$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: MSiuh1MVARhJK/ij48KFM7EE6TFH2+yB5JHk1quJENs= Subject key identifier: 39:C4:76:E4:77:7A:E9:1D:31:16:B7:EC:D9:63:C6:38:BA:D2:D9:E2 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 5426C25E1EC124507590754A89A7DB34A2316A5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 04E6 Signing time: Mon 20 May 2024 05:28:40 +0000 Manifest this update: Mon 20 May 2024 05:23:40 +0000 Manifest next update: Tue 21 May 2024 05:34:40 +0000 Files and hashes: 1: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: hZi6xVGFuBm2cE8kEk7yPC6zUVltxG7VPQHnO46XkB8=) 2: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: 39vslnGpRUqWixVX58xNulztMVEk9ux6GJsMXqfcyAo=) 3: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: VCiQgGJC0woztKedBbZdy+byeG2dvfPseQNFg+NN9aw=) 4: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: t/IvExZPisuCT40I66rzBh3x410A0T8+JyYBhEtPSmQ=) 5: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: fqCkQ1X57BQQIQhZvjOGgtLEka7dhGZuUWNiEO6MzSA=) 6: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: ncLoevwvKvodUNiAaicIXnW/zgXdJWnC1DW1H1nOvqo=) 7: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: tYD0H+qFMMxAnA28lm2BTiJOYFbezxVaXmwVXDdhR1w=) 8: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: Orhkd5BJrOYHH04ItUP52PTFKFnHDMsVnu+OAkIgfd0=) 9: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: RYou/+EhCBE95tEi/MsaTQgt0n2IT60HuvzCvZEk+54=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:26:c2:5e:1e:c1:24:50:75:90:75:4a:89:a7:db:34:a2:31:6a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: May 20 05:23:40 2024 GMT Not After : May 21 05:34:40 2024 GMT Subject: CN=39C476E4777AE91D3116B7ECD963C638BAD2D9E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:17:6a:5c:e4:68:20:cb:3e:98:61:d1:75: cf:5e:96:68:1e:4d:ba:e1:d7:cc:1f:3c:e8:48:e8: 19:a9:7d:79:1a:b4:fb:ca:c7:43:5c:53:a3:18:b7: 1a:54:c2:1f:43:96:0a:3b:a9:e1:ca:1c:f8:5d:75: 39:ab:bf:c6:a6:e3:fe:bf:b6:66:b4:ab:c7:fd:a3: 3c:99:ca:60:64:cc:23:72:ef:9b:ff:40:d5:07:ab: 46:e4:e1:16:e5:82:ad:72:20:66:6f:8e:2f:27:b1: 37:de:2e:a7:76:6b:58:4a:6d:8b:d9:dc:3c:58:21: 43:e1:aa:73:0a:48:b0:cb:1c:11:af:7d:85:6e:f0: b6:05:c1:6d:44:53:63:f4:25:41:1c:51:fa:3b:f8: f0:23:c3:e7:d5:35:83:33:6b:07:e5:0c:72:15:9d: f6:4c:da:8e:7d:42:2f:3f:69:8e:f6:8d:85:be:ca: 72:1c:74:c8:04:a1:e6:aa:66:64:71:94:31:67:99: 3a:24:c4:5a:39:80:60:f4:a5:fc:ca:05:e5:ec:ee: c7:fb:8a:9a:e0:fd:b3:4e:7b:c6:9b:ef:fa:42:55: bd:ab:fb:ac:98:76:83:33:92:94:3e:8d:02:3b:fc: 1e:a8:bb:ba:27:3f:59:88:fe:c7:f8:86:c1:a4:fc: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C4:76:E4:77:7A:E9:1D:31:16:B7:EC:D9:63:C6:38:BA:D2:D9:E2 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e0:48:76:42:6f:e9:f3:89:a4:ae:37:5a:ba:6c:23:c7:1c: 02:ca:1e:87:36:a6:91:be:45:b1:78:d4:83:7b:6f:f0:93:32: ff:80:aa:02:27:7f:b2:4a:04:86:d0:aa:ea:32:9d:a7:58:5e: fb:25:ed:7a:f0:cf:f8:a3:ae:9d:b9:fe:ef:0e:61:a8:81:3a: ff:98:83:cc:e6:55:f8:76:7d:13:83:7f:08:cc:6f:89:2f:91: 3d:64:85:76:bb:76:8b:07:39:98:e9:0e:42:1f:8d:85:19:b5: 8b:02:02:c3:5f:30:b8:e3:34:02:91:e7:3e:5a:61:e6:74:b2: ba:b7:ac:0a:f6:73:17:84:f7:42:93:df:e5:23:11:6c:34:6c: d3:72:2e:eb:f4:ef:2c:8d:7c:92:69:6f:17:54:62:55:cf:0d: 96:eb:22:ee:79:89:be:39:31:e1:c1:2d:fe:4c:96:34:98:1f: 3d:24:32:6c:18:ec:4b:3f:4a:68:0a:1d:be:05:43:46:53:5d: 59:67:29:0e:45:ff:82:2e:c4:82:61:3a:2e:91:ea:ab:7a:f9: 24:1e:58:31:ca:3c:ce:77:45:e3:c4:8d:14:11:24:44:2e:a6: 80:b5:7c:80:5c:d5:57:93:8f:8d:7a:f5:ea:8b:42:5c:45:39: b2:da:04:d5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUVCbCXh7BJFB1kHVKiafbNKIxal0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI0MDUyMDA1MjM0MFoX DTI0MDUyMTA1MzQ0MFowMzExMC8GA1UEAxMoMzlDNDc2RTQ3NzdBRTkxRDMxMTZC N0VDRDk2M0M2MzhCQUQyRDlFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMikF2pc5Gggyz6YYdF1z16WaB5NuuHXzB886EjoGal9eRq0+8rHQ1xToxi3 GlTCH0OWCjup4coc+F11Oau/xqbj/r+2ZrSrx/2jPJnKYGTMI3Lvm/9A1QerRuTh FuWCrXIgZm+OLyexN94up3ZrWEpti9ncPFghQ+GqcwpIsMscEa99hW7wtgXBbURT Y/QlQRxR+jv48CPD59U1gzNrB+UMchWd9kzajn1CLz9pjvaNhb7Kchx0yASh5qpm ZHGUMWeZOiTEWjmAYPSl/MoF5ezux/uKmuD9s057xpvv+kJVvav7rJh2gzOSlD6N Ajv8Hqi7uic/WYj+x/iGwaT8Hl0CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQ5xHbk d3rpHTEWt+zZY8Y4utLZ4jAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEASeBIdkJv6fOJpK43WrpsI8ccAsoehzamkb5FsXjU g3tv8JMy/4CqAid/skoEhtCq6jKdp1he+yXtevDP+KOunbn+7w5hqIE6/5iDzOZV +HZ9E4N/CMxviS+RPWSFdrt2iwc5mOkOQh+NhRm1iwICw18wuOM0ApHnPlph5nSy uresCvZzF4T3QpPf5SMRbDRs03Iu6/TvLI18kmlvF1RiVc8Nlusi7nmJvjkx4cEt /kyWNJgfPSQybBjsSz9KaAodvgVDRlNdWWcpDkX/gi7EgmE6LpHqq3r5JB5YMco8 zndF48SNFBEkRC6mgLV8gFzVV5OPjXr16otCXEU5stoE1Q== -----END CERTIFICATE-----Generated at Mon May 20 06:53:57 2024 by rpki-client on console-ams.rpki-client.org