$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: W4OK/sZCT5IqBMApAZG/3gOP6pG7Wbb8poHhDs7i0Tw= Subject key identifier: 00:F0:85:97:4E:91:88:07:C3:C4:44:0E:04:01:9F:3C:27:A2:E1:87 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 267631A40F843CBD91C8AC93F4AC99AD1829E46C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 038E Signing time: Tue 29 Sep 2026 16:32:50 +0000 Manifest this update: Tue 29 Sep 2026 16:27:50 +0000 Manifest next update: Wed 30 Sep 2026 17:24:50 +0000 Files and hashes: 1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: EZtXBjlaag+ft9sZNxf3Y/4K2qvcJITSLqQW9HA+BYE=) 2: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: zyGXScknY8/UsLkdjIoZ38mJ4xlpccwmRkd/DMqJkYc=) 3: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 17:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:76:31:a4:0f:84:3c:bd:91:c8:ac:93:f4:ac:99:ad:18:29:e4:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Sep 29 16:27:50 2026 GMT Not After : Sep 30 17:24:50 2026 GMT Subject: CN=00F085974E918807C3C4440E04019F3C27A2E187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:3e:f2:4d:57:2d:8d:f2:9b:87:d1:0e:c6: 09:9d:85:1c:f0:73:e0:63:40:37:cd:b3:65:e5:6a: e4:1c:a8:60:1e:b9:10:8e:e2:e8:72:17:64:4a:9e: 73:b1:8f:33:e0:b0:d0:6e:8b:c0:1d:3d:e0:82:7c: 45:2a:82:52:a2:73:06:e4:e2:6c:9d:e0:9f:fb:0c: 57:7a:6a:6f:64:2b:ce:a5:8e:28:c4:7c:8e:09:2a: c4:1e:6a:d5:6f:81:23:5b:95:fe:e1:b6:b0:2e:0b: 87:a5:ac:63:36:78:6a:19:b2:7f:91:b0:c5:32:84: cf:c1:30:7f:45:4a:79:ec:3d:f6:6d:bc:3b:e2:4b: 50:a5:93:06:5a:ad:75:84:7d:e3:24:c1:b2:5e:83: 2b:b4:d6:bc:a3:51:0b:ad:bc:e8:ee:0e:36:2c:c2: 4e:42:c2:e5:1d:12:95:77:81:ed:ac:da:42:85:fe: 9c:20:64:ad:d2:7d:68:2c:49:46:f5:75:6f:4f:05: cb:55:0d:de:44:a2:e5:64:8a:bb:69:4e:1d:89:8f: bb:99:1e:31:c1:9c:83:29:e9:6a:92:bf:99:83:26: 9a:0c:6d:b3:3c:7c:8f:22:eb:fc:d2:e5:0e:8c:d8: cb:cd:ff:d8:e9:c2:1c:8e:94:46:d2:3a:fb:0b:e3: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F0:85:97:4E:91:88:07:C3:C4:44:0E:04:01:9F:3C:27:A2:E1:87 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:23:9c:7b:ea:37:db:07:3a:4d:6f:70:6e:c3:38:f7:d2:93: 2b:03:10:b5:3e:19:b6:5c:fb:3c:e7:e5:05:04:0d:f2:bf:89: 6d:50:ea:8f:60:ec:76:fe:c4:95:6c:ce:a0:c8:4e:08:6a:7d: da:0e:65:e8:b2:dd:0d:10:7f:7f:dd:e2:a0:e6:76:66:a4:4a: 9e:c5:b7:23:6a:f4:54:0b:2c:f1:04:78:0c:34:07:49:09:aa: 8e:e0:79:43:db:63:fc:e7:73:17:e2:d7:26:48:d0:01:8d:49: 4a:d4:ee:71:f6:21:f6:09:77:18:0a:a4:1e:f3:ed:cc:9d:d8: b0:90:a6:06:c5:54:51:07:ed:f6:42:87:49:11:33:ab:bf:70: 32:4c:e0:26:98:ae:68:eb:20:dc:96:8d:49:92:4a:2d:b3:7a: 13:c1:e8:38:da:3a:9a:fc:25:e9:ee:b3:cc:e0:37:0c:67:2f: b6:c8:0f:b6:be:2d:7d:ed:b3:74:bc:bc:f9:5d:f8:7d:eb:34: b9:84:4e:bb:80:48:d5:77:da:5c:1d:96:bc:79:c7:ab:33:b0: 0b:d8:a1:bb:82:54:ac:a8:62:7e:b7:20:30:12:0a:95:ff:3f: 0a:58:60:63:8a:c4:d9:7a:a5:28:19:86:e9:49:6b:65:c6:b3: cd:01:6e:97 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJnYxpA+EPL2RyKyT9KyZrRgp5GwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDkyOTE2Mjc1MFoX DTI2MDkzMDE3MjQ1MFowMzExMC8GA1UEAxMoMDBGMDg1OTc0RTkxODgwN0MzQzQ0 NDBFMDQwMTlGM0MyN0EyRTE4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIxDPvJNVy2N8puH0Q7GCZ2FHPBz4GNAN82zZeVq5ByoYB65EI7i6HIXZEqe c7GPM+Cw0G6LwB094IJ8RSqCUqJzBuTibJ3gn/sMV3pqb2QrzqWOKMR8jgkqxB5q 1W+BI1uV/uG2sC4Lh6WsYzZ4ahmyf5GwxTKEz8Ewf0VKeew99m28O+JLUKWTBlqt dYR94yTBsl6DK7TWvKNRC6286O4ONizCTkLC5R0SlXeB7azaQoX+nCBkrdJ9aCxJ RvV1b08Fy1UN3kSi5WSKu2lOHYmPu5keMcGcgynpapK/mYMmmgxtszx8jyLr/NLl DozYy83/2OnCHI6URtI6+wvj4MECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQA8IWX TpGIB8PERA4EAZ88J6LhhzAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIUjnHvqN9sHOk1vcG7D OPfSkysDELU+GbZc+zzn5QUEDfK/iW1Q6o9g7Hb+xJVszqDITghqfdoOZeiy3Q0Q f3/d4qDmdmakSp7FtyNq9FQLLPEEeAw0B0kJqo7geUPbY/zncxfi1yZI0AGNSUrU 7nH2IfYJdxgKpB7z7cyd2LCQpgbFVFEH7fZCh0kRM6u/cDJM4CaYrmjrINyWjUmS Si2zehPB6DjaOpr8Jenus8zgNwxnL7bID7a+LX3ts3S8vPld+H3rNLmETruASNV3 2lwdlrx5x6szsAvYobuCVKyoYn63IDASCpX/PwpYYGOKxNl6pSgZhulJa2XGs80B bpc= -----END CERTIFICATE-----Generated at Wed Sep 30 00:58:57 2026 by rpki-client