$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: j2FC6d6bLwLFIVyuyhX2dxKuFjhghxrBJuN7fCFhFlU= Subject key identifier: D6:6D:49:51:70:A1:60:42:32:7E:C3:2F:BF:F8:70:B3:12:45:69:23 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 404DBBC7FD0B1D2A616720998FA560C6A15E535C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0812 Signing time: Tue 01 Jul 2025 02:12:12 +0000 Manifest this update: Tue 01 Jul 2025 02:07:12 +0000 Manifest next update: Wed 02 Jul 2025 04:38:12 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) 4: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 5: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: hbfDKvU5RxqRPL79jpdlpwprvDqhChMmpZvdVE/OOlM=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4d:bb:c7:fd:0b:1d:2a:61:67:20:99:8f:a5:60:c6:a1:5e:53:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 1 02:07:12 2025 GMT Not After : Jul 2 04:38:12 2025 GMT Subject: CN=D66D495170A16042327EC32FBFF870B312456923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:ff:02:b7:3f:12:06:ba:84:bc:66:da:30: 70:97:2c:94:f2:58:33:b9:fd:cc:69:df:f1:98:f4: 8d:1a:a6:1a:72:6d:96:e0:65:04:2f:5a:32:31:72: bb:c0:bb:4c:1c:03:0e:a4:5c:b8:b9:28:fa:93:d4: aa:92:76:5e:4e:1e:39:ad:36:ee:17:77:ff:73:3b: 63:13:19:29:a4:42:eb:1c:59:2d:5a:a3:13:96:39: 24:c7:b6:bb:86:27:68:63:40:e4:52:14:fe:b2:83: ee:e9:0b:a5:a7:79:bf:4f:16:96:5c:d8:07:8c:e8: f9:7a:ae:80:8b:51:a1:bc:8a:83:94:69:cc:92:dd: 08:37:4c:59:19:cb:5f:03:9e:68:3a:a8:79:74:db: f4:02:d8:d4:55:9d:d4:ff:b2:b7:8e:79:7b:a6:7f: c7:20:d1:37:4a:7f:57:f9:ef:77:00:db:2b:5f:50: 09:6f:b7:23:6c:74:69:a1:50:26:8b:11:fe:c4:2f: 54:00:d4:01:95:de:ee:0d:dd:85:9b:c0:10:c0:49: 21:80:09:15:47:f2:35:f4:58:2d:8f:01:24:ff:a9: 7e:1c:45:43:13:ae:85:72:d2:8d:87:6a:58:3d:9b: b6:78:58:9b:e7:c8:2e:40:e6:38:04:f3:83:f1:8b: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6D:49:51:70:A1:60:42:32:7E:C3:2F:BF:F8:70:B3:12:45:69:23 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9a:7f:88:60:23:ce:a1:ac:a8:d0:26:53:40:f1:cf:2a:a9: 5a:6f:84:e8:24:cf:2f:32:90:3e:46:cf:71:33:56:ac:66:88: bf:19:a7:4f:c6:2e:d6:09:e0:24:3e:6d:ea:5d:58:ec:54:f4: ae:9b:ce:29:7d:61:f0:b6:10:5b:b0:4d:1d:6f:d6:5a:06:ab: 21:7d:5d:ab:43:12:d6:d5:d5:ff:72:61:b8:b1:89:18:0b:04: f1:2f:6a:41:65:de:ea:05:7e:21:e3:98:66:e8:12:23:f2:75: ba:0e:a3:c1:f7:9e:4e:de:c5:39:9b:b8:2f:57:3e:3e:51:8c: 36:66:4a:3b:aa:ea:53:7b:a6:3f:05:66:d4:17:a4:03:96:b1: dc:28:cb:e2:9a:bc:9a:24:ab:a2:98:df:3a:f8:d0:2f:e6:f2: e2:28:93:c4:61:c5:8e:c9:11:15:b0:a5:8c:89:7b:a4:4f:a1: 9b:ee:22:ef:78:21:1a:1b:c0:21:80:73:51:59:1e:02:f7:b4: 61:88:66:35:b6:29:fb:10:d2:13:c0:56:cb:67:d1:4f:e0:74: 97:d2:d2:e7:58:c0:94:c5:64:ba:f6:7f:0b:b5:a4:8e:ab:3c: c0:63:67:ea:3a:82:d5:0a:cf:88:b7:a2:b6:9c:fe:c4:c4:cc: 09:86:6d:dd -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUQE27x/0LHSphZyCZj6VgxqFeU1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDcwMTAyMDcxMloX DTI1MDcwMjA0MzgxMlowMzExMC8GA1UEAxMoRDY2RDQ5NTE3MEExNjA0MjMyN0VD MzJGQkZGODcwQjMxMjQ1NjkyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMun/wK3PxIGuoS8ZtowcJcslPJYM7n9zGnf8Zj0jRqmGnJtluBlBC9aMjFy u8C7TBwDDqRcuLko+pPUqpJ2Xk4eOa027hd3/3M7YxMZKaRC6xxZLVqjE5Y5JMe2 u4YnaGNA5FIU/rKD7ukLpad5v08WllzYB4zo+XqugItRobyKg5RpzJLdCDdMWRnL XwOeaDqoeXTb9ALY1FWd1P+yt455e6Z/xyDRN0p/V/nvdwDbK19QCW+3I2x0aaFQ JosR/sQvVADUAZXe7g3dhZvAEMBJIYAJFUfyNfRYLY8BJP+pfhxFQxOuhXLSjYdq WD2btnhYm+fILkDmOATzg/GLaSsCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTWbUlR cKFgQjJ+wy+/+HCzEkVpIzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeaf4hgI86hrKjQJlNA8c8qqVpvhOgkzy8y kD5Gz3EzVqxmiL8Zp0/GLtYJ4CQ+bepdWOxU9K6bzil9YfC2EFuwTR1v1loGqyF9 XatDEtbV1f9yYbixiRgLBPEvakFl3uoFfiHjmGboEiPydboOo8H3nk7exTmbuC9X Pj5RjDZmSjuq6lN7pj8FZtQXpAOWsdwoy+KavJokq6KY3zr40C/m8uIok8RhxY7J ERWwpYyJe6RPoZvuIu94IRobwCGAc1FZHgL3tGGIZjW2KfsQ0hPAVstn0U/gdJfS 0udYwJTFZLr2fwu1pI6rPMBjZ+o6gtUKz4i3orac/sTEzAmGbd0= -----END CERTIFICATE-----Generated at Tue Jul 1 05:02:06 2025 by rpki-client