$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: kin5iiyM2ibajaaJvcLyEMLYXidZrQORMlPaO9Jc5yw= Subject key identifier: 48:1E:ED:04:42:2E:C4:2B:13:2D:39:34:C9:5A:42:D0:97:8C:26:C4 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 48199F35761F25EBE8BD50F3239768E99A4FFC5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 014C Signing time: Wed 23 Apr 2025 17:50:33 +0000 Manifest this update: Wed 23 Apr 2025 17:45:33 +0000 Manifest next update: Thu 24 Apr 2025 18:55:33 +0000 Files and hashes: 1: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: Hm6Zisp9rtO1MRy4fuc8qXTfS/nQ+EU71DsoKF+5F24=) 2: AS153176.asa (hash: nTAPGafaR0TwBdv5jCAijmg7tuOn6F8lJBqMjy7Nxfk=) 3: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: nryNsERwsyDbW11rKBaaK4D37+hv95q817dZ+hlytqY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 18:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:19:9f:35:76:1f:25:eb:e8:bd:50:f3:23:97:68:e9:9a:4f:fc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Apr 23 17:45:33 2025 GMT Not After : Apr 24 18:55:33 2025 GMT Subject: CN=481EED04422EC42B132D3934C95A42D0978C26C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:3a:41:6f:07:33:b4:b3:ed:7f:8b:2d:0e: 84:17:a7:5c:a5:a1:fc:f9:9c:d2:66:4a:2b:1c:28: f9:c7:01:ea:34:2a:3b:15:9d:7d:c0:0a:fc:9a:15: 94:51:72:6d:05:63:cf:7e:9a:ec:f5:4d:be:ca:e0: 66:2f:c2:6d:c8:4d:ff:d0:fa:d7:1e:9b:31:22:31: c9:43:37:9d:18:fc:ed:3e:90:9a:16:7b:cd:19:47: 0a:41:c9:e3:2f:3b:1b:26:b5:52:82:6b:e8:cd:04: 65:83:54:57:66:ae:44:26:c1:d1:28:b3:31:4f:a3: 1d:47:6c:c4:8b:29:79:c9:fc:fc:80:18:e6:82:73: 2a:e3:cd:7f:8f:34:f0:32:c0:f8:4f:7b:a1:74:e0: 37:a7:9e:66:9a:eb:78:6f:67:c4:a4:ba:78:ff:0b: 22:2b:d6:4f:88:ab:7a:d1:29:94:e0:57:cb:63:f6: e6:66:69:0b:76:55:cc:03:d3:69:c3:e8:35:81:d5: a2:9b:00:3c:45:d3:e5:2e:05:1a:96:6b:9e:87:fd: 5e:17:60:d6:0f:21:51:c5:a1:13:62:af:fc:94:20: 9a:50:9d:0d:82:54:af:d9:61:25:e2:1d:8c:53:ef: 72:52:be:b8:a5:89:dd:99:6e:b6:d9:04:70:37:80: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:ED:04:42:2E:C4:2B:13:2D:39:34:C9:5A:42:D0:97:8C:26:C4 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:79:78:e4:c1:9c:cf:b2:7e:2e:dc:bc:8f:89:33:a2:f8:1a: 70:0a:57:bf:a3:2e:16:9e:e8:56:a7:97:5a:58:fe:59:b3:11: c8:ca:9c:32:94:b7:03:9b:64:f8:15:96:da:2a:d6:a9:b5:c0: 72:ea:ea:49:33:9e:23:97:0c:46:b3:e2:5d:45:c8:73:7c:29: a6:1f:78:dd:a9:8a:d3:7c:e0:46:ea:54:f6:05:ac:45:f2:1e: c6:f0:2d:47:e9:24:38:75:6d:06:b3:c6:ec:ff:0a:c8:ba:23: 73:92:c7:94:2b:fd:29:63:79:06:e7:fc:22:f8:57:55:a8:ed: 0c:65:2f:15:92:64:a8:a4:01:4c:cd:8f:53:58:f6:42:82:c0: e3:e9:2d:1e:6c:35:ea:16:a2:33:45:0a:af:0e:5d:95:6a:eb: b8:ec:7f:d7:97:4c:b1:b4:bc:ed:eb:70:82:f3:6d:54:14:1c: fe:42:d9:a3:8c:0d:cb:ad:1a:3b:bd:14:f5:c0:44:21:2c:8f: 79:83:f3:16:44:59:20:52:21:a1:6b:a0:4d:ac:42:9c:70:8f: 8a:92:25:33:28:05:8b:3f:5f:f3:9c:57:95:b6:18:4a:4c:3c: 97:c7:b2:1f:de:87:d1:a3:36:dd:d6:1c:71:68:dc:a7:0d:fb: fa:29:68:01 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSBmfNXYfJevovVDzI5do6ZpP/FwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI1MDQyMzE3NDUzM1oX DTI1MDQyNDE4NTUzM1owMzExMC8GA1UEAxMoNDgxRUVEMDQ0MjJFQzQyQjEzMkQz OTM0Qzk1QTQyRDA5NzhDMjZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTxOkFvBzO0s+1/iy0OhBenXKWh/Pmc0mZKKxwo+ccB6jQqOxWdfcAK/JoV lFFybQVjz36a7PVNvsrgZi/CbchN/9D61x6bMSIxyUM3nRj87T6QmhZ7zRlHCkHJ 4y87Gya1UoJr6M0EZYNUV2auRCbB0SizMU+jHUdsxIspecn8/IAY5oJzKuPNf480 8DLA+E97oXTgN6eeZprreG9nxKS6eP8LIivWT4iretEplOBXy2P25mZpC3ZVzAPT acPoNYHVopsAPEXT5S4FGpZrnof9Xhdg1g8hUcWhE2Kv/JQgmlCdDYJUr9lhJeId jFPvclK+uKWJ3ZluttkEcDeAPX8CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRIHu0E Qi7EKxMtOTTJWkLQl4wmxDAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANt5eOTBnM+yfi7cvI+J M6L4GnAKV7+jLhae6Fanl1pY/lmzEcjKnDKUtwObZPgVltoq1qm1wHLq6kkzniOX DEaz4l1FyHN8KaYfeN2pitN84EbqVPYFrEXyHsbwLUfpJDh1bQazxuz/Csi6I3OS x5Qr/SljeQbn/CL4V1Wo7QxlLxWSZKikAUzNj1NY9kKCwOPpLR5sNeoWojNFCq8O XZVq67jsf9eXTLG0vO3rcILzbVQUHP5C2aOMDcutGju9FPXARCEsj3mD8xZEWSBS IaFroE2sQpxwj4qSJTMoBYs/X/OcV5W2GEpMPJfHsh/eh9GjNt3WHHFo3KcN+/op aAE= -----END CERTIFICATE-----Generated at Wed Apr 23 19:53:45 2025 by rpki-client on console.sobornost.net