$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: nyFkGZKzcub2C93mvQ417w+KeemjB7Kqe/W+xD3a/YA= Subject key identifier: F0:5B:57:0D:47:2C:3C:37:F2:7C:0B:CD:07:03:55:EE:25:FC:89:0B Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 3E0D3FAB24AA0A4F7A14EFB1B8C50A0CEC340F40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 01C9 Signing time: Thu 18 Sep 2025 15:43:03 +0000 Manifest this update: Thu 18 Sep 2025 15:38:03 +0000 Manifest next update: Fri 19 Sep 2025 17:29:03 +0000 Files and hashes: 1: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=) 2: AS153176.asa (hash: nTAPGafaR0TwBdv5jCAijmg7tuOn6F8lJBqMjy7Nxfk=) 3: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: UYcYpZsmE01zn/6UJU38WkkGYAn5DI3Ux9rQV/vzmfs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 17:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0d:3f:ab:24:aa:0a:4f:7a:14:ef:b1:b8:c5:0a:0c:ec:34:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Sep 18 15:38:03 2025 GMT Not After : Sep 19 17:29:03 2025 GMT Subject: CN=F05B570D472C3C37F27C0BCD070355EE25FC890B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:6c:23:7d:69:e3:0e:42:4b:b6:dc:2f:48: f3:25:7f:6d:1f:ae:56:9a:61:63:97:8e:97:1c:cf: 7a:17:a6:44:cc:25:82:f9:67:35:44:ac:ff:31:8a: 7e:01:bc:65:1b:63:d1:67:d7:51:4f:74:eb:9e:6b: 01:6a:a2:e2:6b:92:67:83:69:71:af:20:0e:29:9d: 86:ad:12:65:cc:66:1b:d4:ac:d0:bf:da:27:5c:d0: 2e:ed:3b:fb:75:42:1d:94:52:f3:b9:23:47:b4:ab: b1:74:4a:5a:97:78:d2:d2:0c:8e:4f:a8:3d:bd:22: c7:e5:4c:21:92:8f:b7:e9:3f:0c:1d:d3:ce:98:60: 02:35:f0:61:db:af:f3:17:6a:c9:cb:80:74:c4:54: fa:35:72:96:51:28:82:6c:52:20:0c:4d:6f:20:c9: 8b:56:97:49:30:8e:f7:6d:d3:8b:37:b5:57:37:7e: ce:67:6d:e1:e6:1d:19:4b:30:db:cc:95:33:c8:f3: 12:fe:94:40:91:3e:47:92:3d:76:6c:c6:43:75:e0: a7:6e:8d:cc:2c:ec:21:26:4e:3b:ed:20:d9:f4:9a: 80:3f:b2:fc:60:9c:b7:92:78:6c:be:7b:54:3e:75: d2:c0:de:2b:b1:26:c2:e6:77:ff:fc:f1:8c:8c:e5: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:57:0D:47:2C:3C:37:F2:7C:0B:CD:07:03:55:EE:25:FC:89:0B X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:84:a3:db:72:13:02:c1:0c:47:9b:92:f6:16:b4:b6:07: bc:e0:20:06:3a:79:e7:37:e5:8d:4c:cc:e7:de:1a:2d:b1:63: 91:1b:18:a1:3b:1d:2e:8b:2a:1d:74:37:a6:c4:36:92:4c:ea: 9c:09:be:82:b9:c8:26:cf:3c:f3:48:ee:9c:da:f4:be:67:da: 1c:63:0c:7e:bd:44:8d:77:b9:d0:f8:a4:e9:72:a2:84:16:f9: c7:ac:8d:8e:da:d0:24:95:be:b3:c2:d3:77:84:5f:d3:a7:bd: 74:57:2f:ca:e2:78:6e:e8:95:3f:b0:27:1e:16:fa:50:b0:04: 7c:ec:77:b6:60:19:e9:53:cb:27:c6:f7:b0:10:89:5f:52:21: 8e:6c:03:40:df:ec:7e:2f:b0:18:7b:27:5e:30:1f:54:11:dc: 02:a0:68:0f:5c:13:8b:24:8b:48:96:a3:15:a6:ce:75:f9:f6: 81:10:73:19:e3:3c:6d:0e:4c:3d:bf:94:60:fd:f9:8d:36:ce: a1:cc:d2:b7:2f:eb:7c:e6:d8:08:bc:c8:1d:d1:86:5c:c9:e8: 4c:62:cf:a7:5e:2a:a5:9d:da:d3:84:68:21:bd:0f:54:73:c9: fd:48:ff:53:77:f0:e2:8f:73:17:03:1e:4d:26:58:45:9e:c5: e6:80:c1:d9 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPg0/qySqCk96FO+xuMUKDOw0D0AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI1MDkxODE1MzgwM1oX DTI1MDkxOTE3MjkwM1owMzExMC8GA1UEAxMoRjA1QjU3MEQ0NzJDM0MzN0YyN0Mw QkNEMDcwMzU1RUUyNUZDODkwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdKbCN9aeMOQku23C9I8yV/bR+uVpphY5eOlxzPehemRMwlgvlnNUSs/zGK fgG8ZRtj0WfXUU90655rAWqi4muSZ4Npca8gDimdhq0SZcxmG9Ss0L/aJ1zQLu07 +3VCHZRS87kjR7SrsXRKWpd40tIMjk+oPb0ix+VMIZKPt+k/DB3TzphgAjXwYduv 8xdqycuAdMRU+jVyllEogmxSIAxNbyDJi1aXSTCO923Tize1Vzd+zmdt4eYdGUsw 28yVM8jzEv6UQJE+R5I9dmzGQ3Xgp26NzCzsISZOO+0g2fSagD+y/GCct5J4bL57 VD510sDeK7EmwuZ3//zxjIzlHscCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTwW1cN Ryw8N/J8C80HA1XuJfyJCzAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFwZhKPbchMCwQxHm5L2 FrS2B7zgIAY6eec35Y1MzOfeGi2xY5EbGKE7HS6LKh10N6bENpJM6pwJvoK5yCbP PPNI7pza9L5n2hxjDH69RI13udD4pOlyooQW+cesjY7a0CSVvrPC03eEX9OnvXRX L8rieG7olT+wJx4W+lCwBHzsd7ZgGelTyyfG97AQiV9SIY5sA0Df7H4vsBh7J14w H1QR3AKgaA9cE4ski0iWoxWmznX59oEQcxnjPG0OTD2/lGD9+Y02zqHM0rcv63zm 2Ai8yB3RhlzJ6Exiz6deKqWd2tOEaCG9D1Rzyf1I/1N38OKPcxcDHk0mWEWexeaA wdk= -----END CERTIFICATE-----Generated at Fri Sep 19 10:28:38 2025 by rpki-client