$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: KLVJkOErdr/wlgG+fEUsNf/b+OeVaqAbmY26hPnol14= Subject key identifier: CA:12:B2:20:9C:D1:1E:67:CA:E2:81:73:AB:CC:57:C2:87:4F:B7:FD Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 42874A063AC51C87DE20425D09B4F982BA1BB622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 07C1 Signing time: Sat 29 Mar 2025 03:48:01 +0000 Manifest this update: Sat 29 Mar 2025 03:43:01 +0000 Manifest next update: Sun 30 Mar 2025 04:53:01 +0000 Files and hashes: 1: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=) 2: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=) 3: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=) 4: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=) 5: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=) 6: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=) 7: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=) 8: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=) 9: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=) 10: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) 11: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=) 12: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=) 13: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: BAb7hWNMhXpZp+0vnVyRiFl/HrUl9SGTSyV5G7W5GT4=) 14: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: PXxIPbPYgYAkV8Fr04NodCt8BXsoPGpIleRa49s51NY=) 15: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=) 16: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: VXWs2+JxjnMILtWb9rzdSHAcK8Olx58anAYmMg4GUkU=) 17: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=) 18: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=) 19: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=) 20: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=) 21: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: SCq27MG9RGSIUs9pFwUD8DJ+z99XPXXyy+EOwWQmw8w=) 22: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 23: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=) 24: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=) 25: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=) 26: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=) 27: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=) 28: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=) 29: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 42:87:4a:06:3a:c5:1c:87:de:20:42:5d:09:b4:f9:82:ba:1b:b6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Mar 29 03:43:01 2025 GMT Not After : Mar 30 04:53:01 2025 GMT Subject: CN=CA12B2209CD11E67CAE28173ABCC57C2874FB7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:b6:8b:a9:f7:d6:d0:d5:f1:99:b6:5d:2b: 8c:2e:c8:85:d5:40:da:93:ab:93:a5:f8:13:71:32: 3c:fd:d5:5b:81:5a:62:1f:24:40:f3:ef:fd:7d:f8: 70:da:49:34:e8:08:0f:1d:bf:8e:86:18:76:27:98: 68:4c:7f:18:0d:11:24:55:f2:06:01:97:96:79:4d: 09:8a:7d:f2:88:fc:fe:d2:56:99:e9:e6:85:a7:0a: ec:0b:df:94:4e:c2:fa:9c:7d:0b:31:be:b6:28:58: df:29:04:f4:e2:da:18:99:0d:ec:4d:02:1a:c8:52: 8e:f3:22:b1:ad:e2:b6:46:f3:12:cc:86:1a:87:06: 36:64:fd:e9:33:a0:f1:bc:c7:35:c3:19:62:65:51: b2:72:57:13:0a:df:f1:7c:19:0f:ab:26:5a:dd:28: d0:66:ab:d5:ea:9d:a4:03:8d:ea:43:90:65:ae:84: 11:29:92:2c:8c:29:de:a8:47:9a:43:30:12:31:bd: ae:30:c1:33:af:8f:35:8c:95:fc:9a:f9:9f:3c:b5: a0:1b:fa:15:fb:2e:33:9c:06:f0:30:8b:a8:f6:57: 2f:41:0c:4a:30:a2:92:2e:d3:b6:0a:4c:e6:1d:ad: 7a:12:e3:bf:e1:77:3c:80:28:1f:3a:aa:e2:cc:a6: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:12:B2:20:9C:D1:1E:67:CA:E2:81:73:AB:CC:57:C2:87:4F:B7:FD X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:df:f9:c9:3f:f7:98:60:13:6f:c9:27:62:b4:ef:06:17:b0: 23:60:c3:c8:4b:dd:c0:07:17:fc:d7:83:5f:5b:3e:fe:dc:06: ad:ea:c6:e9:24:e5:5f:ad:9d:f4:1a:ec:b3:c3:21:4b:9c:ae: 30:39:5d:69:8d:ad:02:18:c2:80:58:33:07:84:d7:6f:f0:18: b1:69:3c:02:c5:a6:f0:8e:75:8f:46:d9:93:bd:37:bd:d8:a4: bf:26:8c:19:fa:d7:04:66:ac:19:f1:aa:12:95:97:3c:32:cb: b2:c4:72:ef:10:12:19:cd:fd:81:1b:15:67:cc:2e:ca:d1:86: 76:db:75:17:42:6a:ca:3a:df:5e:d2:07:14:99:9c:ba:be:37: 8e:77:7c:2e:11:5f:0f:26:dd:6b:dd:9e:db:d0:26:f9:5c:13: ab:eb:d6:fd:6d:c3:a3:86:7b:b3:67:d9:82:9f:74:7c:2b:d5: 85:52:b9:2d:ec:20:0c:81:f2:d5:9e:4f:23:c2:1e:7b:5e:2a: b3:53:c8:98:2a:b8:75:ac:31:03:44:6c:76:88:34:cc:07:d7: c6:69:61:64:5f:3c:3c:64:aa:96:11:9f:a5:a8:2f:e5:eb:c7: fa:b2:7b:66:a6:5f:a8:78:44:79:12:81:0a:d6:64:6d:98:4e: ac:0e:46:23 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUQodKBjrFHIfeIEJdCbT5grobtiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTAzMjkwMzQzMDFaFw0yNTAzMzAwNDUzMDFaMDMxMTAvBgNV BAMTKENBMTJCMjIwOUNEMTFFNjdDQUUyODE3M0FCQ0M1N0MyODc0RkI3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3raLqffW0NXxmbZdK4wuyIXV QNqTq5Ol+BNxMjz91VuBWmIfJEDz7/19+HDaSTToCA8dv46GGHYnmGhMfxgNESRV 8gYBl5Z5TQmKffKI/P7SVpnp5oWnCuwL35ROwvqcfQsxvrYoWN8pBPTi2hiZDexN AhrIUo7zIrGt4rZG8xLMhhqHBjZk/ekzoPG8xzXDGWJlUbJyVxMK3/F8GQ+rJlrd KNBmq9XqnaQDjepDkGWuhBEpkiyMKd6oR5pDMBIxva4wwTOvjzWMlfya+Z88taAb +hX7LjOcBvAwi6j2Vy9BDEowopIu07YKTOYdrXoS47/hdzyAKB86quLMpg6TAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUyhKyIJzRHmfK4oFzq8xXwodPt/0wHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAm9/5yT/3mGATb8knYrTvBhewI2DDyEvdwAcX /NeDX1s+/twGrerG6STlX62d9Brss8MhS5yuMDldaY2tAhjCgFgzB4TXb/AYsWk8 AsWm8I51j0bZk703vdikvyaMGfrXBGasGfGqEpWXPDLLssRy7xASGc39gRsVZ8wu ytGGdtt1F0JqyjrfXtIHFJmcur43jnd8LhFfDybda92e29Am+VwTq+vW/W3Do4Z7 s2fZgp90fCvVhVK5LewgDIHy1Z5PI8Iee14qs1PImCq4dawxA0Rsdog0zAfXxmlh ZF88PGSqlhGfpagv5evH+rJ7ZqZfqHhEeRKBCtZkbZhOrA5GIw== -----END CERTIFICATE-----Generated at Sun Apr 6 19:13:08 2025 by rpki-client