$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: coyKvD37ucJyKIFryuShlxe0n2hv6RMY51UOU8sF7hA= Subject key identifier: C4:B2:5D:D8:CE:DE:FF:A5:42:42:F4:5F:B3:C8:EF:36:0C:17:A6:47 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 7CFE94E07750631F03B8EA00AE902F2575D86663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 02A0 Signing time: Sun 05 Apr 2026 12:21:43 +0000 Manifest this update: Sun 05 Apr 2026 12:16:43 +0000 Manifest next update: Mon 06 Apr 2026 15:07:43 +0000 Files and hashes: 1: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) 2: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: jv0/ncq9VRzoxqqq77zbpzk2aKNjes/BfA7gc8GehnQ=) 3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 15:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fe:94:e0:77:50:63:1f:03:b8:ea:00:ae:90:2f:25:75:d8:66:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Apr 5 12:16:43 2026 GMT Not After : Apr 6 15:07:43 2026 GMT Subject: CN=C4B25DD8CEDEFFA54242F45FB3C8EF360C17A647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:65:6b:33:d6:71:7c:e7:35:69:83:99:6c: 9f:68:b0:6f:1e:88:39:cb:73:57:ce:a1:76:c9:a4: c2:04:05:25:af:bb:4a:cc:cd:9b:c9:2d:83:83:70: 56:2f:04:cf:e8:72:7f:22:c7:3b:80:64:ed:11:9b: 0e:0a:0a:18:a5:12:22:10:3b:d8:58:4d:e9:93:46: b3:fc:c7:f9:07:d9:8e:25:7a:fc:fb:9e:fa:11:2f: a4:81:4a:71:de:43:55:6d:d6:2f:c7:d4:fa:c4:f9: 7c:69:74:aa:a8:1c:49:11:d4:a2:bc:a6:c9:60:08: 50:8d:c9:55:e4:ff:6d:9a:8b:37:7b:5c:4d:c6:b7: 37:1f:bf:6e:87:2b:2d:4d:5f:31:52:3c:f7:5a:6e: ba:3c:b8:12:52:a1:74:6d:57:61:36:20:33:92:09: 2b:db:bd:40:e8:8e:40:9e:5c:d0:c6:f4:34:7e:18: b1:d8:c3:81:a4:24:97:91:05:37:cd:c8:b7:98:8d: 3c:34:33:d9:1a:b9:d6:16:07:36:7d:20:e7:11:50: 23:9b:1e:40:b4:45:16:9a:51:45:56:a6:a7:e0:a3: ca:73:f0:6a:ed:ba:e1:0b:30:61:fd:33:cb:fc:15: 12:22:0c:0c:c7:1b:89:f3:00:60:77:38:1c:b0:4f: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B2:5D:D8:CE:DE:FF:A5:42:42:F4:5F:B3:C8:EF:36:0C:17:A6:47 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:43:57:3e:52:2c:86:7f:d5:05:09:4e:00:0b:90:7f:a9:80: 79:e0:31:40:69:b2:8a:93:34:6b:36:21:db:69:18:29:35:a5: 02:fb:ff:bd:14:71:32:02:ea:12:e2:14:4d:f0:fa:c0:80:c4: 21:d3:73:3e:a8:84:b0:e2:12:f5:29:ae:65:48:f1:ba:75:b5: b7:6d:1b:b3:67:c2:83:89:f9:24:52:36:ed:4a:27:6b:3d:f3: f6:d2:88:d9:cc:79:a3:f5:7b:d4:9d:16:df:33:61:47:a8:f8: 86:6a:d3:67:13:b2:98:87:1e:3f:51:04:b0:20:9c:e9:f1:5e: 75:aa:06:c0:83:94:59:b4:75:08:52:3a:88:f4:d1:2d:ad:1d: e3:5d:8b:79:94:4a:0c:4c:71:04:2d:76:2c:98:76:4e:a0:7d: 5e:21:0e:5f:dd:2f:a8:3a:92:57:74:1d:c8:dc:4a:a3:c7:05: fb:53:32:47:46:82:6e:13:ef:c1:4e:e2:7a:c0:b4:df:4f:e8: 7c:e3:b0:1a:98:2a:89:54:32:d1:a8:5f:e2:fe:fe:85:8e:a2: 8e:6e:6c:90:2b:5e:b1:39:5d:e9:e7:c8:2e:79:d8:7f:28:9e: 8e:8f:94:c4:c0:71:17:62:0b:3a:93:ad:e6:1b:08:b5:da:28: 74:14:41:f2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfP6U4HdQYx8DuOoArpAvJXXYZmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDQwNTEyMTY0M1oX DTI2MDQwNjE1MDc0M1owMzExMC8GA1UEAxMoQzRCMjVERDhDRURFRkZBNTQyNDJG NDVGQjNDOEVGMzYwQzE3QTY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhlZWsz1nF85zVpg5lsn2iwbx6IOctzV86hdsmkwgQFJa+7SszNm8ktg4Nw Vi8Ez+hyfyLHO4Bk7RGbDgoKGKUSIhA72FhN6ZNGs/zH+QfZjiV6/Pue+hEvpIFK cd5DVW3WL8fU+sT5fGl0qqgcSRHUorymyWAIUI3JVeT/bZqLN3tcTca3Nx+/bocr LU1fMVI891puujy4ElKhdG1XYTYgM5IJK9u9QOiOQJ5c0Mb0NH4YsdjDgaQkl5EF N83It5iNPDQz2Rq51hYHNn0g5xFQI5seQLRFFppRRVamp+CjynPwau264QswYf0z y/wVEiIMDMcbifMAYHc4HLBPBicCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTEsl3Y zt7/pUJC9F+zyO82DBemRzAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANlDVz5SLIZ/1QUJTgAL kH+pgHngMUBpsoqTNGs2IdtpGCk1pQL7/70UcTIC6hLiFE3w+sCAxCHTcz6ohLDi EvUprmVI8bp1tbdtG7NnwoOJ+SRSNu1KJ2s98/bSiNnMeaP1e9SdFt8zYUeo+IZq 02cTspiHHj9RBLAgnOnxXnWqBsCDlFm0dQhSOoj00S2tHeNdi3mUSgxMcQQtdiyY dk6gfV4hDl/dL6g6kld0HcjcSqPHBftTMkdGgm4T78FO4nrAtN9P6HzjsBqYKolU MtGoX+L+/oWOoo5ubJArXrE5XennyC552H8ono6PlMTAcRdiCzqTreYbCLXaKHQU QfI= -----END CERTIFICATE-----Generated at Sun Apr 5 21:07:13 2026 by rpki-client