$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: k+lfuJoLHrrbhazYeS/NHt6jt0ei6/LK6A6tGT9AZ5U= Subject key identifier: 82:F5:62:DA:C7:C1:81:FF:07:89:79:1E:01:70:39:53:3A:DB:8D:7D Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 525AA4CF05BD6803FE0C0A26DA2D75D6639E3C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 07CD Signing time: Sat 10 May 2025 14:06:17 +0000 Manifest this update: Sat 10 May 2025 14:01:17 +0000 Manifest next update: Sun 11 May 2025 14:21:17 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 3: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: uWjyqjYzi5pKnRwaZge6ay6Tl3Aa/As9/0t8rXe9+yE=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5a:a4:cf:05:bd:68:03:fe:0c:0a:26:da:2d:75:d6:63:9e:3c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: May 10 14:01:17 2025 GMT Not After : May 11 14:21:17 2025 GMT Subject: CN=82F562DAC7C181FF0789791E017039533ADB8D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:33:df:e7:4b:2d:96:0b:29:6f:b9:09:f4: c9:d0:6c:88:39:e4:2a:6d:7f:0c:fb:3f:7b:0d:ea: 7b:f5:8b:60:20:35:30:92:ea:e0:87:f0:fd:0a:eb: 65:4a:a9:8e:fd:d8:41:33:32:fe:b4:a0:b6:b3:34: 29:d9:49:25:89:97:c5:57:36:25:25:4d:61:0a:ca: 35:c8:04:79:45:62:ee:93:11:fd:e5:b0:53:80:2e: d4:58:cc:7e:b3:e1:47:52:48:76:a6:e9:ce:b1:83: 5d:51:4f:07:cb:a7:6b:e5:3b:8c:c4:80:d9:35:1f: 7f:28:09:12:0c:f6:ed:2b:51:8e:92:67:17:e4:96: 4c:8e:24:bb:0a:17:ce:88:cc:65:d5:91:96:ec:2f: 90:7f:a9:ba:42:70:ee:8e:4d:b8:41:c9:ba:87:7f: 9e:d8:c1:92:b8:c2:93:d1:b3:ae:ff:9e:1f:4f:2d: 09:a7:87:27:b8:75:77:e5:85:6a:93:96:d3:06:e8: 31:b5:31:62:3d:79:77:6a:de:b2:eb:db:be:0a:4d: 96:eb:fe:97:49:33:a5:14:cc:7b:db:d8:1f:49:12: 3a:b8:dd:2b:7f:81:1c:9c:34:61:49:13:16:5a:20: 4f:48:7d:89:ad:a1:1f:4f:34:11:68:7b:d0:62:c9: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F5:62:DA:C7:C1:81:FF:07:89:79:1E:01:70:39:53:3A:DB:8D:7D X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d0:15:9c:7e:41:11:08:bd:a8:70:15:fb:6a:68:e3:f3:e2: 13:ca:ff:cf:9a:b6:d0:d9:51:92:87:d0:f1:cb:c7:53:89:c0: 90:ae:b9:60:0b:a5:2f:c6:a0:fe:cc:bf:d8:05:ab:f8:eb:08: 6a:73:65:4b:6c:c8:92:89:ae:95:63:95:2d:f6:8b:08:10:4c: a9:eb:e0:04:cd:6f:da:de:73:0f:90:db:fd:51:8a:82:7d:26: 95:b3:4c:d3:3d:0f:93:c5:d3:b3:ff:c1:f6:61:1e:67:6f:c4: 40:c1:eb:d2:a7:f4:16:d4:75:86:f9:a5:57:79:b6:7e:43:fa: a6:f6:4d:6c:22:7c:a0:68:c0:69:92:8c:d5:fd:aa:1a:f5:f2: 2e:68:1e:56:00:a6:d7:8a:03:f9:84:18:36:b1:bc:2a:c0:71: 8e:e5:df:74:be:75:44:41:99:ed:03:eb:c7:37:94:2f:9e:c4: 0d:41:d8:97:ab:18:06:ac:59:af:ab:dc:c9:38:17:73:19:d0: 8f:b6:63:f4:96:64:51:e5:88:74:ac:0d:2e:5a:ca:12:e2:bf: 98:5a:c2:d7:38:88:1a:c9:a6:6e:4d:cd:75:7a:82:28:53:bb: fa:d2:99:3d:a8:aa:a6:b9:2e:d7:b3:08:ef:b5:f4:3c:48:e9: 6a:c1:b7:4e -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUUlqkzwW9aAP+DAom2i111mOePIIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDUxMDE0MDExN1oX DTI1MDUxMTE0MjExN1owMzExMC8GA1UEAxMoODJGNTYyREFDN0MxODFGRjA3ODk3 OTFFMDE3MDM5NTMzQURCOEQ3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMTM9/nSy2WCylvuQn0ydBsiDnkKm1/DPs/ew3qe/WLYCA1MJLq4Ifw/Qrr ZUqpjv3YQTMy/rSgtrM0KdlJJYmXxVc2JSVNYQrKNcgEeUVi7pMR/eWwU4Au1FjM frPhR1JIdqbpzrGDXVFPB8una+U7jMSA2TUffygJEgz27StRjpJnF+SWTI4kuwoX zojMZdWRluwvkH+pukJw7o5NuEHJuod/ntjBkrjCk9Gzrv+eH08tCaeHJ7h1d+WF apOW0wboMbUxYj15d2resuvbvgpNluv+l0kzpRTMe9vYH0kSOrjdK3+BHJw0YUkT FlogT0h9ia2hH080EWh70GLJ+sMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSC9WLa x8GB/weJeR4BcDlTOtuNfTAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTQFZx+QREIvahwFftqaOPz4hPK/8+attDZ UZKH0PHLx1OJwJCuuWALpS/GoP7Mv9gFq/jrCGpzZUtsyJKJrpVjlS32iwgQTKnr 4ATNb9recw+Q2/1RioJ9JpWzTNM9D5PF07P/wfZhHmdvxEDB69Kn9BbUdYb5pVd5 tn5D+qb2TWwifKBowGmSjNX9qhr18i5oHlYApteKA/mEGDaxvCrAcY7l33S+dURB me0D68c3lC+exA1B2JerGAasWa+r3Mk4F3MZ0I+2Y/SWZFHliHSsDS5ayhLiv5ha wtc4iBrJpm5NzXV6gihTu/rSmT2oqqa5LtezCO+19DxI6WrBt04= -----END CERTIFICATE-----Generated at Sun May 11 05:28:15 2025 by rpki-client