$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: 6KneMizRxhZXa7geuXOg1eM+MaZX2maSiQVmEnjL4b4= Subject key identifier: EC:32:15:F8:A2:9B:3D:43:FF:20:11:5F:8B:CC:38:2E:E4:EE:35:45 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 3EEB30480B4579F305A50CB65344EE90DB3D12FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 02B0 Signing time: Fri 17 Apr 2026 17:12:04 +0000 Manifest this update: Fri 17 Apr 2026 17:07:04 +0000 Manifest next update: Sat 18 Apr 2026 18:35:04 +0000 Files and hashes: 1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: sBC+HQj3n8AC+R5Cj6IQm+Cs7urKkdNqsUUHOvosoqg=) 2: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=) 3: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 18:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:eb:30:48:0b:45:79:f3:05:a5:0c:b6:53:44:ee:90:db:3d:12:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Apr 17 17:07:04 2026 GMT Not After : Apr 18 18:35:04 2026 GMT Subject: CN=EC3215F8A29B3D43FF20115F8BCC382EE4EE3545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:21:f2:37:8d:54:d5:5a:eb:13:66:7b:d3: fd:8d:3c:7d:53:0b:c6:c1:33:b1:9e:b3:20:ed:72: a2:5b:51:ff:59:a9:48:11:20:1f:3e:dc:72:c2:60: e5:39:50:02:84:99:6c:9f:3b:78:26:37:be:81:b7: 5d:56:c3:05:b0:8a:fb:80:f7:f7:78:b2:e0:d8:12: ff:84:e2:cf:e7:f4:40:9f:20:28:62:36:50:e7:9a: ff:89:05:0d:ee:51:cf:ee:48:fc:49:f1:b8:18:f0: 80:61:8a:14:c4:a5:b9:21:54:a4:15:43:7d:cd:d1: 60:69:6f:f2:09:13:ec:7c:9a:77:62:a4:1f:be:59: 28:b0:2d:53:55:dd:2d:11:87:54:38:cd:6e:7d:46: df:45:8b:ba:a3:22:9f:a9:3b:63:e4:6c:b0:40:19: 10:b7:49:b5:da:82:ef:87:bb:9d:0e:5b:71:db:ca: ad:f0:ba:c1:34:89:64:ff:76:88:30:68:4b:1b:fe: ca:f0:cf:e0:4c:c5:a1:07:f9:25:a0:75:05:16:1e: 32:95:c2:cb:81:d8:36:59:b3:70:0b:ab:f7:cc:04: f3:a5:26:8f:6c:b6:3f:ce:89:1f:9b:cc:97:f4:6f: 5c:dc:cb:45:c1:3e:59:21:9f:ba:a6:3a:41:37:e2: 63:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:32:15:F8:A2:9B:3D:43:FF:20:11:5F:8B:CC:38:2E:E4:EE:35:45 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8a:70:b9:15:4c:6a:65:ac:f5:cb:b4:7c:14:99:bc:25:d3: 03:4e:b2:e0:8a:a3:03:d2:97:ff:8d:26:a6:af:1f:02:e5:30: 04:e1:aa:73:7e:10:8e:24:eb:e8:72:11:fc:f3:5a:79:ff:d3: 90:f6:0c:ca:83:c8:df:24:8f:ca:91:03:f6:e8:84:90:36:22: c7:1e:8d:36:4f:88:da:e8:ea:b8:99:06:61:94:29:58:0d:bb: db:6e:53:ec:c3:13:8c:30:8c:e3:bd:9b:62:ed:11:53:a7:43: 0c:a3:7d:5a:0d:b6:aa:ef:76:e1:f1:eb:c9:97:11:82:ab:c3: 13:fd:91:ff:08:10:25:ca:de:7f:bc:4a:55:79:11:58:4e:d1: 01:50:95:7d:62:04:28:66:0c:f1:0b:60:dd:dc:0d:7a:31:48: db:8c:49:e1:be:d9:f1:ed:01:1c:6c:87:d4:41:af:56:ff:69: 26:b3:1b:54:72:fe:5f:f3:f5:24:32:1d:77:26:10:3f:3a:db: c5:63:8e:6b:cb:b3:fc:37:de:46:66:f1:7e:57:47:b3:1b:70: 3a:75:9a:10:b7:ad:2c:56:59:c8:64:93:cb:cb:ed:d4:ca:f8: 3f:4a:3d:f4:2f:8d:80:47:f8:32:58:e3:00:4a:03:97:82:13: b9:5c:5a:ea -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPuswSAtFefMFpQy2U0TukNs9Ev8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDQxNzE3MDcwNFoX DTI2MDQxODE4MzUwNFowMzExMC8GA1UEAxMoRUMzMjE1RjhBMjlCM0Q0M0ZGMjAx MTVGOEJDQzM4MkVFNEVFMzU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUFIfI3jVTVWusTZnvT/Y08fVMLxsEzsZ6zIO1yoltR/1mpSBEgHz7ccsJg 5TlQAoSZbJ87eCY3voG3XVbDBbCK+4D393iy4NgS/4Tiz+f0QJ8gKGI2UOea/4kF De5Rz+5I/EnxuBjwgGGKFMSluSFUpBVDfc3RYGlv8gkT7Hyad2KkH75ZKLAtU1Xd LRGHVDjNbn1G30WLuqMin6k7Y+RssEAZELdJtdqC74e7nQ5bcdvKrfC6wTSJZP92 iDBoSxv+yvDP4EzFoQf5JaB1BRYeMpXCy4HYNlmzcAur98wE86Umj2y2P86JH5vM l/RvXNzLRcE+WSGfuqY6QTfiY/0CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTsMhX4 ops9Q/8gEV+LzDgu5O41RTAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE6KcLkVTGplrPXLtHwU mbwl0wNOsuCKowPSl/+NJqavHwLlMAThqnN+EI4k6+hyEfzzWnn/05D2DMqDyN8k j8qRA/bohJA2IscejTZPiNro6riZBmGUKVgNu9tuU+zDE4wwjOO9m2LtEVOnQwyj fVoNtqrvduHx68mXEYKrwxP9kf8IECXK3n+8SlV5EVhO0QFQlX1iBChmDPELYN3c DXoxSNuMSeG+2fHtARxsh9RBr1b/aSazG1Ry/l/z9SQyHXcmED8628VjjmvLs/w3 3kZm8X5XR7MbcDp1mhC3rSxWWchkk8vL7dTK+D9KPfQvjYBH+DJY4wBKA5eCE7lc Wuo= -----END CERTIFICATE-----Generated at Sat Apr 18 01:34:32 2026 by rpki-client