
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json)
Hash identifier: 4v4Crtb7HD0/gYElFFxmwG3kfKdMQmrv57uO7DFeuJY=
Subject key identifier: D5:E6:35:0A:5F:FD:8A:12:2B:61:9E:DB:10:30:E5:2A:78:D3:B8:B4
Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Certificate serial: 619B803A8FB5204DBAA8C6179D0D5FE4D6EFE6E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
Manifest number: 0346
Signing time: Thu 06 Aug 2026 22:19:02 +0000
Manifest this update: Thu 06 Aug 2026 22:14:02 +0000
Manifest next update: Sat 08 Aug 2026 01:59:02 +0000
Files and hashes: 1: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: zyGXScknY8/UsLkdjIoZ38mJ4xlpccwmRkd/DMqJkYc=)
2: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: lv0Jhk3ggs+XmiJjy1RYn862zVaNuEhLDxliw+ldzN4=)
3: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Aug 2026 01:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:9b:80:3a:8f:b5:20:4d:ba:a8:c6:17:9d:0d:5f:e4:d6:ef:e6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Validity
Not Before: Aug 6 22:14:02 2026 GMT
Not After : Aug 8 01:59:02 2026 GMT
Subject: CN=D5E6350A5FFD8A122B619EDB1030E52A78D3B8B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:81:d0:f9:88:a5:76:46:32:23:82:dd:86:
c6:be:06:99:69:24:6a:df:22:b4:2e:b8:64:e6:be:
1a:ce:57:a8:e5:ea:ef:54:8b:5e:bf:3f:f3:e4:c9:
66:74:54:d2:26:ff:4c:8b:35:fc:4b:e4:15:0f:a6:
71:af:1e:e0:92:0f:e9:e6:df:bf:b7:41:e0:4a:de:
97:20:9b:31:85:72:a7:bd:02:09:97:1b:70:3e:45:
fe:94:d5:68:f4:ff:70:17:10:18:62:25:4d:43:29:
8f:a9:95:ac:b1:c8:02:5d:1a:d5:f6:4a:66:ca:43:
ff:54:08:de:f8:cd:f1:7e:7d:67:bf:1f:e2:d9:5a:
83:c5:ad:d8:10:4b:98:16:bd:89:74:2c:ef:f5:9d:
8f:10:61:2c:db:83:90:29:e7:e0:9e:d6:86:1f:5a:
18:34:b1:4b:2d:8c:51:1c:07:88:55:93:59:4e:38:
8a:00:b9:3b:ba:fe:2c:12:a6:2e:7e:a3:f8:07:42:
07:35:ba:88:76:be:0e:94:62:92:09:f0:13:3c:4d:
73:c1:c5:65:d8:25:28:63:72:20:87:73:c0:7d:91:
9d:b6:24:96:a0:a1:1a:62:23:4c:94:d6:e5:e1:c3:
d9:0e:76:7b:de:a1:2b:1f:3a:ac:2f:d3:94:ca:e7:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:35:0A:5F:FD:8A:12:2B:61:9E:DB:10:30:E5:2A:78:D3:B8:B4
X509v3 Authority Key Identifier:
keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:2b:a9:7d:aa:a4:ea:05:36:4a:0c:04:3a:15:c5:fa:2b:
26:f6:04:d0:e1:26:93:7e:d2:01:d0:76:56:5b:68:f4:fe:a3:
82:e7:84:52:57:fb:6d:5d:80:7e:ee:63:92:5b:d3:64:b0:8f:
83:8a:ad:3a:88:13:8a:b4:5e:0e:22:b2:94:bc:de:b4:10:01:
f7:4b:fd:57:94:77:cb:cf:ae:e7:93:c4:b3:33:7d:04:18:8b:
ab:f3:6d:35:74:e6:26:96:ea:0b:74:6c:80:8b:34:ef:de:00:
46:61:03:bf:98:3e:73:76:3c:08:b7:de:31:6f:d9:1b:ea:e8:
72:aa:4c:8f:26:26:57:38:50:2c:c0:62:51:e2:b0:ee:74:48:
c1:43:1b:a4:31:33:ff:aa:c4:1d:b6:90:67:d6:c4:13:77:50:
e8:97:d0:43:90:05:df:fe:18:47:b6:87:2e:17:ee:59:df:c5:
79:8e:27:d5:d4:e9:7f:f5:c9:61:f1:61:53:97:b6:92:3e:c6:
f9:05:11:3d:e6:b6:da:1c:23:59:39:72:e6:4a:f0:6f:a2:c4:
7b:cd:ce:3d:1e:0e:73:c1:27:55:22:90:b5:da:23:97:67:dd:
1e:f0:bf:70:10:5d:e6:05:7e:de:c7:ce:c9:06:58:24:83:2c:
30:07:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 05:25:54 2026 by rpki-client