
$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
File: 3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft (raw, json)
Hash identifier: mQAtNQHRUiEoHDxALMwLbt8hxWbmqvEWqMwHw6uEO4w=
Subject key identifier: DB:58:E9:69:36:29:BC:B1:DA:47:ED:08:E3:5D:90:A9:B2:45:0B:8B
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Certificate issuer: /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial: 236378142891D18D6688E7F60A3E2B14272220B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
Manifest number: 20
Signing time: Thu 06 Nov 2025 15:16:53 +0000
Manifest this update: Thu 06 Nov 2025 15:11:53 +0000
Manifest next update: Fri 07 Nov 2025 17:34:53 +0000
Files and hashes: 1: AS23507.asa (hash: UJoUZWgoMk0mTf1N/qHLyD90KlP7IJ9Hm6ML2Ckd43g=)
2: 3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl (hash: 0Z13WR+2w9plti2MmnlOesKQ+/MBebF0IDW26QA+jyM=)
3: 323630323a663730343a3430303a3a2f33382d3338203d3e203233353036.roa (hash: 3Tu8wQ2lOhQnjafjHxIZ0ccrYjCM5Np2TuD9fbezSbg=)
4: 32332e3133332e3230342e302f32342d3234203d3e203233353037.roa (hash: 4933FERy7NCKyq2XwCuqswS/EqUs8cwblED9KpKgi/4=)
5: 323630323a663730343a3a2f33382d3338203d3e203233353037.roa (hash: VbLDhXKkyGkfdIT6CP2Hi7/NLa3x7wOKKIiU/WhWxpY=)
6: AS23506.asa (hash: c2J6lDD28prox1ZV3PNjpOkZBzyruHrx9f5+1XmYZU8=)
7: 323630323a663730343a6330303a3a2f33382d3338203d3e203233353037.roa (hash: JbwWeYlsyR8enhLT3XJRO2BdlIw+pGLE5a/Z4cqVkIg=)
8: 323630323a663730343a3830303a3a2f34342d3434203d3e203233353037.roa (hash: hW7Cibb4DB3aJTXMRFNZD+ujtyTy/4U1CRojyyuS1pk=)
9: 32332e3133332e3230352e302f32342d3234203d3e203233353036.roa (hash: AZbofACv2oLRVPtKJW+Ut0kUiIV6QY+Wa5v5BBJnN/k=)
Validation: OK
Signature path: rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl
rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 17:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:63:78:14:28:91:d1:8d:66:88:e7:f6:0a:3e:2b:14:27:22:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Validity
Not Before: Nov 6 15:11:53 2025 GMT
Not After : Nov 7 17:34:53 2025 GMT
Subject: CN=DB58E9693629BCB1DA47ED08E35D90A9B2450B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:9a:8d:8a:bf:04:5d:4b:fc:2b:a0:4f:77:
49:6f:24:28:4a:ae:0b:e5:36:98:75:b2:00:95:26:
b4:0b:69:aa:40:ae:fc:47:75:be:62:08:d1:c4:98:
09:c1:a9:74:c3:d3:82:74:b0:61:8e:d2:f5:f3:04:
cb:1e:5c:5e:ef:3b:55:5f:ec:e1:51:39:ad:91:14:
bb:b0:1b:9f:c6:3b:98:53:b5:31:a6:41:1d:e0:d1:
ba:f9:21:fd:4d:d8:0e:fb:0b:89:da:00:ad:6f:60:
82:60:c8:b1:c9:ac:2e:b4:56:67:13:e5:96:e1:41:
62:92:5c:e5:c3:a3:1a:2b:26:38:5b:9b:a6:5d:5d:
36:08:96:19:54:10:9a:8b:c4:df:43:c0:ed:df:f1:
98:5f:1e:04:ae:7b:6f:7b:c1:c6:fd:47:3d:c4:82:
10:4c:d7:ca:b5:f2:54:68:8b:81:59:f2:23:b1:1d:
f8:6c:a3:f9:d1:5c:f4:d1:d4:60:11:14:88:f1:eb:
5b:00:08:c1:e6:e6:6c:05:6c:f0:81:10:84:51:cf:
c9:11:f6:2c:61:33:b6:a1:10:2c:1e:9e:3c:e9:2a:
91:3c:6c:74:fd:56:59:7a:3a:9e:d7:08:89:e3:b6:
03:25:6d:e3:7d:8c:52:df:88:ad:61:b9:fd:f3:5a:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:58:E9:69:36:29:BC:B1:DA:47:ED:08:E3:5D:90:A9:B2:45:0B:8B
X509v3 Authority Key Identifier:
keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5f:58:94:7f:44:5c:ea:a5:88:8a:b9:9c:3a:05:55:b2:94:
df:bf:07:8f:5b:af:78:17:d4:b2:10:a6:a7:60:34:8d:be:78:
9e:56:04:57:37:fa:7e:b6:72:e7:e1:b6:44:11:ba:59:77:1e:
ab:cd:fc:d2:0d:7a:46:c6:71:7b:46:9f:d5:d5:24:47:bd:cd:
0f:82:a4:d2:3c:e3:0b:4c:6c:77:09:90:83:bd:63:15:6e:19:
6c:39:ab:02:b0:0f:6e:77:1b:fb:c8:2d:cc:56:56:dc:b3:24:
ca:72:ad:e6:55:50:c3:d0:66:c6:1b:10:69:68:24:67:76:b7:
25:5c:d0:1d:1b:96:20:24:fa:0d:27:2c:4b:af:66:4e:ee:35:
4e:16:57:c1:09:5d:9e:ac:05:e5:d9:17:08:54:56:4b:4c:6b:
d3:99:14:a0:e9:08:e2:21:89:5b:48:6b:4e:0f:ef:c7:d5:5e:
e9:bf:f0:ce:a7:63:eb:1a:d6:09:b9:2c:c5:5b:40:c3:8b:c1:
74:58:9c:3e:a6:5e:a6:8b:33:82:9d:f4:a4:dd:76:6f:95:31:
47:85:89:79:bc:34:8f:34:17:85:82:ff:57:a2:9b:2e:78:2f:
b4:c0:c9:6b:f1:22:af:2a:0e:ff:29:28:b2:0e:60:9f:65:c5:
9f:e1:f9:f0
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIUI2N4FCiR0Y1miOf2Cj4rFCciILcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjJiMTM5MWEwMGE3YjJmMDdkNzM1MjBhZmY2YTEzNjAy
NTU0YzQ3MjFhZmM0NDc3NzAwHhcNMjUxMTA2MTUxMTUzWhcNMjUxMTA3MTczNDUz
WjAzMTEwLwYDVQQDEyhEQjU4RTk2OTM2MjlCQ0IxREE0N0VEMDhFMzVEOTBBOUIy
NDUwQjhCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmECajYq/BF1L
/CugT3dJbyQoSq4L5TaYdbIAlSa0C2mqQK78R3W+YgjRxJgJwal0w9OCdLBhjtL1
8wTLHlxe7ztVX+zhUTmtkRS7sBufxjuYU7UxpkEd4NG6+SH9TdgO+wuJ2gCtb2CC
YMixyawutFZnE+WW4UFiklzlw6MaKyY4W5umXV02CJYZVBCai8TfQ8Dt3/GYXx4E
rntve8HG/Uc9xIIQTNfKtfJUaIuBWfIjsR34bKP50Vz00dRgERSI8etbAAjB5uZs
BWzwgRCEUc/JEfYsYTO2oRAsHp486SqRPGx0/VZZejqe1wiJ47YDJW3jfYxS34it
Ybn981oh2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtY6Wk2Kbyx2kftCONdkKmy
RQuLMB8GA1UdIwQYMBaAFDu2RoZHPtN0xh//xo6Kzah0GrvLMA4GA1UdDwEB/wQE
AwIHgDBjBgNVHR8EXDBaMFigVqBUhlJyc3luYzovL3Jwa2kuYXZzaXNwLmNvbS9y
ZXBvL0FWU0lTUC8yLzNCQjY0Njg2NDczRUQzNzRDNjFGRkZDNjhFOEFDREE4NzQx
QUJCQ0IuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4
MTJmZjdkODcvMjJiMTM5MWEwMGE3YjJmMDdkNzM1MjBhZmY2YTEzNjAyNTU0YzQ3
MjFhZmM0NDc3NzAuY2VyMG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5
bmM6Ly9ycGtpLmF2c2lzcC5jb20vcmVwby9BVlNJU1AvMi8zQkI2NDY4NjQ3M0VE
Mzc0QzYxRkZGQzY4RThBQ0RBODc0MUFCQkNCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl9YlH9EXOql
iIq5nDoFVbKU378Hj1uveBfUshCmp2A0jb54nlYEVzf6frZy5+G2RBG6WXceq838
0g16RsZxe0af1dUkR73ND4Kk0jzjC0xsdwmQg71jFW4ZbDmrArAPbncb+8gtzFZW
3LMkynKt5lVQw9BmxhsQaWgkZ3a3JVzQHRuWICT6DScsS69mTu41ThZXwQldnqwF
5dkXCFRWS0xr05kUoOkI4iGJW0hrTg/vx9Ve6b/wzqdj6xrWCbksxVtAw4vBdFic
PqZeposzgp30pN12b5UxR4WJebw0jzQXhYL/V6KbLngvtMDJa/EiryoO/ykosg5g
n2XFn+H58A==
-----END CERTIFICATE-----
Generated at Fri Nov 7 00:21:57 2025 by rpki-client