$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft File: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft (raw, json) Hash identifier: GvXnXzS2kTrAUQLU0d5lRsBonavSVqO0Q88ki4cfX74= Subject key identifier: 33:90:53:CC:4C:6D:24:7D:5F:87:50:18:E2:29:D6:1B:2F:D5:95:DC Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 7C9352F9B2AC724BC4822409546998E3C6448F5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft Manifest number: 01BD Signing time: Fri 22 Aug 2025 20:19:15 +0000 Manifest this update: Fri 22 Aug 2025 20:14:15 +0000 Manifest next update: Sat 23 Aug 2025 21:27:15 +0000 Files and hashes: 1: C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl (hash: kxzbWcdbSRgV05yP/WNljMUkCJo5zLd5gnMKCQNs95M=) 2: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (hash: sWQMzSPI6Bg4G4IKisjp9DHougwIrJ9n/xHdiIfWjWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:93:52:f9:b2:ac:72:4b:c4:82:24:09:54:69:98:e3:c6:44:8f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Aug 22 20:14:15 2025 GMT Not After : Aug 23 21:27:15 2025 GMT Subject: CN=339053CC4C6D247D5F875018E229D61B2FD595DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:43:58:aa:6a:aa:07:af:b6:ff:a4:91:26:fb: dd:4b:15:26:df:94:f6:df:56:e1:21:55:3a:38:d7: d8:a4:70:a7:e6:dd:8a:d5:87:5f:1c:0d:7c:1e:dc: bc:96:05:16:73:66:4f:b0:61:73:c4:30:82:29:3c: 1a:dd:70:f7:80:6f:5d:ff:1d:87:17:6b:3f:69:4b: db:9f:1b:88:38:b0:7e:1b:92:18:93:ef:c0:cf:3f: 4a:ce:83:57:13:fb:e3:12:99:14:3d:73:51:95:96: e2:37:42:f8:61:ca:ba:17:89:f8:50:d4:74:95:17: 14:19:64:87:0b:2e:6e:90:86:b5:69:b5:a6:09:61: 1c:d9:31:d8:2a:30:1f:ce:26:66:d7:31:76:6e:6d: ba:07:d2:1b:b8:32:17:2b:87:d7:16:19:1e:9d:dc: 1e:41:77:b3:fe:49:5c:10:8b:ad:66:92:25:88:03: f2:5e:c6:fb:62:2a:d4:5c:ba:68:87:a5:d8:ba:a1: 9f:5a:e2:b2:85:72:a5:ca:d9:17:17:09:b9:03:78: 8a:57:fd:e5:ab:b6:c2:38:d8:d5:36:2d:cd:b9:02: fe:c5:5d:8b:71:78:34:df:11:96:4f:8b:7b:23:20: d2:dc:a9:9e:d1:28:15:f2:fe:3f:90:00:0f:2b:5f: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:90:53:CC:4C:6D:24:7D:5F:87:50:18:E2:29:D6:1B:2F:D5:95:DC X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:da:98:50:15:84:a6:55:bd:2a:f5:29:40:4c:68:95:5b:64: c9:d5:66:2f:3b:61:89:9a:bb:90:3a:a7:fa:bc:cc:42:60:2d: a0:18:bc:c9:e9:9d:0b:6e:43:e0:51:fc:7c:82:e1:95:71:12: 3a:4b:8a:45:17:a7:87:51:5b:b0:fd:72:7d:40:88:43:5d:3d: f8:d4:90:1f:da:ce:0f:d9:29:57:56:4e:5a:ea:a6:ab:1d:b9: dc:5c:ab:69:31:f3:48:61:63:39:e6:6c:42:ae:70:f5:95:e2: 56:1a:0d:f5:77:57:b2:fc:27:b5:0c:f0:17:8d:d5:87:79:d8: 61:1b:fe:a5:43:75:8f:cc:2e:dc:2e:20:38:ba:55:69:e8:1b: 9b:e7:85:de:a0:29:37:53:ef:03:41:04:d7:d8:dd:69:5d:84: fb:3d:60:57:6b:b5:0e:8e:c0:c3:87:f1:cd:55:db:a3:23:d6: 32:bd:46:8f:0a:d8:87:c4:25:83:ef:2f:2b:0c:3b:00:d4:45: c1:7a:f0:45:88:0b:21:1d:79:3a:2c:cf:3f:85:d2:13:59:1a: 6a:6b:f2:35:be:45:05:91:b7:22:40:7b:cb:f5:58:63:ed:dd: bb:10:a3:05:b6:cc:bc:0f:75:70:44:fd:5a:74:56:55:11:f9: a7:5f:86:90 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfJNS+bKsckvEgiQJVGmY48ZEj1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI1MDgyMjIwMTQxNVoX DTI1MDgyMzIxMjcxNVowMzExMC8GA1UEAxMoMzM5MDUzQ0M0QzZEMjQ3RDVGODc1 MDE4RTIyOUQ2MUIyRkQ1OTVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJBDWKpqqgevtv+kkSb73UsVJt+U9t9W4SFVOjjX2KRwp+bditWHXxwNfB7c vJYFFnNmT7Bhc8Qwgik8Gt1w94BvXf8dhxdrP2lL258biDiwfhuSGJPvwM8/Ss6D VxP74xKZFD1zUZWW4jdC+GHKuheJ+FDUdJUXFBlkhwsubpCGtWm1pglhHNkx2Cow H84mZtcxdm5tugfSG7gyFyuH1xYZHp3cHkF3s/5JXBCLrWaSJYgD8l7G+2Iq1Fy6 aIel2Lqhn1risoVypcrZFxcJuQN4ilf95au2wjjY1TYtzbkC/sVdi3F4NN8Rlk+L eyMg0typntEoFfL+P5AADytfEZ8CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQzkFPM TG0kfV+HUBjiKdYbL9WV3DAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzIvQzRFNkMzREFFQjc0QkU0NTIw N0VCODBERURGMUZGRDU0QkMwMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANLamFAVhKZVvSr1KUBM aJVbZMnVZi87YYmau5A6p/q8zEJgLaAYvMnpnQtuQ+BR/HyC4ZVxEjpLikUXp4dR W7D9cn1AiENdPfjUkB/azg/ZKVdWTlrqpqsdudxcq2kx80hhYznmbEKucPWV4lYa DfV3V7L8J7UM8BeN1Yd52GEb/qVDdY/MLtwuIDi6VWnoG5vnhd6gKTdT7wNBBNfY 3WldhPs9YFdrtQ6OwMOH8c1V26Mj1jK9Ro8K2IfEJYPvLysMOwDURcF68EWICyEd eToszz+F0hNZGmpr8jW+RQWRtyJAe8v1WGPt3bsQowW2zLwPdXBE/Vp0VlUR+adf hpA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:14 2025 by rpki-client