$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: m0wUxU9iCl624kT5KgHyxKEw0uy2CTwphqKsCGXOVDY= Subject key identifier: 99:43:18:94:95:C1:01:DC:52:68:84:C1:DE:52:7F:88:8E:69:3D:0B Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 5CAB23203E17858F7B2D022CDFC971D57380EB04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 085D Signing time: Sat 23 Aug 2025 01:48:31 +0000 Manifest this update: Sat 23 Aug 2025 01:43:31 +0000 Manifest next update: Sun 24 Aug 2025 03:18:31 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 3: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: E/jO+sndbhz3QeumGzZ4ftWWoKd1xNzX7PhXIB0Qedo=) 4: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 5: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 03:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ab:23:20:3e:17:85:8f:7b:2d:02:2c:df:c9:71:d5:73:80:eb:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Aug 23 01:43:31 2025 GMT Not After : Aug 24 03:18:31 2025 GMT Subject: CN=9943189495C101DC526884C1DE527F888E693D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:55:d2:21:54:6a:34:77:8c:6f:ea:8c:87:72: 24:e7:ab:5a:36:4d:9e:b2:4e:f9:05:4c:91:82:4e: 04:4b:48:d1:1a:9c:e7:71:e2:f1:d9:a7:3f:41:e9: cf:1a:5a:70:fc:7a:81:23:d6:af:68:62:50:ba:57: 0a:01:08:06:1d:50:be:40:6d:a5:0e:0e:85:36:b0: 7b:6e:91:89:61:85:06:d0:fc:b4:b1:6f:47:72:a0: 06:1a:5b:81:cb:5e:7e:fa:a7:a0:37:4b:ef:c1:28: 5f:2e:db:cc:f0:00:c1:b3:58:c6:79:6a:af:f1:99: f3:7d:8d:ec:f0:98:4b:33:72:77:08:06:31:f7:b0: 9d:a5:79:f6:78:7f:22:f5:05:77:a1:bd:ae:e4:bd: 7d:35:71:e7:e1:19:10:93:23:2e:f3:65:03:6b:e4: 2b:30:ff:ad:17:a3:c5:30:7e:06:8a:4c:3b:5a:7a: e8:d3:e5:08:87:42:77:45:a2:57:0e:cb:ee:28:bf: 73:25:f3:17:c0:f1:51:fb:74:51:6d:6e:45:6d:fa: 1e:b4:29:be:0b:a5:a9:31:d9:e9:9d:c3:23:4f:06: 56:28:37:6d:af:d2:3b:98:ec:9c:9b:2a:c6:d6:6e: 6c:9f:0c:75:7b:da:62:07:3b:80:91:e9:9a:75:af: a3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:43:18:94:95:C1:01:DC:52:68:84:C1:DE:52:7F:88:8E:69:3D:0B X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:07:f4:b5:0c:c0:9d:7a:74:4f:f4:ef:df:a0:ce:d0:1a:02: e4:09:3f:28:17:2a:41:16:53:5c:83:42:59:2d:3d:bc:08:c4: 74:64:f8:d9:31:cb:96:c0:1b:cd:c3:94:30:44:64:81:01:2b: 3c:a5:6b:31:1e:bc:7e:a1:a7:63:c8:6f:a2:a2:c8:f9:cf:b9: 61:e9:a6:cf:58:fd:b6:49:40:8f:c6:5c:28:d5:f9:bc:5d:ac: 05:07:9b:a6:e0:f9:ca:55:38:50:63:b3:13:59:c0:37:02:b6: 85:72:ed:52:f4:6f:16:cb:89:4e:e0:61:6e:bc:86:61:da:cf: 28:fc:fc:ad:8f:fc:21:5c:82:46:7b:40:88:58:d0:18:de:f9: c3:da:d9:e2:e4:d0:cf:73:91:1c:58:e3:04:e2:27:0b:50:0f: 53:37:74:fd:fe:e7:59:ae:20:2f:1c:a8:d0:f5:4b:c4:50:78: 1e:5d:0e:80:ef:7f:36:5f:9e:d3:be:88:1d:16:2a:64:62:e0: ab:f2:64:36:24:92:72:1a:ea:db:04:b2:a2:2f:ac:13:1d:aa: 8b:ff:a0:5c:d8:2c:31:52:14:8b:7a:fd:90:d8:36:fc:c0:06: bc:86:d2:d2:35:71:d5:33:6b:ea:d4:b1:4c:92:88:0d:5d:8a: 22:bb:bf:31 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUXKsjID4XhY97LQIs38lx1XOA6wQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDgyMzAxNDMzMVoX DTI1MDgyNDAzMTgzMVowMzExMC8GA1UEAxMoOTk0MzE4OTQ5NUMxMDFEQzUyNjg4 NEMxREU1MjdGODg4RTY5M0QwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBV0iFUajR3jG/qjIdyJOerWjZNnrJO+QVMkYJOBEtI0Rqc53Hi8dmnP0Hp zxpacPx6gSPWr2hiULpXCgEIBh1QvkBtpQ4OhTawe26RiWGFBtD8tLFvR3KgBhpb gctefvqnoDdL78EoXy7bzPAAwbNYxnlqr/GZ832N7PCYSzNydwgGMfewnaV59nh/ IvUFd6G9ruS9fTVx5+EZEJMjLvNlA2vkKzD/rRejxTB+BopMO1p66NPlCIdCd0Wi Vw7L7ii/cyXzF8DxUft0UW1uRW36HrQpvgulqTHZ6Z3DI08GVig3ba/SO5jsnJsq xtZubJ8MdXvaYgc7gJHpmnWvo28CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSZQxiU lcEB3FJohMHeUn+Ijmk9CzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcH9LUMwJ16dE/079+gztAaAuQJPygXKkEW U1yDQlktPbwIxHRk+Nkxy5bAG83DlDBEZIEBKzylazEevH6hp2PIb6KiyPnPuWHp ps9Y/bZJQI/GXCjV+bxdrAUHm6bg+cpVOFBjsxNZwDcCtoVy7VL0bxbLiU7gYW68 hmHazyj8/K2P/CFcgkZ7QIhY0Bje+cPa2eLk0M9zkRxY4wTiJwtQD1M3dP3+51mu IC8cqND1S8RQeB5dDoDvfzZfntO+iB0WKmRi4KvyZDYkknIa6tsEsqIvrBMdqov/ oFzYLDFSFIt6/ZDYNvzABryG0tI1cdUza+rUsUySiA1diiK7vzE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:55 2025 by rpki-client