$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: l2/kJJjA3fSiCxza720Ujs2jgKcyOny4ojqnMIeNxd0= Subject key identifier: 4C:E9:6E:1F:68:B8:DB:75:93:EA:25:63:7C:88:99:76:9B:36:F7:61 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 65176B48F3F8AFE41D7F71C3359AA94611A89D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 0384 Signing time: Tue 22 Sep 2026 03:17:34 +0000 Manifest this update: Tue 22 Sep 2026 03:12:34 +0000 Manifest next update: Wed 23 Sep 2026 06:53:34 +0000 Files and hashes: 1: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) 2: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: l3K+pa85fh9ENx6Hynu1866zSR8fzKesYGoXXeihM7w=) 3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: zyGXScknY8/UsLkdjIoZ38mJ4xlpccwmRkd/DMqJkYc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:17:6b:48:f3:f8:af:e4:1d:7f:71:c3:35:9a:a9:46:11:a8:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Sep 22 03:12:34 2026 GMT Not After : Sep 23 06:53:34 2026 GMT Subject: CN=4CE96E1F68B8DB7593EA25637C8899769B36F761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:92:fb:89:e9:b6:7f:93:94:cf:13:15:fe:f3: 26:30:29:85:32:6a:8c:f8:16:f4:c1:29:65:f5:e5: 87:da:c7:c6:03:1f:cf:a9:ac:aa:02:90:3b:6a:06: f3:46:ac:3e:1f:3c:17:0f:19:00:23:65:97:69:e8: e5:d2:99:dc:4a:09:6e:29:33:43:a9:b0:cc:60:52: f7:91:92:ab:e9:fb:17:39:d6:51:bf:0c:5e:3a:ca: e9:6c:e4:6f:51:2c:18:af:a7:89:7b:43:c1:63:3f: 8b:88:51:5d:ff:d0:49:7d:70:59:a2:76:e1:75:bd: d0:58:e0:74:2e:0c:f8:95:3e:ea:8e:52:2b:a4:c8: e4:7b:45:03:2e:04:36:b5:2f:2f:8a:8b:e2:c5:ce: e0:ef:76:1a:ed:7b:34:2f:4e:86:58:4c:cc:6c:4b: b1:0a:a8:c3:cb:3f:68:9e:ee:e8:ff:36:9e:2b:e0: 40:cf:69:23:01:05:7c:df:21:5f:d2:a2:c8:4b:48: 26:5c:a7:1b:64:d2:4b:2f:38:fe:39:17:02:d8:32: 16:ad:0c:15:70:d1:c0:ac:94:a4:e0:6e:c2:3e:f3: 31:b9:10:b4:34:02:8a:f3:eb:c3:af:80:19:8d:14: 1b:df:24:3e:5a:6c:96:d0:52:cd:f5:cc:9c:34:a9: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E9:6E:1F:68:B8:DB:75:93:EA:25:63:7C:88:99:76:9B:36:F7:61 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:62:12:d4:7a:78:b6:ae:13:68:60:f6:73:4d:64:50:d6:2e: d6:61:0f:84:e0:5d:0e:ef:83:2c:73:da:74:73:ee:59:00:1a: 3c:62:39:61:b7:ea:7b:e8:84:a1:83:ae:7b:cd:6f:65:07:86: 7d:74:53:a0:76:ee:9d:83:d4:13:a3:e5:09:32:39:24:6b:e4: 8f:16:4a:37:e2:4b:58:20:d2:98:98:b6:2b:5b:dc:a7:db:44: f8:07:24:1d:b8:75:82:12:d9:c0:da:7f:7a:86:68:10:bb:70: 31:df:44:dc:e5:ba:4e:0c:a8:b8:51:9c:3d:ac:29:dd:f2:f5: 65:d4:17:32:45:3f:c5:2f:50:56:3e:8b:bd:31:18:fb:fc:3f: 17:36:cb:87:30:44:63:09:5d:43:17:59:39:78:a4:76:54:e7: dd:dc:b0:84:51:00:c2:76:07:63:7e:70:77:71:71:e5:ff:0f: bb:12:e2:2e:9f:b8:37:9a:33:dc:a4:27:2a:45:2e:db:91:81: a9:3c:f2:9c:c6:43:11:ab:39:a5:a8:8f:16:d0:7c:3f:23:a0: ba:a6:57:41:f0:8b:d9:de:99:84:d0:95:eb:61:54:4d:fd:84: 2b:9a:bb:81:96:9e:7b:e0:72:b6:e4:39:f1:25:b5:f5:41:de: 51:1d:ee:bf -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZRdrSPP4r+Qdf3HDNZqpRhGonXAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDkyMjAzMTIzNFoX DTI2MDkyMzA2NTMzNFowMzExMC8GA1UEAxMoNENFOTZFMUY2OEI4REI3NTkzRUEy NTYzN0M4ODk5NzY5QjM2Rjc2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWS+4nptn+TlM8TFf7zJjAphTJqjPgW9MEpZfXlh9rHxgMfz6msqgKQO2oG 80asPh88Fw8ZACNll2no5dKZ3EoJbikzQ6mwzGBS95GSq+n7FznWUb8MXjrK6Wzk b1EsGK+niXtDwWM/i4hRXf/QSX1wWaJ24XW90FjgdC4M+JU+6o5SK6TI5HtFAy4E NrUvL4qL4sXO4O92Gu17NC9OhlhMzGxLsQqow8s/aJ7u6P82nivgQM9pIwEFfN8h X9KiyEtIJlynG2TSSy84/jkXAtgyFq0MFXDRwKyUpOBuwj7zMbkQtDQCivPrw6+A GY0UG98kPlpsltBSzfXMnDSp9Q8CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRM6W4f aLjbdZPqJWN8iJl2mzb3YTAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALZiEtR6eLauE2hg9nNN ZFDWLtZhD4TgXQ7vgyxz2nRz7lkAGjxiOWG36nvohKGDrnvNb2UHhn10U6B27p2D 1BOj5QkyOSRr5I8WSjfiS1gg0piYtitb3KfbRPgHJB24dYIS2cDaf3qGaBC7cDHf RNzluk4MqLhRnD2sKd3y9WXUFzJFP8UvUFY+i70xGPv8Pxc2y4cwRGMJXUMXWTl4 pHZU593csIRRAMJ2B2N+cHdxceX/D7sS4i6fuDeaM9ykJypFLtuRgak88pzGQxGr OaWojxbQfD8joLqmV0Hwi9nemYTQlethVE39hCuau4GWnnvgcrbkOfEltfVB3lEd 7r8= -----END CERTIFICATE-----Generated at Tue Sep 22 22:05:22 2026 by rpki-client