$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: R2zY852nzkslS4Vqf/O35EixurzO5W4OvP8Z0PH/0EM= Subject key identifier: E3:3E:37:42:5E:57:B9:67:35:98:3A:73:C3:85:6F:F9:47:2F:6E:AB Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 50FF64E1D52ED2EA4A8C205B9A9E6B41FCDE20C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 0173 Signing time: Sun 29 Jun 2025 10:46:57 +0000 Manifest this update: Sun 29 Jun 2025 10:41:57 +0000 Manifest next update: Mon 30 Jun 2025 13:59:57 +0000 Files and hashes: 1: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: sWQMzSPI6Bg4G4IKisjp9DHougwIrJ9n/xHdiIfWjWY=) 2: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: gVaupkCnCb+KwLo8zIytynd3Q0eAwnb4g/HUdyBQT18=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 13:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ff:64:e1:d5:2e:d2:ea:4a:8c:20:5b:9a:9e:6b:41:fc:de:20:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Jun 29 10:41:57 2025 GMT Not After : Jun 30 13:59:57 2025 GMT Subject: CN=E33E37425E57B96735983A73C3856FF9472F6EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:c4:bc:6f:17:f5:07:27:67:98:1c:9f:f4: 12:a5:ea:99:f3:79:89:ed:41:77:80:8f:2c:f8:08: fd:26:e3:db:86:8e:b2:6a:62:d0:da:79:5b:67:b5: 06:3b:b8:50:f4:6c:9a:75:34:ec:ad:f2:ed:40:8d: 6f:6d:3a:6d:25:30:bd:c7:fb:12:0b:31:94:e8:04: 93:a2:5b:7f:2d:e8:c4:fc:16:89:82:2f:e8:44:ed: d9:b7:bf:9d:0c:b8:81:0c:1b:29:c0:56:bc:5b:08: 61:46:7d:dc:be:49:2c:11:c7:e5:1d:60:ad:65:ad: 3b:8f:94:86:50:5c:06:9b:2c:cf:ec:89:ab:2e:24: 5d:ea:dc:3c:a8:d8:eb:e0:10:9a:ca:59:1f:83:02: 2a:e5:80:b6:2e:4d:4c:55:c5:57:d1:0d:2f:0b:97: ca:a1:97:90:75:49:b9:e9:60:36:51:50:2f:c9:a9: a1:95:72:46:92:62:b3:f2:f8:cb:23:da:de:4a:2c: 3f:6c:a7:a7:f3:a0:9a:3b:78:56:4c:d5:eb:4e:81: 1c:ac:dc:d6:1d:7e:4b:eb:69:d9:fa:3b:cc:10:2d: dc:39:07:ff:62:7d:29:5b:f4:44:99:d8:59:81:bb: 69:52:5d:8f:b4:a4:41:10:a0:43:48:2c:eb:63:5b: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3E:37:42:5E:57:B9:67:35:98:3A:73:C3:85:6F:F9:47:2F:6E:AB X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:49:87:a6:66:39:07:f2:7c:02:06:cf:f0:98:e9:19:89:a8: ea:95:4e:5c:0d:98:ad:15:6f:2b:6e:a6:f5:ac:a5:b3:0d:d7: 54:15:6b:ed:75:9e:5e:3c:e2:74:87:e4:44:cb:63:07:0d:9a: 08:78:ab:b0:64:b5:00:0e:88:6c:2c:fe:e4:41:31:60:21:37: 64:04:82:b9:0f:b7:15:56:14:28:3b:d4:37:e1:20:20:f5:69: 7f:2b:0f:43:97:9f:f9:43:7a:37:bc:8c:75:9f:87:8c:d2:68: f9:58:6c:15:57:19:36:8a:d8:5e:bb:4d:49:b9:ab:05:fc:8a: 66:63:88:f8:bd:a1:57:9c:f1:b2:f6:3d:04:0f:07:6b:bb:00: 74:e8:c9:8e:e0:a9:63:f3:77:6c:85:63:63:c0:eb:22:a3:67: 81:b1:20:4f:75:53:db:a4:7c:25:41:6b:7b:3b:7e:6e:c2:2b: b9:30:02:4d:b3:cd:06:5d:b3:ef:eb:f4:10:f8:88:14:d1:e1: 14:71:55:96:78:d7:c5:70:24:e0:65:be:f0:33:9a:7e:96:fe: 3f:3b:b3:a1:b0:9c:27:45:8a:80:aa:f9:8e:9e:62:a0:a6:9e: 84:b1:ca:13:d1:08:b9:3c:71:df:12:e1:1a:6d:87:03:a8:e4: e8:bd:48:1f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUP9k4dUu0upKjCBbmp5rQfzeIMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI1MDYyOTEwNDE1N1oX DTI1MDYzMDEzNTk1N1owMzExMC8GA1UEAxMoRTMzRTM3NDI1RTU3Qjk2NzM1OTgz QTczQzM4NTZGRjk0NzJGNkVBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3JxLxvF/UHJ2eYHJ/0EqXqmfN5ie1Bd4CPLPgI/Sbj24aOsmpi0Np5W2e1 Bju4UPRsmnU07K3y7UCNb206bSUwvcf7EgsxlOgEk6Jbfy3oxPwWiYIv6ETt2be/ nQy4gQwbKcBWvFsIYUZ93L5JLBHH5R1grWWtO4+UhlBcBpssz+yJqy4kXercPKjY 6+AQmspZH4MCKuWAti5NTFXFV9ENLwuXyqGXkHVJuelgNlFQL8mpoZVyRpJis/L4 yyPa3kosP2ynp/Ogmjt4VkzV606BHKzc1h1+S+tp2fo7zBAt3DkH/2J9KVv0RJnY WYG7aVJdj7SkQRCgQ0gs62Nb4UMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTjPjdC Xle5ZzWYOnPDhW/5Ry9uqzAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK5Jh6ZmOQfyfAIGz/CY 6RmJqOqVTlwNmK0VbytupvWspbMN11QVa+11nl484nSH5ETLYwcNmgh4q7BktQAO iGws/uRBMWAhN2QEgrkPtxVWFCg71DfhICD1aX8rD0OXn/lDeje8jHWfh4zSaPlY bBVXGTaK2F67TUm5qwX8imZjiPi9oVec8bL2PQQPB2u7AHToyY7gqWPzd2yFY2PA 6yKjZ4GxIE91U9ukfCVBa3s7fm7CK7kwAk2zzQZds+/r9BD4iBTR4RRxVZZ418Vw JOBlvvAzmn6W/j87s6GwnCdFioCq+Y6eYqCmnoSxyhPRCLk8cd8S4RpthwOo5Oi9 SB8= -----END CERTIFICATE-----Generated at Sun Jun 29 12:30:03 2025 by rpki-client