$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: 0itnhHJlX8YC3ZkRvvyO+/DhUsuFc9WSiU1PWPMY9Y0= Subject key identifier: 91:BE:C9:73:34:E3:82:21:24:DF:42:DB:89:DC:76:AD:A7:78:23:A0 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 0A3C38BCB93D92B0AD9E58A23E783B1E520E91A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 0729 Signing time: Sat 23 Aug 2025 01:48:31 +0000 Manifest this update: Sat 23 Aug 2025 01:43:31 +0000 Manifest next update: Sun 24 Aug 2025 04:20:31 +0000 Files and hashes: 1: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=) 2: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: QKdp+97/jBscT8ua2qqpOoD5458W90JnJCIl2/HTZ9w=) 3: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=) 4: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=) 5: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=) 6: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=) 7: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=) 8: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs=) 9: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=) 10: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: QNSic/v6kMsgiTQEgkwYcFeGlL8U5UPw8a3IQVxqznc=) 11: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=) 12: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: 9uecxpl+8zhYNM/VLSzIYQFtoaNZNiKX2oWXwwGgZ5I=) 13: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=) 14: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=) 15: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=) 16: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: 7Wq2I+eG+i0crt18gB8fjrpeNgtc2h87eRDDsvP4ByQ=) 17: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: Gkk3pjPcBn1ydDwbDsy1KlefEvRWum7WwjI0/dDLNr0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3c:38:bc:b9:3d:92:b0:ad:9e:58:a2:3e:78:3b:1e:52:0e:91:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Aug 23 01:43:31 2025 GMT Not After : Aug 24 04:20:31 2025 GMT Subject: CN=91BEC97334E3822124DF42DB89DC76ADA77823A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:d2:ef:74:03:6e:6e:76:2b:89:d8:11:cc: fd:e4:03:59:ce:b7:7a:d1:f6:5a:12:fa:cf:a2:8c: 9d:2b:04:97:21:b5:69:f7:c5:03:1a:27:c0:92:99: 06:3d:56:bd:cd:e5:e5:12:34:6c:76:7a:7a:e4:fe: 9f:bd:13:ac:2d:ac:07:bc:d8:5e:71:73:c3:0e:31: 82:08:00:01:9c:e9:08:8f:a6:11:9d:b4:18:49:92: 72:38:bb:1d:fe:6b:b3:ed:5d:46:f6:50:e8:6c:68: 7a:aa:2f:d6:62:1b:39:2d:bb:c9:0f:28:20:81:66: 2f:ab:2e:30:4e:0a:d3:b1:5d:95:d4:cd:20:91:ef: 53:33:b4:a0:d1:27:34:1c:a6:64:92:1d:9e:e6:e5: ed:0f:dc:26:eb:50:38:43:9c:c2:be:14:6c:a4:5f: c4:45:3a:fc:88:51:0b:05:c8:1a:55:db:d9:d6:2c: 96:aa:c0:fd:11:5e:22:03:4a:b7:53:7f:35:53:3c: f7:df:28:55:1f:45:da:03:ad:e1:bc:84:7e:93:28: 85:5a:2a:02:57:ba:ef:71:0c:3e:83:d9:1c:a1:a6: 63:26:fc:8e:96:ce:69:1a:da:8a:d3:08:22:8c:14: 6f:25:c9:92:3b:7d:23:f6:e0:6e:92:83:13:07:f9: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:C9:73:34:E3:82:21:24:DF:42:DB:89:DC:76:AD:A7:78:23:A0 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a3:e4:9c:98:99:95:17:c1:8e:68:e1:51:66:83:38:55:4e: 1c:e9:e6:9d:c5:a9:fd:33:0e:59:fe:0c:73:cf:74:20:a5:e6: 17:c3:15:68:53:b0:bd:5f:54:c5:6b:3f:80:97:11:43:2f:f4: d5:8c:4e:9c:7d:39:4a:0b:d4:74:3f:d8:96:23:45:e8:72:f0: b8:76:a1:c1:7b:93:eb:32:1c:5c:f3:8d:ce:78:92:0e:c3:ed: cf:8d:cc:e7:91:5a:1a:4d:50:47:ca:61:ed:a9:c7:e0:75:9e: 87:6f:ec:70:1a:79:8f:c0:6f:6a:77:fc:fa:0e:52:13:54:71: e2:55:3c:1d:72:0f:6d:ad:35:48:f3:d6:af:a0:a2:db:80:07: a3:48:f4:06:5c:13:64:02:c5:cb:0f:47:1a:97:4d:a6:87:99: f2:91:56:04:eb:44:36:d8:c0:4a:ec:90:b2:ac:a2:39:2d:f6: be:49:33:04:02:02:c2:86:db:e7:c9:a5:30:8a:61:a2:f1:bb: 17:f5:db:23:3c:bb:b8:b8:4b:c3:6c:4f:dc:b2:af:d1:de:94: 69:f5:2b:4a:e4:26:1a:1d:52:b1:c5:58:aa:87:a5:d4:e9:de: 58:65:7f:9f:55:cb:11:47:14:74:15:be:14:b6:0a:7c:e6:d4: f6:b3:03:90 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUCjw4vLk9krCtnliiPng7HlIOkaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MDgyMzAxNDMzMVoX DTI1MDgyNDA0MjAzMVowMzExMC8GA1UEAxMoOTFCRUM5NzMzNEUzODIyMTI0REY0 MkRCODlEQzc2QURBNzc4MjNBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALT60u90A25udiuJ2BHM/eQDWc63etH2WhL6z6KMnSsElyG1affFAxonwJKZ Bj1Wvc3l5RI0bHZ6euT+n70TrC2sB7zYXnFzww4xgggAAZzpCI+mEZ20GEmScji7 Hf5rs+1dRvZQ6Gxoeqov1mIbOS27yQ8oIIFmL6suME4K07FdldTNIJHvUzO0oNEn NBymZJIdnubl7Q/cJutQOEOcwr4UbKRfxEU6/IhRCwXIGlXb2dYslqrA/RFeIgNK t1N/NVM8998oVR9F2gOt4byEfpMohVoqAle673EMPoPZHKGmYyb8jpbOaRraitMI IowUbyXJkjt9I/bgbpKDEwf5gRcCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSRvslz NOOCISTfQtuJ3Hatp3gjoDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaj5JyYmZUXwY5o4VFmgzhVThzp5p3Fqf0z Dln+DHPPdCCl5hfDFWhTsL1fVMVrP4CXEUMv9NWMTpx9OUoL1HQ/2JYjRehy8Lh2 ocF7k+syHFzzjc54kg7D7c+NzOeRWhpNUEfKYe2px+B1nodv7HAaeY/Ab2p3/PoO UhNUceJVPB1yD22tNUjz1q+gotuAB6NI9AZcE2QCxcsPRxqXTaaHmfKRVgTrRDbY wErskLKsojkt9r5JMwQCAsKG2+fJpTCKYaLxuxf12yM8u7i4S8NsT9yyr9HelGn1 K0rkJhodUrHFWKqHpdTp3lhlf59VyxFHFHQVvhS2Cnzm1PazA5A= -----END CERTIFICATE-----Generated at Sat Aug 23 20:17:45 2025 by rpki-client