:8D:E7:FB:4E:A7:E0:E9:59:A0:8A:28 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 12BB2C2C228964EE9F58E8DD9C247056D90E5E9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 014E Signing time: Fri 25 Apr 2025 06:27:15 +0000 Manifest this update: Fri 25 Apr 2025 06:22:15 +0000 Manifest next update: Sat 26 Apr 2025 09:42:15 +0000 Files and hashes: 1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: a1HwQDZFwbTYpvAw3ZSQrO2h/5FqyfrPMtDFm5HBcBE=) 2: AS153176.asa (hash: nTAPGafaR0TwBdv5jCAijmg7tuOn6F8lJBqMjy7Nxfk=) 3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: Hm6Zisp9rtO1MRy4fuc8qXTfS/nQ+EU71DsoKF+5F24=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:bb:2c:2c:22:89:64:ee:9f:58:e8:dd:9c:24:70:56:d9:0e:5e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Apr 25 06:22:15 2025 GMT Not After : Apr 26 09:42:15 2025 GMT Subject: CN=3E2B5FC6F61FF0192D8DE7FB4EA7E0E959A08A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:cd:e0:62:2f:65:6f:eb:ff:bf:aa:8e:e8: c9:ef:9d:11:da:6b:14:b8:dc:d3:18:b0:af:ef:08: e8:83:39:2c:9a:33:25:82:09:06:17:04:f3:62:af: ea:2b:42:3d:54:31:a0:a6:20:6b:f7:5c:a9:84:ed: 6b:f8:ec:a8:6b:51:e7:d7:c4:1f:ff:cc:cc:ba:ac: 37:2a:3b:c1:54:4c:24:cc:c5:d2:0b:67:e6:76:03: 9f:e0:6a:42:43:39:6a:5f:d6:68:a6:a0:39:c4:40: 3d:04:fa:f0:6b:02:4d:e2:5b:3d:16:97:52:03:06: 77:38:b8:22:fa:a5:a1:03:36:af:fe:bc:07:65:c5: 5a:e1:52:96:61:63:04:e4:89:03:06:72:72:be:17: 91:5c:9e:44:11:49:b4:b3:75:fc:d0:6d:1c:42:4b: 0e:50:72:d4:a3:6a:e7:97:98:16:9e:92:e6:64:23: db:c0:82:2a:be:d8:05:e8:ee:c9:31:c2:a4:33:b2: 23:3a:9a:97:fd:13:35:c7:09:c3:42:4c:e6:11:42: 83:1d:be:2c:bf:8a:42:5d:7f:64:70:50:3c:7f:f7: 08:76:ea:70:61:3a:cd:e6:52:8d:af:5c:c7:b4:fa: 63:a5:79:97:68:74:57:5e:23:2e:de:de:38:bc:d9: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2B:5F:C6:F6:1F:F0:19:2D:8D:E7:FB:4E:A7:E0:E9:59:A0:8A:28 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:67:e9:3e:f9:4e:26:a3:fc:fb:32:51:30:69:10:51:22: f5:71:eb:5b:81:63:e0:a4:21:d8:2d:1d:bb:11:f4:f4:77:a0: da:6c:9a:4e:13:13:fa:23:6f:5c:c3:03:0e:99:43:2f:32:7e: d9:62:76:03:23:10:47:17:42:43:86:a0:40:9c:6c:b2:bc:60: d1:c4:33:d7:ac:9e:91:61:dc:1c:7c:4a:62:c5:46:7c:be:da: 5c:7d:ce:ee:a4:d6:04:1a:22:32:90:75:48:e1:c4:ac:cc:6d: 77:fa:77:1d:37:3d:a0:54:7d:65:0e:93:2a:42:f7:85:87:1f: 30:e2:4a:54:25:ad:45:c9:90:d0:1b:f5:60:6f:4c:79:e0:b3: eb:76:ad:5a:81:50:f6:7d:f1:ed:b7:54:98:ec:a3:a7:56:d8: ea:93:9b:44:9b:be:4a:9f:35:54:d5:2e:3c:a5:ca:f3:df:a5: c4:88:b1:43:75:4c:37:ea:00:31:95:68:94:ec:08:b1:3f:c5: f2:d3:79:55:51:3a:14:63:7b:33:1a:f3:26:0b:6e:83:a2:25: b8:b9:72:14:65:1a:22:ac:b2:9d:fb:57:31:87:58:60:4e:07: f2:a5:4e:2b:36:7c:b7:82:db:a2:48:26:21:fa:3d:a3:60:ef: 83:35:cf:a7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUErssLCKJZO6fWOjdnCRwVtkOXp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI1MDQyNTA2MjIxNVoX DTI1MDQyNjA5NDIxNVowMzExMC8GA1UEAxMoM0UyQjVGQzZGNjFGRjAxOTJEOERF N0ZCNEVBN0UwRTk1OUEwOEEyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMczeBiL2Vv6/+/qo7oye+dEdprFLjc0xiwr+8I6IM5LJozJYIJBhcE82Kv 6itCPVQxoKYga/dcqYTta/jsqGtR59fEH//MzLqsNyo7wVRMJMzF0gtn5nYDn+Bq QkM5al/WaKagOcRAPQT68GsCTeJbPRaXUgMGdzi4IvqloQM2r/68B2XFWuFSlmFj BOSJAwZycr4XkVyeRBFJtLN1/NBtHEJLDlBy1KNq55eYFp6S5mQj28CCKr7YBeju yTHCpDOyIzqal/0TNccJw0JM5hFCgx2+LL+KQl1/ZHBQPH/3CHbqcGE6zeZSja9c x7T6Y6V5l2h0V14jLt7eOLzZCUECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQ+K1/G 9h/wGS2N5/tOp+DpWaCKKDAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGYXZ+k++U4mo/z7MlEw aRBRIvVx61uBY+CkIdgtHbsR9PR3oNpsmk4TE/ojb1zDAw6ZQy8yftlidgMjEEcX QkOGoECcbLK8YNHEM9esnpFh3Bx8SmLFRny+2lx9zu6k1gQaIjKQdUjhxKzMbXf6 dx03PaBUfWUOkypC94WHHzDiSlQlrUXJkNAb9WBvTHngs+t2rVqBUPZ98e23VJjs o6dW2OqTm0SbvkqfNVTVLjylyvPfpcSIsUN1TDfqADGVaJTsCLE/xfLTeVVROhRj ezMa8yYLboOiJbi5chRlGiKssp37VzGHWGBOB/KlTis2fLeC26JIJiH6PaNg74M1 z6c= -----END CERTIFICATE-----Generated at Sat Apr 26 05:09:15 2025 by rpki-client