$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft File: A609E97AC39E3F53678C0C9422F89947B6146002.mft (raw, json) Hash identifier: cLaVMv/kWIMm0G7UbLAtpqgWqUDiWadNqIrQr84Y3yw= Subject key identifier: 27:19:C6:53:72:01:F9:5F:24:00:C5:E6:F6:0C:96:FD:D8:8E:32:F4 Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02 Certificate issuer: /CN=A609E97AC39E3F53678C0C9422F89947B6146002 Certificate serial: 5020036412F3301C3AFD50F104A09C9C2C912B9E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft Manifest number: 49 Signing time: Mon 20 Oct 2025 04:11:41 +0000 Manifest this update: Mon 20 Oct 2025 04:06:41 +0000 Manifest next update: Tue 21 Oct 2025 05:51:41 +0000 Files and hashes: 1: 326131343a373538333a3a2f33362d3336203d3e203233353037.roa (hash: glgfdV+PhGCRRHNDDvcfZnj+YSVY9ZJ2VPzzf2KV134=) 2: A609E97AC39E3F53678C0C9422F89947B6146002.crl (hash: AqCSnJhg85WmohEGSXQ+mfigyZzZog2Ewtz3DVg43aA=) 3: 326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa (hash: qQlstETzls89/hXo5myM2bkOC7VSlCrPNYMmfyxC3IU=) 4: 326131343a373538333a6230303a3a2f34302d3430203d3e20323134393736.roa (hash: hNUMEEnDrH2gkkUUmyGjFLZFZ1Ez86CcMERf0SfeX4o=) 5: 326131343a373538333a3730303a3a2f34302d3430203d3e20323134393736.roa (hash: mdPIsjImm3Eov7vPFeQtRSCN6wSJCAI1UyJtxVzVYR4=) 6: 326131343a373538333a6630303a3a2f34302d3430203d3e20323134393736.roa (hash: Rl24KpeRszfXP63EEYdjHphgvip3cAS9ZcbTz0D4RVw=) 7: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: h/faRutmshXccwksfhnp0IW/q8FgXwcvdBIuyRruBio=) 8: 326131343a373538333a6430303a3a2f34302d3430203d3e20323134393736.roa (hash: Q1Yc9aGEws5YYwK+QCg05EsB0jEAev+H6mymjWBSJyk=) 9: 326131343a373538333a3a2f33392d3339203d3e20323130343634.roa (hash: MjDlqyLqXAPlx4G6jj/eAEcU/aLYqdD8Oi3UpDW5w0M=) 10: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: K0Co1onM5BbkXQH/tFwckZOljCdXDgCDtKHluZWcCxU=) 11: 326131343a373538333a3930303a3a2f34302d3430203d3e20323134393736.roa (hash: 0qT1c1K69lqN9nUqtSWlpWhbn6N1fTr4T30eQdNLLRw=) 12: 326131343a373538333a3a2f34302d3430203d3e20323134373537.roa (hash: hcCpHwIQLDuq622pIwKuAMoJYid6gLvp4xFqggJmodo=) 13: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: ghgUC1FkuuCEpl7atds36b5VAhGeigyHvpmuAij4NF8=) 14: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: +wJjjEed1Hiq+IO3zR9/ZUn4Yc6NLql02f1VUhQS1AI=) Validation: OK Signature path: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:20:03:64:12:f3:30:1c:3a:fd:50:f1:04:a0:9c:9c:2c:91:2b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002 Validity Not Before: Oct 20 04:06:41 2025 GMT Not After : Oct 21 05:51:41 2025 GMT Subject: CN=2719C6537201F95F2400C5E6F60C96FDD88E32F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cd:01:0d:26:b6:11:a4:ab:69:3b:cd:2e:83: 25:e3:4e:db:6a:4f:bb:30:f3:40:d4:ac:49:4f:c5: d9:6d:5e:f2:05:e9:e9:09:b1:96:e3:79:77:be:80: 4b:9d:e6:02:58:95:43:b1:4f:80:4b:bf:55:f2:28: 31:24:06:4e:0b:07:d7:6c:a5:37:5b:de:84:a8:ce: ad:57:67:37:21:a1:33:43:79:00:42:dc:44:a5:e5: 5d:d1:fd:e2:ac:6f:04:88:ea:2a:8b:10:b6:8b:9e: d3:69:55:57:68:ca:47:74:30:3a:61:86:2e:9d:39: 43:47:b5:3e:3d:4b:90:b6:52:18:e2:c5:2f:23:6a: 6c:88:57:51:db:ca:d3:d9:3e:02:6d:c9:bf:da:ee: 60:b6:81:9e:c0:2c:cb:21:8e:87:07:75:85:b3:35: 9c:d5:72:39:5e:a9:cf:91:58:0f:56:5a:5d:e7:42: 14:a1:d9:1b:d9:1b:e6:e9:bd:2d:be:8e:79:72:cc: 0c:e1:9d:53:5f:fa:cf:8b:ef:f3:f9:70:dd:0d:ca: b9:d1:1d:64:ce:e3:87:e2:05:54:48:96:5b:92:ad: 11:f8:33:f8:87:6d:9a:c7:81:7a:fe:d5:ea:d4:5a: b1:a9:90:7f:b2:c4:f7:1c:98:52:5e:b9:a6:f9:f5: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:C6:53:72:01:F9:5F:24:00:C5:E6:F6:0C:96:FD:D8:8E:32:F4 X509v3 Authority Key Identifier: keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer Subject Information Access: Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3b:37:a2:8a:ba:84:4f:e4:24:e0:ad:54:d7:a7:7c:bb:07: bb:85:8b:f2:39:68:11:7e:e8:da:db:ee:f0:fd:99:65:75:bf: fb:be:7b:7d:59:25:a8:be:97:43:58:fb:58:81:7b:e9:3e:47: 80:f9:d9:45:bb:23:b1:50:3c:02:14:09:a2:9a:b5:88:6e:da: 11:27:3b:56:d6:93:15:da:ec:bd:b9:da:a9:57:c7:f9:b6:fc: 5c:12:2b:0d:38:af:e0:a4:44:eb:f3:a2:3c:83:95:88:d9:c1: 98:f7:9c:33:c2:6a:aa:bc:84:a2:17:53:fa:c4:2f:ba:07:94: 97:cd:dd:e0:8d:0e:a7:1f:49:c7:46:06:9b:6b:46:fb:9e:52: 01:25:09:9d:41:29:71:8b:02:a6:c2:6a:4f:4d:87:aa:77:96: 8d:b0:5b:e9:c8:86:68:55:ba:2a:4f:fa:52:ab:69:64:54:af: 03:53:18:5a:b9:8d:a9:7e:a3:bf:0d:7d:41:21:65:b0:a0:ea: 92:32:4c:a1:98:83:58:2a:50:98:cf:93:ab:0a:04:86:c6:94: b7:a9:7c:ae:82:c5:6d:ca:3e:d8:c1:2c:00:99:19:18:c9:72: fe:22:f0:54:64:81:75:ef:2c:0b:cf:d3:bb:74:51:95:52:29: 29:48:32:ac -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUUCADZBLzMBw6/VDxBKCcnCyRK54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdC NjE0NjAwMjAeFw0yNTEwMjAwNDA2NDFaFw0yNTEwMjEwNTUxNDFaMDMxMTAvBgNV BAMTKDI3MTlDNjUzNzIwMUY5NUYyNDAwQzVFNkY2MEM5NkZERDg4RTMyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzQENJrYRpKtpO80ugyXjTttq T7sw80DUrElPxdltXvIF6ekJsZbjeXe+gEud5gJYlUOxT4BLv1XyKDEkBk4LB9ds pTdb3oSozq1XZzchoTNDeQBC3ESl5V3R/eKsbwSI6iqLELaLntNpVVdoykd0MDph hi6dOUNHtT49S5C2UhjixS8jamyIV1HbytPZPgJtyb/a7mC2gZ7ALMshjocHdYWz NZzVcjleqc+RWA9WWl3nQhSh2RvZG+bpvS2+jnlyzAzhnVNf+s+L7/P5cN0NyrnR HWTO44fiBVRIlluSrRH4M/iHbZrHgXr+1erUWrGpkH+yxPccmFJeuab59WoHAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUJxnGU3IB+V8kAMXm9gyW/diOMvQwHwYDVR0j BBgwFoAUpgnpesOeP1NnjAyUIviZR7YUYAIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ LzAvQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5jcmww gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt YjA3OS0zMDllZDk3ZjM4MjQvMC9BNjA5RTk3QUMzOUUzRjUzNjc4QzBDOTQyMkY4 OTk0N0I2MTQ2MDAyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQLzAvQTYwOUU5N0FDMzlF M0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGg7N6KKuoRP 5CTgrVTXp3y7B7uFi/I5aBF+6Nrb7vD9mWV1v/u+e31ZJai+l0NY+1iBe+k+R4D5 2UW7I7FQPAIUCaKatYhu2hEnO1bWkxXa7L252qlXx/m2/FwSKw04r+CkROvzojyD lYjZwZj3nDPCaqq8hKIXU/rEL7oHlJfN3eCNDqcfScdGBptrRvueUgElCZ1BKXGL AqbCak9Nh6p3lo2wW+nIhmhVuipP+lKraWRUrwNTGFq5jal+o78NfUEhZbCg6pIy TKGYg1gqUJjPk6sKBIbGlLepfK6CxW3KPtjBLACZGRjJcv4i8FRkgXXvLAvP07t0 UZVSKSlIMqw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:53 2025 by rpki-client