
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
File: A609E97AC39E3F53678C0C9422F89947B6146002.mft (raw, json)
Hash identifier: 0HCxRlyc4a9brI2Rmsr2+PGnFD9fanLIi1YdaeLYWNg=
Subject key identifier: 8F:E9:8B:2D:57:D6:BB:3B:FB:99:9F:33:67:87:25:BC:38:70:03:4D
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Certificate issuer: /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial: 2E2679B1F3FC63AA78FDC856D114B40AA1CF3950
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
Manifest number: 71
Signing time: Thu 06 Nov 2025 16:16:53 +0000
Manifest this update: Thu 06 Nov 2025 16:11:53 +0000
Manifest next update: Fri 07 Nov 2025 18:38:53 +0000
Files and hashes: 1: 326131343a373538333a3a2f34302d3430203d3e20323134373537.roa (hash: hcCpHwIQLDuq622pIwKuAMoJYid6gLvp4xFqggJmodo=)
2: 326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa (hash: qQlstETzls89/hXo5myM2bkOC7VSlCrPNYMmfyxC3IU=)
3: 326131343a373538333a6630303a3a2f34302d3430203d3e20323134393736.roa (hash: Rl24KpeRszfXP63EEYdjHphgvip3cAS9ZcbTz0D4RVw=)
4: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: K0Co1onM5BbkXQH/tFwckZOljCdXDgCDtKHluZWcCxU=)
5: 326131343a373538333a3a2f33362d3336203d3e203233353037.roa (hash: glgfdV+PhGCRRHNDDvcfZnj+YSVY9ZJ2VPzzf2KV134=)
6: 326131343a373538333a3930303a3a2f34302d3430203d3e20323134393736.roa (hash: 0qT1c1K69lqN9nUqtSWlpWhbn6N1fTr4T30eQdNLLRw=)
7: 326131343a373538333a3a2f33392d3339203d3e20323130343634.roa (hash: MjDlqyLqXAPlx4G6jj/eAEcU/aLYqdD8Oi3UpDW5w0M=)
8: A609E97AC39E3F53678C0C9422F89947B6146002.crl (hash: VmQJy8XecSHySUwE63TWP1vWdwkvHP8DyNxESJat/jo=)
9: 326131343a373538333a3730303a3a2f34302d3430203d3e20323134393736.roa (hash: mdPIsjImm3Eov7vPFeQtRSCN6wSJCAI1UyJtxVzVYR4=)
10: 326131343a373538333a6230303a3a2f34302d3430203d3e20323134393736.roa (hash: hNUMEEnDrH2gkkUUmyGjFLZFZ1Ez86CcMERf0SfeX4o=)
11: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: ghgUC1FkuuCEpl7atds36b5VAhGeigyHvpmuAij4NF8=)
12: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: h/faRutmshXccwksfhnp0IW/q8FgXwcvdBIuyRruBio=)
13: 326131343a373538333a6430303a3a2f34302d3430203d3e20323134393736.roa (hash: Q1Yc9aGEws5YYwK+QCg05EsB0jEAev+H6mymjWBSJyk=)
14: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: +wJjjEed1Hiq+IO3zR9/ZUn4Yc6NLql02f1VUhQS1AI=)
Validation: OK
Signature path: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:26:79:b1:f3:fc:63:aa:78:fd:c8:56:d1:14:b4:0a:a1:cf:39:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
Validity
Not Before: Nov 6 16:11:53 2025 GMT
Not After : Nov 7 18:38:53 2025 GMT
Subject: CN=8FE98B2D57D6BB3BFB999F33678725BC3870034D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:15:32:d7:b3:93:e2:9a:8e:e6:05:0b:fe:
a8:f1:54:31:2c:0e:9d:7d:67:e9:b1:0a:6a:a6:52:
fc:b0:14:00:55:14:2b:7d:f9:f2:a8:82:64:67:55:
d2:cd:5b:f6:f9:ea:06:64:6e:20:ac:78:51:54:67:
14:0d:f4:12:e7:0b:00:bb:da:08:a6:8b:ed:ff:8c:
9f:49:bb:12:70:b9:6d:c9:8b:fe:0b:e8:7f:06:21:
c6:b7:0e:62:23:6f:f7:50:65:df:b2:52:b6:7d:27:
54:2e:6b:fa:41:00:79:65:00:cb:0c:e2:88:96:00:
20:78:cc:88:82:23:80:ff:b5:90:82:09:4e:0e:7c:
b7:4d:54:ae:14:4d:16:69:d9:ee:97:e4:46:a8:f7:
50:3c:fc:98:2d:4e:07:ec:27:d2:75:de:71:e4:67:
84:99:46:c5:5e:9b:d3:8a:ac:bf:f4:fd:f1:7f:fa:
90:66:83:5e:2a:d6:bf:c7:f3:d0:a3:8a:fb:1e:3f:
bd:82:02:a2:1d:e6:47:38:9d:27:0f:3e:bc:28:b0:
0c:b6:75:f6:6e:27:fc:e5:11:db:b7:c4:42:5d:56:
f2:e2:7d:d7:95:c8:29:83:4b:75:10:0b:fe:46:5f:
2f:db:17:46:a0:0e:25:22:56:17:e9:e7:73:7a:16:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:8B:2D:57:D6:BB:3B:FB:99:9F:33:67:87:25:BC:38:70:03:4D
X509v3 Authority Key Identifier:
keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:43:88:f0:04:9d:85:e3:84:73:54:88:99:34:31:4f:fe:
25:29:52:e3:10:18:f4:7b:f7:43:85:2d:7f:d7:e9:6e:00:9c:
95:e0:51:b3:5d:4b:36:cd:ff:4b:9b:9e:3e:cb:7d:71:33:bd:
d6:97:11:85:93:95:37:e5:7e:67:b2:22:fc:3f:e1:fa:83:92:
d4:f5:26:b9:b7:64:b4:24:39:b1:49:67:a1:92:33:d5:b7:2f:
10:2a:12:1f:ff:74:2f:fb:80:ff:bd:f1:d1:20:1e:3d:6a:89:
c2:8d:84:de:87:b1:30:51:4a:0b:cc:d4:02:f5:db:e8:ef:6c:
24:c7:32:04:0d:e5:1b:ce:52:75:b0:6a:d8:c8:25:4b:35:62:
cc:54:57:c6:74:dd:4f:73:a7:ac:1b:c7:be:d7:4e:ff:51:23:
3c:7e:1a:45:85:6f:cc:43:b4:f9:3c:9f:93:95:29:12:f2:f2:
24:78:e1:b6:21:0a:52:27:66:70:7c:2f:ac:db:19:ce:48:c9:
50:86:7f:4c:86:0a:3c:23:7a:37:a2:96:af:1c:60:30:79:5d:
a0:ab:ec:67:8a:17:d1:c2:89:2b:9c:30:88:8e:2f:cf:e3:14:
3f:20:c3:d3:a7:a9:ea:e7:b1:5f:aa:25:27:ae:36:3f:d4:31:
ab:21:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 00:39:07 2025 by rpki-client