$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: N8+8uL0cK+OAIaCmX45ilf06BU7JQ7WikpKw1O4w7os= Subject key identifier: 55:58:9C:F9:7B:9F:8D:A9:7C:1D:72:59:20:71:7D:47:44:E6:FA:7E Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 1859722A6D8558A3E4888FDFA8D319ED0FAA2F81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 02DD Signing time: Thu 21 May 2026 07:03:29 +0000 Manifest this update: Thu 21 May 2026 06:58:29 +0000 Manifest next update: Fri 22 May 2026 09:42:29 +0000 Files and hashes: 1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: esOI5OieRFwis3I1NPL78YOVOUAlSfmgCpnZFl8uYt4=) 2: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=) 3: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 09:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:59:72:2a:6d:85:58:a3:e4:88:8f:df:a8:d3:19:ed:0f:aa:2f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: May 21 06:58:29 2026 GMT Not After : May 22 09:42:29 2026 GMT Subject: CN=55589CF97B9F8DA97C1D725920717D4744E6FA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:9a:78:85:17:61:ea:40:23:aa:39:b3:f6: ef:5c:81:c1:63:f5:14:9a:38:cd:61:4b:0c:85:48: 78:37:03:22:61:75:07:70:b2:78:4f:07:62:75:ee: f1:31:43:a1:27:4a:70:19:eb:e9:6c:8d:31:16:a3: 3b:52:54:6e:67:0d:29:12:23:07:15:c3:1d:91:d2: c9:49:15:e5:99:ee:19:d5:ba:7a:79:e8:c1:3a:c8: f5:e3:ea:eb:21:ef:6e:38:0c:8a:ca:40:26:77:1f: e3:c2:dc:36:25:04:57:5b:15:9e:76:da:96:01:81: 26:3e:87:ee:1f:9d:32:68:22:3d:c4:67:ba:ee:d0: 8d:cf:ae:69:3b:58:e2:58:0d:4d:e2:3b:c1:21:8d: cf:e7:44:95:f5:4d:16:c2:f4:07:36:7a:ab:2f:3f: cb:9d:6f:93:73:ee:3a:4f:65:27:66:2d:0b:47:93: 46:97:bf:d4:98:96:a7:73:fb:8f:88:65:d7:34:2a: 44:32:fe:18:49:c4:a5:99:62:07:e1:c0:49:50:8d: 29:42:77:02:73:23:99:ea:24:93:af:10:9e:75:95: ae:7e:7a:04:7a:13:60:6b:5f:6e:75:59:65:7a:2e: da:e7:e7:fc:a5:1f:55:8d:d0:ba:fd:72:70:a4:82: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:58:9C:F9:7B:9F:8D:A9:7C:1D:72:59:20:71:7D:47:44:E6:FA:7E X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:3f:a5:b6:5f:ae:43:ce:8e:f4:d1:6d:71:e0:e5:2b:10: 48:24:7e:81:51:1d:40:ee:7a:ab:ae:eb:df:56:8d:26:ba:c6: dc:e3:0f:1e:b9:e3:71:3a:ee:fd:6a:45:9f:9d:c3:23:e0:9f: f2:ad:8f:3e:13:55:50:ba:3b:39:db:ed:91:08:ef:4e:b4:2a: c1:e8:13:be:87:cb:ea:2d:d6:eb:36:b1:80:ac:02:e0:31:c5: 09:d5:32:45:d1:08:f2:c5:ff:83:e7:71:d5:41:ce:bc:f4:48: a6:1a:06:bc:16:39:13:bf:62:b1:7d:fa:25:7a:c2:53:cf:4c: a7:c5:f0:6b:ae:41:8a:73:d3:fd:ca:f7:33:1b:71:9a:3d:48: 5e:80:af:ed:83:1b:55:e8:0e:e8:b9:67:ec:a6:37:ba:3c:74: 91:13:6c:25:1f:1f:de:70:67:21:c5:52:ce:13:f0:cd:93:d8: a8:5d:b6:bb:66:24:e7:24:a7:7b:3e:32:47:a7:6c:fd:21:72: 5e:de:c0:b9:d8:00:41:9e:5f:c4:77:be:dc:fb:99:d4:5b:cf: 9b:d3:0e:f3:2f:d8:6a:74:6f:42:81:16:1f:b5:0c:bd:39:da: 62:e9:65:5d:91:93:42:ed:2e:84:35:d4:69:a6:3b:a1:04:f8: 95:d6:21:4e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGFlyKm2FWKPkiI/fqNMZ7Q+qL4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDUyMTA2NTgyOVoX DTI2MDUyMjA5NDIyOVowMzExMC8GA1UEAxMoNTU1ODlDRjk3QjlGOERBOTdDMUQ3 MjU5MjA3MTdENDc0NEU2RkE3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgFmniFF2HqQCOqObP271yBwWP1FJo4zWFLDIVIeDcDImF1B3CyeE8HYnXu 8TFDoSdKcBnr6WyNMRajO1JUbmcNKRIjBxXDHZHSyUkV5ZnuGdW6ennowTrI9ePq 6yHvbjgMispAJncf48LcNiUEV1sVnnbalgGBJj6H7h+dMmgiPcRnuu7Qjc+uaTtY 4lgNTeI7wSGNz+dElfVNFsL0BzZ6qy8/y51vk3PuOk9lJ2YtC0eTRpe/1JiWp3P7 j4hl1zQqRDL+GEnEpZliB+HASVCNKUJ3AnMjmeokk68QnnWVrn56BHoTYGtfbnVZ ZXou2ufn/KUfVY3Quv1ycKSCNQcCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRVWJz5 e5+NqXwdclkgcX1HROb6fjAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADQrP6W2X65Dzo700W1x 4OUrEEgkfoFRHUDuequu699WjSa6xtzjDx6543E67v1qRZ+dwyPgn/Ktjz4TVVC6 Oznb7ZEI7060KsHoE76Hy+ot1us2sYCsAuAxxQnVMkXRCPLF/4PncdVBzrz0SKYa BrwWORO/YrF9+iV6wlPPTKfF8GuuQYpz0/3K9zMbcZo9SF6Ar+2DG1XoDui5Z+ym N7o8dJETbCUfH95wZyHFUs4T8M2T2KhdtrtmJOckp3s+MkenbP0hcl7ewLnYAEGe X8R3vtz7mdRbz5vTDvMv2Gp0b0KBFh+1DL052mLpZV2Rk0LtLoQ11GmmO6EE+JXW IU4= -----END CERTIFICATE-----Generated at Thu May 21 09:37:18 2026 by rpki-client