$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft File: A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft (raw, json) Hash identifier: 1Xbalvkw3D8XFeRL7OtGfsvQmeaKiq6loacIvz4JEfI= Subject key identifier: 38:29:9B:A5:C0:E7:0B:DD:E0:B3:DA:C9:89:CD:3C:EB:77:66:69:71 Authority key identifier: A7:B8:43:EC:30:FE:A3:10:A3:8C:31:4F:45:D3:8E:00:BA:B9:B1:80 Certificate issuer: /CN=A91650860000/serialNumber=A7B843EC30FEA310A38C314F45D38E00BAB9B180 Certificate serial: 51E3C8C3E4A563B34E363B78040697EE517366B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7hD7DD-oxCjjDFPRdOOALq5sYA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft Manifest number: 01 Signing time: Thu 03 Jul 2025 03:58:52 +0000 Manifest this update: Thu 03 Jul 2025 03:53:52 +0000 Manifest next update: Fri 04 Jul 2025 04:55:52 +0000 Files and hashes: 1: A7B843EC30FEA310A38C314F45D38E00BAB9B180.crl (hash: DU1KF9i/WWkZVl4Wz25K6t4zolFmKYQ9ad2zNxM83E8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.crl rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7hD7DD-oxCjjDFPRdOOALq5sYA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e3:c8:c3:e4:a5:63:b3:4e:36:3b:78:04:06:97:ee:51:73:66:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650860000, serialNumber=A7B843EC30FEA310A38C314F45D38E00BAB9B180 Validity Not Before: Jul 3 03:53:52 2025 GMT Not After : Jul 4 04:55:52 2025 GMT Subject: CN=38299BA5C0E70BDDE0B3DAC989CD3CEB77666971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:1f:cf:2a:91:2b:c5:fe:8a:96:c5:e0:07: cd:a5:ec:c7:22:57:e7:67:c4:65:37:04:70:93:8f: 7b:7d:2c:a7:9b:b1:7d:77:4e:37:0a:1e:a4:31:ec: ca:23:fa:da:0a:71:41:a9:fa:b9:e7:01:66:d9:c5: e9:f0:ed:83:57:5d:59:0e:eb:7f:3a:72:19:62:eb: a1:86:c6:28:07:ed:65:6d:fc:5e:fa:08:71:c2:ac: c4:f5:2b:cc:9c:dc:42:20:cf:90:74:eb:42:3d:34: 51:40:0d:22:78:75:4f:7d:2b:fa:c7:11:d6:13:eb: 96:19:20:49:29:0a:6c:dd:37:38:25:1c:e9:f7:43: b1:c4:28:6d:78:12:8f:86:2b:6b:b5:6d:a2:3d:9c: c8:c6:52:7b:ea:f4:b9:09:b2:d0:d1:72:12:f1:66: fd:cd:5b:3f:1b:55:96:40:ca:a9:cc:86:77:04:51: 86:65:55:c1:bc:80:a2:f3:e1:1f:60:9d:57:0c:1f: 65:13:fe:34:f0:d6:16:ac:8f:62:90:5a:e1:2e:2f: bf:d3:2d:7c:cb:de:a8:89:1f:71:ce:a0:16:e6:52: f6:1d:31:fd:eb:3a:60:aa:8d:6b:08:e3:cb:87:19: 80:82:b6:40:bd:21:77:2b:4c:29:c5:7b:e2:e2:e0: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:29:9B:A5:C0:E7:0B:DD:E0:B3:DA:C9:89:CD:3C:EB:77:66:69:71 X509v3 Authority Key Identifier: keyid:A7:B8:43:EC:30:FE:A3:10:A3:8C:31:4F:45:D3:8E:00:BA:B9:B1:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7hD7DD-oxCjjDFPRdOOALq5sYA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d4:f8:04:97:27:0a:25:41:51:8e:67:b0:2d:97:e4:6a:f8: 7c:75:1c:2e:8e:65:b0:6e:00:27:4b:79:80:ac:6d:80:1b:db: 24:3c:58:f0:54:e6:c1:25:a6:50:8f:ab:3d:5d:cb:19:7d:8a: 1f:42:59:ef:ee:7f:e1:9d:34:b2:e0:cb:1c:f7:e6:25:5c:49: fa:5c:64:42:41:83:c7:c2:7a:9d:26:b8:e7:e9:af:5f:41:19: a2:93:84:5c:37:6b:4f:e6:b4:71:db:20:77:0c:5a:08:26:ca: 91:98:cb:1f:7d:af:35:42:bc:ba:5a:95:93:4a:0e:58:d2:df: 0f:b0:1f:f8:ca:b3:46:ce:a3:83:41:77:21:dc:6d:ec:37:17: a7:71:29:52:26:0f:74:3d:8b:2a:5b:ea:e8:e8:9e:57:5d:ed: 03:c6:bd:8b:97:d8:64:66:ce:c5:d4:fb:88:b5:b9:4e:de:26: 52:1c:e4:0f:77:44:49:a8:d0:50:b1:d1:01:f4:79:e0:44:c2: b2:90:db:4a:50:9f:5e:bd:d8:31:b1:62:65:89:f9:e2:8a:b4: 84:98:77:8f:9d:2b:df:17:92:01:17:ba:04:7d:16:b1:94:7f: 80:eb:0e:e7:cf:d9:c5:2c:8e:90:e9:01:c4:54:8d:df:32:f4: 3b:be:66:83 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUePIw+SlY7NONjt4BAaX7lFzZrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyhBN0I4NDNFQzMw RkVBMzEwQTM4QzMxNEY0NUQzOEUwMEJBQjlCMTgwMB4XDTI1MDcwMzAzNTM1MloX DTI1MDcwNDA0NTU1MlowMzExMC8GA1UEAxMoMzgyOTlCQTVDMEU3MEJEREUwQjNE QUM5ODlDRDNDRUI3NzY2Njk3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIwFH88qkSvF/oqWxeAHzaXsxyJX52fEZTcEcJOPe30sp5uxfXdONwoepDHs yiP62gpxQan6uecBZtnF6fDtg1ddWQ7rfzpyGWLroYbGKAftZW38XvoIccKsxPUr zJzcQiDPkHTrQj00UUANInh1T30r+scR1hPrlhkgSSkKbN03OCUc6fdDscQobXgS j4Yra7Vtoj2cyMZSe+r0uQmy0NFyEvFm/c1bPxtVlkDKqcyGdwRRhmVVwbyAovPh H2CdVwwfZRP+NPDWFqyPYpBa4S4vv9MtfMveqIkfcc6gFuZS9h0x/es6YKqNawjj y4cZgIK2QL0hdytMKcV74uLgsssCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQ4KZul wOcL3eCz2smJzTzrd2ZpcTAfBgNVHSMEGDAWgBSnuEPsMP6jEKOMMU9F044Aurmx gDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NjMyZGMwNC02 OGRiLTQ3OTEtODdkZS0wNjgzZTNjMjg2NDYvNS9BN0I4NDNFQzMwRkVBMzEwQTM4 QzMxNEY0NUQzOEUwMEJBQjlCMTgwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9wN2hEN0RELW94Q2pqREZQUmRPT0FM cTVzWUEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTYzMmRjMDQt NjhkYi00NzkxLTg3ZGUtMDY4M2UzYzI4NjQ2LzUvQTdCODQzRUMzMEZFQTMxMEEz OEMzMTRGNDVEMzhFMDBCQUI5QjE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFLU+ASXJwolQVGOZ7At l+Rq+Hx1HC6OZbBuACdLeYCsbYAb2yQ8WPBU5sElplCPqz1dyxl9ih9CWe/uf+Gd NLLgyxz35iVcSfpcZEJBg8fCep0muOfpr19BGaKThFw3a0/mtHHbIHcMWggmypGY yx99rzVCvLpalZNKDljS3w+wH/jKs0bOo4NBdyHcbew3F6dxKVImD3Q9iypb6ujo nldd7QPGvYuX2GRmzsXU+4i1uU7eJlIc5A93REmo0FCx0QH0eeBEwrKQ20pQn169 2DGxYmWJ+eKKtISYd4+dK98XkgEXugR9FrGUf4DrDufP2cUsjpDpAcRUjd8y9Du+ ZoM= -----END CERTIFICATE-----Generated at Thu Jul 3 22:48:45 2025 by rpki-client