$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.mft File: D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.mft (raw, json) Hash identifier: IrIdvhANbzVmz0u8mRQ6HXDpmZsR8m2RIk4wacVkdgA= Subject key identifier: B9:E6:73:AE:33:06:97:9F:B1:3D:67:FD:E6:8C:B8:97:B2:EA:3F:D4 Authority key identifier: D6:F8:11:45:ED:89:82:DB:07:84:5B:74:C0:4E:D0:CA:8C:FA:F2:6A Certificate issuer: /CN=A91650860000/serialNumber=D6F81145ED8982DB07845B74C04ED0CA8CFAF26A Certificate serial: 207B90B86E8EA060EC6B2F8355F703E3728AD0E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1vgRRe2JgtsHhFt0wE7Qyoz68mo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.mft Manifest number: 04 Signing time: Thu 03 Jul 2025 03:57:27 +0000 Manifest this update: Thu 03 Jul 2025 03:52:27 +0000 Manifest next update: Fri 04 Jul 2025 06:56:27 +0000 Files and hashes: 1: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: XJzDTFEVoqmsrlpLY8Df04eiWxYNdF1B5aizqEngHzQ=) 2: D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.crl (hash: WfjWkSqmkaRmksYH15NyGXQIGlDR7mFsGlLNQ010rf8=) 3: 3136302e32322e3136382e302f32332d3234203d3e20313439333031.roa (hash: sKcngjfp2byzVHvZ68cUPTRH6dJqFuoYMAWQT9Cz4EE=) 4: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: ySF2TyQJM+zbWvJj0AiC50iGgUYv2IRMFNZ+FS1mqRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.crl rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1vgRRe2JgtsHhFt0wE7Qyoz68mo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 06:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7b:90:b8:6e:8e:a0:60:ec:6b:2f:83:55:f7:03:e3:72:8a:d0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650860000, serialNumber=D6F81145ED8982DB07845B74C04ED0CA8CFAF26A Validity Not Before: Jul 3 03:52:27 2025 GMT Not After : Jul 4 06:56:27 2025 GMT Subject: CN=B9E673AE3306979FB13D67FDE68CB897B2EA3FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:bd:3e:c6:aa:ce:5c:04:c5:c0:cb:78:32: ee:eb:42:99:14:a0:ff:63:0a:97:0c:dc:d5:5c:a0: 90:2f:2f:0e:9a:e1:17:92:3d:83:f0:95:4f:19:6c: 9a:40:7b:04:20:d8:aa:3d:0c:cf:99:ba:e3:3f:fe: 27:21:e8:84:05:d9:8a:e4:4d:1d:7d:32:5c:1f:43: 3d:97:fa:a5:9f:f9:a3:b6:23:c6:b5:a7:fd:d0:41: 77:13:42:50:b7:9b:05:0a:3e:cf:8e:90:14:82:95: a3:c1:a4:f9:4f:36:d3:5f:91:cf:06:e5:ae:2a:2a: c6:73:67:fd:c7:da:e2:2e:f6:f3:86:e3:8b:b6:42: a6:c6:18:77:50:88:28:62:4c:b9:b2:af:84:db:75: 0c:c9:bc:10:bb:03:40:08:9a:9e:09:36:5a:25:e1: 10:e0:be:d2:d1:a1:96:28:bd:a9:31:c4:ea:b1:a6: ed:d6:cf:d9:fc:0b:a7:52:c8:0f:d4:a6:9d:09:01: 0f:78:00:42:ed:e9:52:2c:da:0d:8a:05:e0:7d:e2: 4e:39:72:f9:d6:7a:53:b2:f8:e9:ac:f6:33:ef:ce: d7:6f:37:eb:2c:19:67:21:02:eb:3c:ed:4d:51:f6: 4a:9d:d9:ad:18:14:d8:a0:7d:cd:e1:89:19:cd:1a: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E6:73:AE:33:06:97:9F:B1:3D:67:FD:E6:8C:B8:97:B2:EA:3F:D4 X509v3 Authority Key Identifier: keyid:D6:F8:11:45:ED:89:82:DB:07:84:5B:74:C0:4E:D0:CA:8C:FA:F2:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1vgRRe2JgtsHhFt0wE7Qyoz68mo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D6F81145ED8982DB07845B74C04ED0CA8CFAF26A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f1:26:a7:2f:6b:b3:85:28:25:c3:d4:7d:2a:88:78:fd:50: e3:4e:a3:10:fa:e3:f8:8f:a3:d7:1f:66:52:4b:01:41:fb:bb: e8:d5:48:99:33:f9:c2:cf:c5:15:92:15:ad:11:ef:f9:d5:78: a7:45:71:c8:25:b9:15:86:ef:c4:6b:f6:0f:98:1e:f7:ed:1d: 6e:22:71:e3:12:0f:d7:42:ac:59:b3:4e:18:2b:40:32:d2:67: 53:d8:97:a4:cf:87:cf:95:d9:76:87:9b:9b:7c:e6:a4:e5:65: db:43:ea:48:6c:4a:60:fd:77:0d:37:80:a1:14:18:78:4c:08: 7a:64:4e:a3:7b:05:ef:44:b5:d5:ca:f5:af:00:e0:3a:89:e2: 23:45:71:7b:c8:56:7b:a0:02:3e:07:b3:20:22:c5:4a:0e:fa: 9d:da:ca:e1:d4:f7:d8:5f:b2:6e:d9:dc:bb:a3:31:31:8e:69: 24:55:a1:98:3e:6c:26:a4:05:79:49:e9:0d:25:c4:ca:9c:3f: 77:12:de:0d:0a:05:a8:1d:6d:b2:f4:b7:c2:24:b9:26:f0:d9: 2b:ac:06:12:ef:56:7e:53:05:96:d0:d3:69:0b:5f:c2:36:f1: e7:7e:55:b1:eb:3f:41:d8:cc:23:b8:89:7b:6a:08:c8:b1:5d: 5e:57:aa:c0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIHuQuG6OoGDsay+DVfcD43KK0OUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyhENkY4MTE0NUVE ODk4MkRCMDc4NDVCNzRDMDRFRDBDQThDRkFGMjZBMB4XDTI1MDcwMzAzNTIyN1oX DTI1MDcwNDA2NTYyN1owMzExMC8GA1UEAxMoQjlFNjczQUUzMzA2OTc5RkIxM0Q2 N0ZERTY4Q0I4OTdCMkVBM0ZENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlJvT7Gqs5cBMXAy3gy7utCmRSg/2MKlwzc1VygkC8vDprhF5I9g/CVTxls mkB7BCDYqj0Mz5m64z/+JyHohAXZiuRNHX0yXB9DPZf6pZ/5o7YjxrWn/dBBdxNC ULebBQo+z46QFIKVo8Gk+U8201+RzwblrioqxnNn/cfa4i7284bji7ZCpsYYd1CI KGJMubKvhNt1DMm8ELsDQAiangk2WiXhEOC+0tGhlii9qTHE6rGm7dbP2fwLp1LI D9SmnQkBD3gAQu3pUizaDYoF4H3iTjly+dZ6U7L46az2M+/O12836ywZZyEC6zzt TVH2Sp3ZrRgU2KB9zeGJGc0a6icCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBS55nOu MwaXn7E9Z/3mjLiXsuo/1DAfBgNVHSMEGDAWgBTW+BFF7YmC2weEW3TATtDKjPry ajAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzY1NjM1ZC0z MWI5LTQ0MjEtOTdmYS1mMDU2ZWIxNDFhMTYvNS9ENkY4MTE0NUVEODk4MkRCMDc4 NDVCNzRDMDRFRDBDQThDRkFGMjZBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi8xdmdSUmUySmd0c0hoRnQwd0U3UXlv ejY4bW8uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc2NTYzNWQt MzFiOS00NDIxLTk3ZmEtZjA1NmViMTQxYTE2LzUvRDZGODExNDVFRDg5ODJEQjA3 ODQ1Qjc0QzA0RUQwQ0E4Q0ZBRjI2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG7xJqcva7OFKCXD1H0q iHj9UONOoxD64/iPo9cfZlJLAUH7u+jVSJkz+cLPxRWSFa0R7/nVeKdFccgluRWG 78Rr9g+YHvftHW4iceMSD9dCrFmzThgrQDLSZ1PYl6TPh8+V2XaHm5t85qTlZdtD 6khsSmD9dw03gKEUGHhMCHpkTqN7Be9EtdXK9a8A4DqJ4iNFcXvIVnugAj4HsyAi xUoO+p3ayuHU99hfsm7Z3LujMTGOaSRVoZg+bCakBXlJ6Q0lxMqcP3cS3g0KBagd bbL0t8IkuSbw2SusBhLvVn5TBZbQ02kLX8I28ed+VbHrP0HYzCO4iXtqCMixXV5X qsA= -----END CERTIFICATE-----Generated at Thu Jul 3 22:45:01 2025 by rpki-client