$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: T1ji3+TCGEgUgKdJuZJXzEFzcd1BFABXZcyl+9iyxrA= Subject key identifier: 42:10:D5:93:A9:B0:23:A7:C0:BA:AE:AC:D4:E3:7A:E5:E4:E2:BC:EA Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 51C8CCB465E8D06915938BBCD4B9080D1B14EB49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 01A3 Signing time: Mon 04 Aug 2025 09:02:58 +0000 Manifest this update: Mon 04 Aug 2025 08:57:58 +0000 Manifest next update: Tue 05 Aug 2025 11:45:58 +0000 Files and hashes: 1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: OWv20caYu5sNqfisGa0xPfD8aePOg6zEkNkvjkBV4Q4=) 2: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=) 3: AS153176.asa (hash: nTAPGafaR0TwBdv5jCAijmg7tuOn6F8lJBqMjy7Nxfk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 11:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c8:cc:b4:65:e8:d0:69:15:93:8b:bc:d4:b9:08:0d:1b:14:eb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Aug 4 08:57:58 2025 GMT Not After : Aug 5 11:45:58 2025 GMT Subject: CN=4210D593A9B023A7C0BAAEACD4E37AE5E4E2BCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:f9:bb:cd:0b:11:b7:72:82:7a:17:90:bc: f6:ff:21:33:14:b7:f0:49:98:db:d7:e1:e1:03:e7: 98:52:6e:f8:14:91:d7:3a:6e:b2:0b:03:d3:c5:bd: 31:6c:ab:8e:3c:f8:2e:3d:ad:60:8e:d5:a0:59:e8: 67:2f:b9:e1:df:49:f5:9e:75:84:bd:6e:65:16:7a: 69:cc:de:82:73:0a:60:16:ef:23:28:ea:30:fb:85: 3d:7b:24:d3:d2:b1:51:49:c1:90:0e:98:8f:4f:62: fd:74:a5:e0:2f:37:70:94:ec:1b:61:6e:b2:05:e2: b7:b9:f1:18:c4:0b:3a:5c:a2:a6:01:8f:43:f5:ce: 69:ed:79:51:7a:b6:5f:6d:c1:40:4d:c8:6c:45:03: 9e:20:a7:c4:f2:ab:8a:61:d7:a7:4c:3b:f3:0c:20: 94:53:85:00:2c:02:a9:7b:7c:b3:b5:dd:70:94:77: cd:f6:99:e9:0c:95:cd:72:d5:03:02:b5:a0:0d:dc: 98:33:8f:c3:a2:33:cd:5f:9c:f0:5a:19:11:11:a1: d8:49:20:8f:e1:9a:c6:b9:aa:b5:44:9a:76:54:cb: cd:f5:0a:5e:3d:b3:6c:7d:28:83:47:de:62:6b:70: c3:5d:72:2a:d9:f1:b1:4f:a4:84:16:93:af:b6:17: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:10:D5:93:A9:B0:23:A7:C0:BA:AE:AC:D4:E3:7A:E5:E4:E2:BC:EA X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6c:8e:20:4e:39:da:c5:f4:88:d8:b3:95:cd:d6:78:66:e0: 96:12:5e:af:b8:97:97:b7:08:39:0e:05:71:fa:fe:01:c5:89: cc:1e:49:eb:d1:b4:6d:be:c7:c0:0c:24:fd:69:7f:98:f2:21: be:47:a7:d7:91:3b:91:07:66:cc:ae:dd:7e:2d:e0:99:58:e9: 46:d6:ca:d4:ae:94:f1:be:a3:6f:1e:e3:4b:23:31:e0:05:57: f2:20:10:01:00:0c:51:b1:a2:fd:e9:d3:11:68:24:92:95:77: 5b:dd:2f:75:0c:79:f4:c9:ef:57:b3:8a:b5:7c:ac:51:ef:8e: 72:62:d8:20:c8:c8:d3:da:8f:83:c6:0a:6f:d4:3d:e3:25:7d: af:96:b2:71:9d:4c:6c:ea:d4:58:bf:bc:4b:60:27:7f:d0:f4: 08:ee:db:8f:4d:56:1e:0e:51:5e:67:cd:9d:e7:7a:99:e0:16: 32:7c:92:d9:c0:1a:e5:04:4a:8e:c7:0b:f2:f4:73:de:cb:07: 6b:6e:24:66:92:a7:93:dd:21:87:16:fa:ca:b6:86:a0:4a:91: 59:a0:16:42:91:7b:3d:6e:39:a9:a0:e3:a6:2f:c5:a6:28:7f: b2:8c:09:86:ae:0e:f5:af:94:d6:0c:84:79:be:42:89:6d:13: dc:3d:cb:5d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUcjMtGXo0GkVk4u81LkIDRsU60kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI1MDgwNDA4NTc1OFoX DTI1MDgwNTExNDU1OFowMzExMC8GA1UEAxMoNDIxMEQ1OTNBOUIwMjNBN0MwQkFB RUFDRDRFMzdBRTVFNEUyQkNFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmR+bvNCxG3coJ6F5C89v8hMxS38EmY29fh4QPnmFJu+BSR1zpusgsD08W9 MWyrjjz4Lj2tYI7VoFnoZy+54d9J9Z51hL1uZRZ6aczegnMKYBbvIyjqMPuFPXsk 09KxUUnBkA6Yj09i/XSl4C83cJTsG2FusgXit7nxGMQLOlyipgGPQ/XOae15UXq2 X23BQE3IbEUDniCnxPKrimHXp0w78wwglFOFACwCqXt8s7XdcJR3zfaZ6QyVzXLV AwK1oA3cmDOPw6IzzV+c8FoZERGh2Ekgj+GaxrmqtUSadlTLzfUKXj2zbH0og0fe Ymtww11yKtnxsU+khBaTr7YXt+cCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRCENWT qbAjp8C6rqzU43rl5OK86jAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABBsjiBOOdrF9IjYs5XN 1nhm4JYSXq+4l5e3CDkOBXH6/gHFicweSevRtG2+x8AMJP1pf5jyIb5Hp9eRO5EH Zsyu3X4t4JlY6UbWytSulPG+o28e40sjMeAFV/IgEAEADFGxov3p0xFoJJKVd1vd L3UMefTJ71ezirV8rFHvjnJi2CDIyNPaj4PGCm/UPeMlfa+WsnGdTGzq1Fi/vEtg J3/Q9Aju249NVh4OUV5nzZ3nepngFjJ8ktnAGuUESo7HC/L0c97LB2tuJGaSp5Pd IYcW+sq2hqBKkVmgFkKRez1uOamg46YvxaYof7KMCYauDvWvlNYMhHm+QoltE9w9 y10= -----END CERTIFICATE-----Generated at Mon Aug 4 11:05:35 2025 by rpki-client