$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D84DB8E71BA79F856C5E059726BA62950F343CCE.mft File: D84DB8E71BA79F856C5E059726BA62950F343CCE.mft (raw, json) Hash identifier: OwvyaJXnD7MPvMnJi/HpAIk44Nt1UrnaVGwnZA0OPHo= Subject key identifier: FB:1F:76:B3:7D:75:A4:B7:71:58:A8:F9:F6:0E:0A:7E:A6:53:EE:1C Authority key identifier: D8:4D:B8:E7:1B:A7:9F:85:6C:5E:05:97:26:BA:62:95:0F:34:3C:CE Certificate issuer: /CN=A91650860000/serialNumber=D84DB8E71BA79F856C5E059726BA62950F343CCE Certificate serial: 103E5B8E01E5A19DBE51FDD39126B728658E99F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2E245xunn4VsXgWXJrpilQ80PM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D84DB8E71BA79F856C5E059726BA62950F343CCE.mft Manifest number: 02 Signing time: Thu 03 Jul 2025 04:39:47 +0000 Manifest this update: Thu 03 Jul 2025 04:34:47 +0000 Manifest next update: Fri 04 Jul 2025 07:54:47 +0000 Files and hashes: 1: D84DB8E71BA79F856C5E059726BA62950F343CCE.crl (hash: jMwVJ3UsnBUM6L/ZafJ4LORZPZ+q12Nbcgd/2+OPrfw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D84DB8E71BA79F856C5E059726BA62950F343CCE.crl rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D84DB8E71BA79F856C5E059726BA62950F343CCE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2E245xunn4VsXgWXJrpilQ80PM4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 07:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3e:5b:8e:01:e5:a1:9d:be:51:fd:d3:91:26:b7:28:65:8e:99:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650860000, serialNumber=D84DB8E71BA79F856C5E059726BA62950F343CCE Validity Not Before: Jul 3 04:34:47 2025 GMT Not After : Jul 4 07:54:47 2025 GMT Subject: CN=FB1F76B37D75A4B77158A8F9F60E0A7EA653EE1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:d6:89:14:cd:37:5a:26:a9:39:9b:dc:61: 48:48:5e:79:5f:be:46:4e:44:2a:66:72:29:ae:d6: f3:1c:af:fb:4e:b2:43:31:f0:06:2d:bd:a8:65:f2: dc:01:75:a7:be:aa:7a:2d:18:8c:7d:bc:42:f4:88: b8:b2:94:ac:76:69:b0:a4:05:9c:cd:67:92:e0:27: ef:01:a8:f2:19:c9:27:05:53:eb:40:56:44:b3:39: 35:d3:c1:1a:d4:23:0c:05:02:9b:23:8d:ac:e6:ad: 3c:b5:d3:12:cc:ff:ef:96:b5:dd:a1:f7:b1:b3:9c: 20:b6:d5:18:ca:52:70:3e:89:6a:0c:72:b5:92:0b: 28:69:b2:08:3a:f1:c9:82:8e:60:0f:38:5c:c7:eb: 6e:ce:10:c3:42:31:d4:11:a5:04:81:ad:54:88:0b: ce:e4:14:6f:a7:ef:04:9c:22:79:9c:c1:fa:45:35: 32:bd:81:39:8b:64:5c:12:0c:76:b2:5b:ba:e9:d7: ec:3e:ef:63:e2:00:39:fb:d2:e3:a6:10:da:aa:7a: f7:6c:bf:ec:d1:3f:e7:a1:92:c3:dd:a2:57:b9:c0: 6c:1c:5f:02:47:98:85:0f:e2:6f:9f:d4:a4:62:2e: 12:d2:1d:4d:66:01:e6:f9:f4:e5:13:44:0c:43:62: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1F:76:B3:7D:75:A4:B7:71:58:A8:F9:F6:0E:0A:7E:A6:53:EE:1C X509v3 Authority Key Identifier: keyid:D8:4D:B8:E7:1B:A7:9F:85:6C:5E:05:97:26:BA:62:95:0F:34:3C:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D84DB8E71BA79F856C5E059726BA62950F343CCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2E245xunn4VsXgWXJrpilQ80PM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/5/D84DB8E71BA79F856C5E059726BA62950F343CCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e9:dd:88:80:8c:ea:37:94:8e:13:2a:b5:29:5a:8f:fd:ed: e4:fe:52:cc:27:84:1e:4b:80:32:4f:cc:81:2d:93:c9:06:6f: df:0a:bf:a6:0e:c2:fc:d7:da:63:9b:32:0a:37:4d:e3:39:91: 98:48:d1:73:fb:d0:36:54:08:18:d3:46:c9:48:19:db:2e:50: 16:82:0e:e9:23:cf:74:09:6e:39:9a:29:3a:0b:d9:64:70:0a: a6:a0:8a:6d:5e:bc:c8:ed:79:69:a7:bc:8e:92:3c:ca:28:09: 12:ab:1e:6a:db:95:05:ca:a1:83:8f:db:56:09:89:40:6b:4c: 59:64:39:5b:eb:e7:5a:70:77:6a:79:a0:31:70:64:27:01:d9: e4:40:31:8c:dc:03:01:a5:ce:3a:62:7e:3e:9e:3e:80:80:3d: e2:d7:4c:8d:b3:c8:04:01:ce:c8:93:3b:64:ee:5b:0a:b7:c4: 06:53:d7:09:50:cf:1e:3f:16:f5:d9:c5:15:15:d6:ed:56:09: 11:cb:dc:53:7d:38:d3:65:5f:f7:da:c1:fe:40:77:61:93:c5: 2c:af:ff:b0:7a:cb:9b:6e:c9:be:76:82:fb:ce:df:f7:f0:38: 8a:31:cc:c1:ef:c6:fb:28:46:12:4a:5e:93:aa:77:f6:c6:bb: cc:ec:bc:94 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUED5bjgHloZ2+Uf3TkSa3KGWOmfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyhEODREQjhFNzFC QTc5Rjg1NkM1RTA1OTcyNkJBNjI5NTBGMzQzQ0NFMB4XDTI1MDcwMzA0MzQ0N1oX DTI1MDcwNDA3NTQ0N1owMzExMC8GA1UEAxMoRkIxRjc2QjM3RDc1QTRCNzcxNThB OEY5RjYwRTBBN0VBNjUzRUUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANam1okUzTdaJqk5m9xhSEheeV++Rk5EKmZyKa7W8xyv+06yQzHwBi29qGXy 3AF1p76qei0YjH28QvSIuLKUrHZpsKQFnM1nkuAn7wGo8hnJJwVT60BWRLM5NdPB GtQjDAUCmyONrOatPLXTEsz/75a13aH3sbOcILbVGMpScD6JagxytZILKGmyCDrx yYKOYA84XMfrbs4Qw0Ix1BGlBIGtVIgLzuQUb6fvBJwieZzB+kU1Mr2BOYtkXBIM drJbuunX7D7vY+IAOfvS46YQ2qp692y/7NE/56GSw92iV7nAbBxfAkeYhQ/ib5/U pGIuEtIdTWYB5vn05RNEDENi5D0CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBT7H3az fXWkt3FYqPn2Dgp+plPuHDAfBgNVHSMEGDAWgBTYTbjnG6efhWxeBZcmumKVDzQ8 zjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzY1NjM1ZC0z MWI5LTQ0MjEtOTdmYS1mMDU2ZWIxNDFhMTYvNS9EODREQjhFNzFCQTc5Rjg1NkM1 RTA1OTcyNkJBNjI5NTBGMzQzQ0NFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi8yRTI0NXh1bm40VnNYZ1dYSnJwaWxR ODBQTTQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc2NTYzNWQt MzFiOS00NDIxLTk3ZmEtZjA1NmViMTQxYTE2LzUvRDg0REI4RTcxQkE3OUY4NTZD NUUwNTk3MjZCQTYyOTUwRjM0M0NDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGjp3YiAjOo3lI4TKrUp Wo/97eT+UswnhB5LgDJPzIEtk8kGb98Kv6YOwvzX2mObMgo3TeM5kZhI0XP70DZU CBjTRslIGdsuUBaCDukjz3QJbjmaKToL2WRwCqagim1evMjteWmnvI6SPMooCRKr HmrblQXKoYOP21YJiUBrTFlkOVvr51pwd2p5oDFwZCcB2eRAMYzcAwGlzjpifj6e PoCAPeLXTI2zyAQBzsiTO2TuWwq3xAZT1wlQzx4/FvXZxRUV1u1WCRHL3FN9ONNl X/fawf5Ad2GTxSyv/7B6y5tuyb52gvvO3/fwOIoxzMHvxvsoRhJKXpOqd/bGu8zs vJQ= -----END CERTIFICATE-----Generated at Thu Jul 3 22:39:52 2025 by rpki-client