$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: o1gBYSNntr4IiWvPbkQJlRUeK8EYZa3p0Q8f9hwyhQ4= Subject key identifier: A5:D6:C7:C3:32:6F:A7:FE:F7:BF:6C:BB:12:9F:10:D6:75:A2:67:B4 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 19AAA2720A97E876575880823C38CB89151B2CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 0272 Signing time: Sun 01 Mar 2026 17:03:30 +0000 Manifest this update: Sun 01 Mar 2026 16:58:30 +0000 Manifest next update: Mon 02 Mar 2026 17:53:30 +0000 Files and hashes: 1: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) 2: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: Gd3cwAAycF2RIRDnaOsmhFA+bP6jgOAZZoezcpo/d3o=) 3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 17:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:aa:a2:72:0a:97:e8:76:57:58:80:82:3c:38:cb:89:15:1b:2c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Mar 1 16:58:30 2026 GMT Not After : Mar 2 17:53:30 2026 GMT Subject: CN=A5D6C7C3326FA7FEF7BF6CBB129F10D675A267B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:15:2f:dc:5a:46:a4:dc:8c:3a:af:3d:9b: af:b2:31:f4:52:85:81:86:af:5a:3c:f3:e7:d5:be: 23:33:3b:3d:37:cd:c8:fb:8b:f2:1e:1e:2f:d2:26: 10:c1:8e:70:9e:02:21:e7:a6:91:b8:be:ab:38:20: c2:a9:a3:d1:c2:92:94:c4:1d:71:a7:92:99:26:f6: ed:36:46:6a:1d:5a:23:65:df:b4:0a:22:6a:04:60: 86:05:27:f0:ca:bb:7e:74:ca:7a:57:ac:b8:ec:04: 52:95:a8:cc:42:67:33:75:67:5a:69:6b:9f:13:61: 18:40:42:fd:1a:89:93:29:26:fb:13:af:6b:fa:28: 3c:13:4c:62:3d:8e:1a:95:d2:19:7f:c3:c3:1f:c5: 57:bd:22:fc:df:f5:33:dd:b0:56:77:ed:f1:10:e4: c5:f1:7d:44:b4:e1:f4:40:00:c6:71:b8:21:49:50: 24:cf:a4:f5:6e:17:19:9b:3c:95:89:74:c6:c8:06: 72:17:b5:b2:1f:e0:c6:81:cc:ab:65:a0:35:0f:17: 6f:68:a0:0e:c3:9e:5a:ba:58:ec:48:54:8b:32:f2: 44:90:1a:50:39:d6:a6:3c:82:78:e7:74:db:fb:f5: 73:ab:d5:e9:5a:df:e9:b2:41:88:46:90:3b:71:93: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D6:C7:C3:32:6F:A7:FE:F7:BF:6C:BB:12:9F:10:D6:75:A2:67:B4 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:26:2e:01:58:4f:29:a8:2b:21:b7:b0:fe:04:2c:54:4b:93: 62:f9:c1:54:c2:a5:9e:f9:ae:07:f8:0c:90:ec:bf:6b:76:5e: 4b:f6:93:2d:0d:d4:39:7f:bb:b0:5d:ce:28:b2:98:b1:54:54: 58:b5:04:42:b8:6e:7a:ae:ba:90:f8:e5:88:95:71:4d:10:dc: ee:d1:8e:c7:69:01:0a:7e:30:9a:74:66:64:b3:5b:e9:ad:4f: d7:e2:2c:7f:e3:03:30:1a:53:16:38:cd:93:fa:55:53:00:93: 39:2f:4e:f8:d1:93:a5:94:2a:10:fa:13:79:fc:ac:9a:4a:0e: f7:26:d4:e8:3b:75:c1:95:d6:cf:c3:fd:31:24:76:af:a9:23: 09:37:89:fa:0b:c2:9e:16:d3:cd:07:00:c7:91:85:34:87:c6: ca:83:11:5e:3b:2b:62:7a:24:46:11:ea:19:a0:b4:5e:1c:d3: 34:c3:42:07:42:0c:7b:62:00:1b:ff:eb:b2:74:1d:bc:76:3c: 18:46:d1:d0:9c:06:54:15:4e:1a:3a:41:0a:f4:b1:4d:e5:e3: c1:fe:fd:f4:77:db:36:20:d2:ea:89:47:51:36:3b:fd:9c:bb: 7c:de:79:9e:9b:a9:19:dd:26:cb:94:6d:55:6d:f6:f6:25:b1: 5a:58:b5:29 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGaqicgqX6HZXWICCPDjLiRUbLKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDMwMTE2NTgzMFoX DTI2MDMwMjE3NTMzMFowMzExMC8GA1UEAxMoQTVENkM3QzMzMjZGQTdGRUY3QkY2 Q0JCMTI5RjEwRDY3NUEyNjdCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6xFS/cWkak3Iw6rz2br7Ix9FKFgYavWjzz59W+IzM7PTfNyPuL8h4eL9Im EMGOcJ4CIeemkbi+qzggwqmj0cKSlMQdcaeSmSb27TZGah1aI2XftAoiagRghgUn 8Mq7fnTKelesuOwEUpWozEJnM3VnWmlrnxNhGEBC/RqJkykm+xOva/ooPBNMYj2O GpXSGX/Dwx/FV70i/N/1M92wVnft8RDkxfF9RLTh9EAAxnG4IUlQJM+k9W4XGZs8 lYl0xsgGche1sh/gxoHMq2WgNQ8Xb2igDsOeWrpY7EhUizLyRJAaUDnWpjyCeOd0 2/v1c6vV6Vrf6bJBiEaQO3GTOdECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSl1sfD Mm+n/ve/bLsSnxDWdaJntDAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACQmLgFYTymoKyG3sP4E LFRLk2L5wVTCpZ75rgf4DJDsv2t2Xkv2ky0N1Dl/u7BdziiymLFUVFi1BEK4bnqu upD45YiVcU0Q3O7RjsdpAQp+MJp0ZmSzW+mtT9fiLH/jAzAaUxY4zZP6VVMAkzkv TvjRk6WUKhD6E3n8rJpKDvcm1Og7dcGV1s/D/TEkdq+pIwk3ifoLwp4W080HAMeR hTSHxsqDEV47K2J6JEYR6hmgtF4c0zTDQgdCDHtiABv/67J0Hbx2PBhG0dCcBlQV Tho6QQr0sU3l48H+/fR32zYg0uqJR1E2O/2cu3zeeZ6bqRndJsuUbVVt9vYlsVpY tSk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:33:41 2026 by rpki-client