$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: RUqDLaHqJBrYIw4LjgqYH+YO49aytttF8cT/gLkYPTc= Subject key identifier: 75:79:81:1E:CE:40:CD:13:AB:FC:D6:EF:CE:0D:08:22:AB:70:1D:81 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 5DCA0151BBCBAFBD8D4226280067FFC9215083B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 0333 Signing time: Thu 23 Jul 2026 17:18:12 +0000 Manifest this update: Thu 23 Jul 2026 17:13:12 +0000 Manifest next update: Fri 24 Jul 2026 21:01:12 +0000 Files and hashes: 1: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) 2: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: phuPXXvmMpUzciRV63sD7/l+jFi0V5mD4Lhwrfn5Kqs=) 3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: zyGXScknY8/UsLkdjIoZ38mJ4xlpccwmRkd/DMqJkYc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ca:01:51:bb:cb:af:bd:8d:42:26:28:00:67:ff:c9:21:50:83:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Jul 23 17:13:12 2026 GMT Not After : Jul 24 21:01:12 2026 GMT Subject: CN=7579811ECE40CD13ABFCD6EFCE0D0822AB701D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:fd:fe:96:4a:6d:3b:f0:e9:bd:63:4d:e6: eb:06:fc:f1:b0:ab:cc:47:77:90:09:ba:5d:6e:b2: cc:2e:c3:20:7f:0f:b9:55:0a:15:39:ba:49:6a:16: 29:b6:98:94:73:3c:24:66:4c:f0:f2:2a:fe:b2:33: e6:9f:09:58:fc:d2:7b:a1:72:12:5c:84:a6:34:30: e0:88:ac:f0:3f:18:7a:c3:89:00:ac:a1:2a:5b:7a: e5:ca:68:07:3e:5e:41:7c:bf:29:3d:75:9a:20:0f: 4b:e3:c6:d7:cc:c8:cf:e9:4d:4e:06:38:b1:5e:39: 28:c1:b8:f2:ac:f9:b4:06:87:4d:a7:47:b7:48:67: 04:a1:3b:f3:b5:83:04:41:f0:33:a4:e1:58:55:7c: 2b:fa:65:e1:5b:04:80:11:2a:fe:10:c4:a4:18:4a: 9c:c4:b4:0c:6b:b2:ea:51:50:44:60:7b:2b:2c:c1: 20:e1:d6:14:73:00:c1:91:bf:54:c1:3d:e3:05:56: 35:e5:e7:81:9a:a3:10:4a:3e:99:76:c8:4c:76:c8: 45:41:f9:ab:04:b7:f6:3c:34:f7:31:99:5c:16:0b: 80:8d:d5:6d:a1:2e:41:23:cc:29:bc:21:f3:32:d2: 7a:3e:0d:f3:b7:96:b0:29:8b:2a:79:c1:33:a0:27: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:79:81:1E:CE:40:CD:13:AB:FC:D6:EF:CE:0D:08:22:AB:70:1D:81 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bf:4f:f5:69:dc:69:7c:8c:ba:16:a0:62:df:ac:23:43:7b: 98:11:92:cf:80:6d:2c:7d:fb:5a:df:1d:ec:64:03:e9:9c:52: a2:a2:4f:78:42:7e:71:b4:9e:01:96:0f:25:12:21:f3:cf:de: 27:3e:7a:ad:49:8d:bf:5c:54:62:a9:e4:5d:35:8f:ec:b4:23: 99:c7:55:39:fc:15:e8:06:43:5c:5e:45:d0:fb:9e:94:51:df: ac:45:0e:0d:f7:4a:bf:e2:b2:b1:82:7b:08:b5:af:e8:19:2d: b8:1f:d8:ea:f8:cb:d0:e2:05:6e:4c:67:6d:85:f3:14:67:a3: f8:27:ae:5b:79:4c:fb:cd:55:4b:17:2b:02:ab:ab:5e:c3:75: 4d:f3:24:3d:70:f4:a7:5a:63:7b:68:46:6d:72:73:b0:87:bd: 84:4a:3e:61:53:9c:e2:e5:f3:42:93:e7:9d:ae:31:65:4b:7d: 2c:00:43:b0:ee:5f:e3:1e:c9:40:93:91:4b:e2:72:97:86:6a: 0d:a7:38:3e:6c:20:59:fe:82:b8:9c:7c:78:01:73:90:18:6b: 7c:56:75:f3:b5:39:23:f4:ae:98:6f:87:46:79:dc:b8:3c:c7: 76:99:db:84:fc:5f:71:b8:90:9d:da:4f:8b:5f:ad:d7:b4:df: 86:a9:e4:6e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXcoBUbvLr72NQiYoAGf/ySFQg7QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDcyMzE3MTMxMloX DTI2MDcyNDIxMDExMlowMzExMC8GA1UEAxMoNzU3OTgxMUVDRTQwQ0QxM0FCRkNE NkVGQ0UwRDA4MjJBQjcwMUQ4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJu/f6WSm078Om9Y03m6wb88bCrzEd3kAm6XW6yzC7DIH8PuVUKFTm6SWoW KbaYlHM8JGZM8PIq/rIz5p8JWPzSe6FyElyEpjQw4Iis8D8YesOJAKyhKlt65cpo Bz5eQXy/KT11miAPS+PG18zIz+lNTgY4sV45KMG48qz5tAaHTadHt0hnBKE787WD BEHwM6ThWFV8K/pl4VsEgBEq/hDEpBhKnMS0DGuy6lFQRGB7KyzBIOHWFHMAwZG/ VME94wVWNeXngZqjEEo+mXbITHbIRUH5qwS39jw09zGZXBYLgI3VbaEuQSPMKbwh 8zLSej4N87eWsCmLKnnBM6Ano88CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBR1eYEe zkDNE6v81u/ODQgiq3AdgTAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI+/T/Vp3Gl8jLoWoGLf rCNDe5gRks+AbSx9+1rfHexkA+mcUqKiT3hCfnG0ngGWDyUSIfPP3ic+eq1Jjb9c VGKp5F01j+y0I5nHVTn8FegGQ1xeRdD7npRR36xFDg33Sr/isrGCewi1r+gZLbgf 2Or4y9DiBW5MZ22F8xRno/gnrlt5TPvNVUsXKwKrq17DdU3zJD1w9KdaY3toRm1y c7CHvYRKPmFTnOLl80KT552uMWVLfSwAQ7DuX+MeyUCTkUvicpeGag2nOD5sIFn+ gricfHgBc5AYa3xWdfO1OSP0rphvh0Z53Lg8x3aZ24T8X3G4kJ3aT4tfrde034ap 5G4= -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:57 2026 by rpki-client