$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json) Hash identifier: /D6EjuGFr3FsaHUWjVI5GwMul1qAwsi29di6iGS+g3U= Subject key identifier: A0:10:0D:B7:98:64:C1:28:10:13:D9:AB:25:56:18:D8:CD:85:AF:21 Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Certificate serial: 06FEED3CDDEEE3429A29BBAF1DC4E7A5EC850287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft Manifest number: 0382 Signing time: Sun 20 Sep 2026 16:07:34 +0000 Manifest this update: Sun 20 Sep 2026 16:02:34 +0000 Manifest next update: Mon 21 Sep 2026 16:15:34 +0000 Files and hashes: 1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: mT/YB6RwHcO3/vY8zllw7LQpFYZjUL94tD3tugZ+GcM=) 2: AS153176.asa (hash: YcrzTg+SBKdEmHSIK1udwefH81IvEnVPIpXsuF8j4aw=) 3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: zyGXScknY8/UsLkdjIoZ38mJ4xlpccwmRkd/DMqJkYc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fe:ed:3c:dd:ee:e3:42:9a:29:bb:af:1d:c4:e7:a5:ec:85:02:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5 Validity Not Before: Sep 20 16:02:34 2026 GMT Not After : Sep 21 16:15:34 2026 GMT Subject: CN=A0100DB79864C1281013D9AB255618D8CD85AF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:b1:51:f7:dc:d8:77:9f:f8:51:fa:1d:b9: 6c:f1:1c:b7:e7:2d:55:25:61:ab:7b:cd:0c:0d:d2: 77:cd:17:49:b7:e9:b9:b1:f5:08:18:20:5f:3c:6c: 26:14:00:12:ba:56:bb:e7:09:96:af:ee:5d:01:59: 0a:45:7b:85:0b:55:87:cd:1e:92:c5:b5:e8:71:03: 4b:36:cc:0f:db:17:06:e3:f7:21:8d:36:1f:5a:d3: 28:d0:45:4d:d1:9a:03:9c:94:cb:9a:90:38:74:47: e7:99:39:aa:d3:26:13:12:92:14:d1:4f:69:65:3e: b8:34:21:25:46:aa:35:dd:ab:6f:90:fd:50:82:d4: d2:05:dc:a8:2b:9d:e3:db:80:c2:da:f5:00:1a:23: b8:ee:25:e1:c9:ed:7f:35:bc:6f:ac:d0:3a:d4:ae: 2d:38:6f:78:28:90:60:fc:7d:37:4d:ad:48:7d:8f: f8:51:df:37:9a:97:a2:68:2f:47:29:6d:50:61:ff: b8:9c:b5:bb:de:ac:3e:b9:43:af:2f:27:38:92:3a: 33:59:eb:69:70:ce:1c:f4:c4:0a:d6:8d:31:97:81: c6:0e:8d:53:99:4b:f4:c4:1b:90:69:4d:05:2a:65: 6a:a2:35:a5:ce:73:8c:21:a7:a6:d5:8a:06:a3:57: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:10:0D:B7:98:64:C1:28:10:13:D9:AB:25:56:18:D8:CD:85:AF:21 X509v3 Authority Key Identifier: keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5f:60:a8:8c:b9:28:46:00:89:95:9d:0d:49:0c:44:52:c0: 9f:64:98:55:08:8f:3e:55:9e:28:b7:e7:87:cf:11:9d:f8:24: ef:3e:c2:ec:ca:fb:f0:95:1e:da:09:ea:34:58:11:0b:79:79: 89:6d:5a:44:0b:a1:0e:12:5d:08:c8:7b:f6:97:c1:5e:c5:84: 17:71:89:f4:55:cd:52:eb:28:da:59:92:86:20:e1:d9:bc:d6: 41:53:42:ce:40:4c:46:65:4c:66:15:16:bd:9d:7a:74:81:b3: 14:f0:e6:07:d1:44:99:51:95:0c:cc:1e:59:9f:80:07:97:4b: 35:cd:33:41:2f:cb:69:fa:8a:46:b6:80:da:93:32:dd:24:e6: 66:16:fc:9d:20:2c:a7:d7:4c:38:a9:08:c5:4a:2d:57:ec:12: 02:b7:30:a8:bf:4f:45:de:fa:f6:b6:2f:4e:e6:8b:c8:ea:1d: 59:96:e1:f1:7a:62:d1:30:7f:50:5b:2b:c0:8e:ca:7e:c2:56: 6c:32:c1:53:95:84:bc:17:e4:9d:46:9b:9a:76:6d:df:dc:07: 45:83:e5:a2:4d:c0:e3:41:65:b9:e3:82:1b:ee:c6:e1:13:b7: 93:62:8b:1c:36:0a:29:c7:c7:2f:cd:9c:20:91:02:4c:f7:fc: 13:fe:82:23 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBv7tPN3u40KaKbuvHcTnpeyFAocwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0 MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDkyMDE2MDIzNFoX DTI2MDkyMTE2MTUzNFowMzExMC8GA1UEAxMoQTAxMDBEQjc5ODY0QzEyODEwMTNE OUFCMjU1NjE4RDhDRDg1QUYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlTsVH33Nh3n/hR+h25bPEct+ctVSVhq3vNDA3Sd80XSbfpubH1CBggXzxs JhQAErpWu+cJlq/uXQFZCkV7hQtVh80eksW16HEDSzbMD9sXBuP3IY02H1rTKNBF TdGaA5yUy5qQOHRH55k5qtMmExKSFNFPaWU+uDQhJUaqNd2rb5D9UILU0gXcqCud 49uAwtr1ABojuO4l4cntfzW8b6zQOtSuLThveCiQYPx9N02tSH2P+FHfN5qXomgv RyltUGH/uJy1u96sPrlDry8nOJI6M1nraXDOHPTECtaNMZeBxg6NU5lL9MQbkGlN BSplaqI1pc5zjCGnptWKBqNXIfUCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSgEA23 mGTBKBAT2aslVhjYzYWvITAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3 QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1 N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGxfYKiMuShGAImVnQ1J DERSwJ9kmFUIjz5Vnii354fPEZ34JO8+wuzK+/CVHtoJ6jRYEQt5eYltWkQLoQ4S XQjIe/aXwV7FhBdxifRVzVLrKNpZkoYg4dm81kFTQs5ATEZlTGYVFr2denSBsxTw 5gfRRJlRlQzMHlmfgAeXSzXNM0Evy2n6ika2gNqTMt0k5mYW/J0gLKfXTDipCMVK LVfsEgK3MKi/T0Xe+va2L07mi8jqHVmW4fF6YtEwf1BbK8COyn7CVmwywVOVhLwX 5J1Gm5p2bd/cB0WD5aJNwONBZbnjghvuxuETt5Niixw2CinHxy/NnCCRAkz3/BP+ giM= -----END CERTIFICATE-----Generated at Mon Sep 21 11:03:22 2026 by rpki-client