$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: tVgw7SeidkD6sZeUYJaxPUPauPeaOlSHRpBBL7CSRds= Subject key identifier: 45:5A:CD:E8:D2:CD:A2:D5:EA:2B:9E:DF:B1:F9:16:B7:95:4E:0E:1E Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 3912B41EFD68C00D724E6728CD70DBB9DDFF3D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 0339 Signing time: Tue 28 Jul 2026 05:03:32 +0000 Manifest this update: Tue 28 Jul 2026 04:58:32 +0000 Manifest next update: Wed 29 Jul 2026 06:19:32 +0000 Files and hashes: 1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: BAvS2I+4y6NtC95Adh+rYJfxkWghqYYwtSqF3o6tZCo=) 2: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) 3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: zyGXScknY8/UsLkdjIoZ38mJ4xlpccwmRkd/DMqJkYc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:12:b4:1e:fd:68:c0:0d:72:4e:67:28:cd:70:db:b9:dd:ff:3d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Jul 28 04:58:32 2026 GMT Not After : Jul 29 06:19:32 2026 GMT Subject: CN=455ACDE8D2CDA2D5EA2B9EDFB1F916B7954E0E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:55:8b:c1:a5:18:05:93:11:4a:5c:69:c3: 97:45:6f:54:fb:42:29:ef:a2:d7:a9:23:36:6f:03: 42:55:62:02:19:a8:7e:2b:60:91:17:16:8d:76:f1: 3f:1c:18:89:06:06:0d:b3:49:d4:30:e8:2d:16:dc: 1c:1b:71:37:5e:9a:d2:65:6a:6d:f2:85:4d:71:7c: 29:5b:4d:66:57:cb:c4:f9:eb:8d:ad:5b:96:25:d3: 56:38:15:4e:be:47:c4:f1:c4:41:55:cb:45:8c:79: cc:2d:9e:80:5c:31:7b:b9:06:53:14:30:d3:ae:56: 5b:20:1a:ac:3e:d8:1c:c8:df:19:58:96:8e:11:49: 71:f6:78:8e:54:4e:a3:82:73:e1:49:e6:6b:8b:92: eb:9b:9f:b5:c1:f7:dc:21:00:d7:6b:01:8d:5b:5d: c3:38:87:9e:76:44:fc:4a:97:7a:14:ef:ff:2f:e8: 2c:36:d6:9d:ef:d4:3e:cf:f9:af:2d:70:d8:94:b9: 19:c0:5b:4f:f7:fe:1b:cc:33:2f:8f:c4:19:af:19: 16:e4:28:cc:41:3d:2d:0b:45:6e:dd:7d:e0:d7:94: ac:ca:6b:c4:d4:84:db:11:30:c1:2f:0b:ce:2d:4b: e6:af:fc:f3:cd:95:bb:fb:ad:f0:2b:27:50:36:72: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5A:CD:E8:D2:CD:A2:D5:EA:2B:9E:DF:B1:F9:16:B7:95:4E:0E:1E X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f9:af:8e:a7:9f:0c:41:2a:0e:3b:0a:e9:a2:12:e9:20:03: ea:d1:5c:54:a5:e5:86:d8:02:72:56:fb:4c:68:76:28:b5:c4: 15:18:fc:dd:16:2b:9d:f5:a0:6d:ab:db:14:d9:86:7f:28:df: 71:29:5b:40:e4:0b:96:2e:68:5a:af:61:5f:e5:72:90:2b:0c: 22:7a:f2:c7:d7:e2:99:9d:ce:c8:3d:fd:cf:ec:53:24:db:57: f0:73:6d:a5:49:a8:af:81:be:a4:4c:75:ea:a6:4d:72:34:bd: 48:84:75:c5:bb:64:eb:d3:1d:e7:58:97:59:d5:94:76:f4:7f: 22:23:0d:49:05:e2:e9:a0:ac:f4:31:80:8e:17:4f:09:83:d7: 1d:7b:5d:dd:97:f2:f5:7f:ee:90:d3:3e:4d:34:6a:9d:3b:9f: d5:ca:88:e6:71:41:f1:fa:12:23:1e:33:9a:43:8c:93:f4:4d: c4:94:0a:67:f1:20:c3:1e:81:d5:1a:26:3b:85:50:23:dd:52: f6:da:ba:15:56:d5:a0:53:f5:01:8c:12:1f:33:e6:bf:98:69: 10:bb:37:58:a5:98:af:14:0f:8f:53:c6:de:b5:26:87:41:df: 7e:76:4e:7c:2c:57:92:c0:77:c3:58:05:11:1a:e4:b7:32:56: 49:97:3c:0d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUORK0Hv1owA1yTmcozXDbud3/PS4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDcyODA0NTgzMloX DTI2MDcyOTA2MTkzMlowMzExMC8GA1UEAxMoNDU1QUNERThEMkNEQTJENUVBMkI5 RURGQjFGOTE2Qjc5NTRFMEUxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGRVYvBpRgFkxFKXGnDl0VvVPtCKe+i16kjNm8DQlViAhmofitgkRcWjXbx PxwYiQYGDbNJ1DDoLRbcHBtxN16a0mVqbfKFTXF8KVtNZlfLxPnrja1bliXTVjgV Tr5HxPHEQVXLRYx5zC2egFwxe7kGUxQw065WWyAarD7YHMjfGViWjhFJcfZ4jlRO o4Jz4Unma4uS65uftcH33CEA12sBjVtdwziHnnZE/EqXehTv/y/oLDbWne/UPs/5 ry1w2JS5GcBbT/f+G8wzL4/EGa8ZFuQozEE9LQtFbt194NeUrMprxNSE2xEwwS8L zi1L5q/8882Vu/ut8CsnUDZylxUCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRFWs3o 0s2i1eornt+x+Ra3lU4OHjAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFH5r46nnwxBKg47Cumi EukgA+rRXFSl5YbYAnJW+0xodii1xBUY/N0WK531oG2r2xTZhn8o33EpW0DkC5Yu aFqvYV/lcpArDCJ68sfX4pmdzsg9/c/sUyTbV/BzbaVJqK+BvqRMdeqmTXI0vUiE dcW7ZOvTHedYl1nVlHb0fyIjDUkF4umgrPQxgI4XTwmD1x17Xd2X8vV/7pDTPk00 ap07n9XKiOZxQfH6EiMeM5pDjJP0TcSUCmfxIMMegdUaJjuFUCPdUvbauhVW1aBT 9QGMEh8z5r+YaRC7N1ilmK8UD49Txt61JodB3352TnwsV5LAd8NYBREa5LcyVkmX PA0= -----END CERTIFICATE-----Generated at Tue Jul 28 14:46:20 2026 by rpki-client