$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: M68PXEIxAod/jM1SyYyd75OPPHVeIHtkvZgqc06pxjQ= Subject key identifier: 29:68:F2:AB:C8:18:B9:14:93:33:B6:DD:8D:E4:87:6B:8A:4D:38:21 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 7E7535A2F37000C649309B268129E3F166C4966A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 07A8 Signing time: Mon 14 Apr 2025 08:00:33 +0000 Manifest this update: Mon 14 Apr 2025 07:55:33 +0000 Manifest next update: Tue 15 Apr 2025 11:15:33 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) 5: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: Yj0uk2Ghh5B09igRsJrOKxC2Wv4dTT3X2n/cHbYd5Cc=) 6: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 11:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:75:35:a2:f3:70:00:c6:49:30:9b:26:81:29:e3:f1:66:c4:96:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Apr 14 07:55:33 2025 GMT Not After : Apr 15 11:15:33 2025 GMT Subject: CN=2968F2ABC818B9149333B6DD8DE4876B8A4D3821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:7c:f4:c8:4b:d9:d6:08:a4:6b:0a:9a:cb: da:95:be:a3:ba:a1:98:7f:ad:4a:80:6b:5c:2f:b5: 6a:19:b1:10:05:9b:b4:99:79:c4:dd:a7:43:1f:59: 24:d8:4c:b0:b6:16:e1:81:d6:85:97:63:fc:17:53: 7b:9a:c9:ec:0a:0a:34:be:2d:42:7d:7c:b8:17:a5: f1:01:eb:ca:2b:a2:bf:90:65:40:b9:0b:a4:d7:1c: b0:c9:01:f8:d0:e8:a4:37:a0:ed:6e:1f:2f:dc:e1: 00:21:79:5c:da:26:f2:7e:b0:e7:38:e3:d0:26:28: c7:40:e3:ed:5e:2d:79:4b:35:06:27:0c:e7:88:76: a0:96:0a:15:e3:ac:85:2f:55:6f:7f:38:b9:0f:64: a4:bd:9c:30:09:df:a9:c9:b3:39:75:d8:47:6b:0d: f7:4f:d5:06:0a:1c:f5:c0:8c:c1:22:a5:2f:19:21: 4c:b6:11:76:0c:39:3d:7a:9d:3e:3c:1a:b8:ae:f5: 10:28:81:9a:83:7c:a6:38:69:b7:ea:c3:5f:05:dc: f1:8f:ad:38:2f:90:ff:0a:d8:68:db:24:f4:03:c0: 3c:8a:2b:11:b7:be:5d:70:90:d5:7a:60:8a:5a:9b: 7e:17:6f:01:38:e4:57:6f:18:2d:10:80:5f:57:ca: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:68:F2:AB:C8:18:B9:14:93:33:B6:DD:8D:E4:87:6B:8A:4D:38:21 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:84:f6:8f:f5:3f:7e:fa:59:c4:ec:64:60:32:84:66:78:04: 83:18:42:5d:04:32:09:84:e7:33:1a:91:cf:4e:94:b4:ef:aa: 9f:1a:c0:f5:4b:a0:73:f3:64:44:2c:c2:03:6d:6b:04:1c:da: f1:9d:91:a7:3b:3d:0e:71:37:a4:12:07:4f:3c:94:5f:89:12: 80:af:76:4c:de:44:fb:01:88:74:01:a8:d3:c0:2a:60:1f:71: b2:89:f4:b0:79:bb:ad:07:bd:7e:17:1e:35:b5:ee:db:36:ab: 32:1f:26:49:c0:90:b8:76:d4:83:47:f1:37:13:61:df:81:91: 00:42:4a:db:03:7c:a4:f7:c3:2f:1d:35:84:dc:61:09:62:54: 2e:cc:4d:74:98:73:b6:ac:d2:f8:88:14:d7:74:2d:49:90:4f: 79:24:73:c7:74:3f:aa:c9:58:09:b5:7e:2f:41:cf:a6:8b:c4: 79:50:80:90:9b:61:4e:9b:19:a1:fc:27:3c:c2:64:cb:b4:6a: ba:65:1e:4e:ef:9a:71:48:e1:b2:36:f5:f2:f4:ef:7f:04:71: 51:f1:a5:b1:e4:52:52:e3:a0:10:f8:25:8d:79:31:54:34:85: 7a:c0:c5:54:89:f9:53:b2:06:2d:81:c4:81:01:71:1d:4e:aa: f2:07:f6:40 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUfnU1ovNwAMZJMJsmgSnj8WbElmowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDQxNDA3NTUzM1oX DTI1MDQxNTExMTUzM1owMzExMC8GA1UEAxMoMjk2OEYyQUJDODE4QjkxNDkzMzNC NkREOERFNDg3NkI4QTREMzgyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKh3fPTIS9nWCKRrCprL2pW+o7qhmH+tSoBrXC+1ahmxEAWbtJl5xN2nQx9Z JNhMsLYW4YHWhZdj/BdTe5rJ7AoKNL4tQn18uBel8QHryiuiv5BlQLkLpNccsMkB +NDopDeg7W4fL9zhACF5XNom8n6w5zjj0CYox0Dj7V4teUs1BicM54h2oJYKFeOs hS9Vb384uQ9kpL2cMAnfqcmzOXXYR2sN90/VBgoc9cCMwSKlLxkhTLYRdgw5PXqd PjwauK71ECiBmoN8pjhpt+rDXwXc8Y+tOC+Q/wrYaNsk9APAPIorEbe+XXCQ1Xpg ilqbfhdvATjkV28YLRCAX1fKjCMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQpaPKr yBi5FJMztt2N5Idrik04ITAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWE9o/1P376WcTsZGAyhGZ4BIMYQl0EMgmE 5zMakc9OlLTvqp8awPVLoHPzZEQswgNtawQc2vGdkac7PQ5xN6QSB088lF+JEoCv dkzeRPsBiHQBqNPAKmAfcbKJ9LB5u60HvX4XHjW17ts2qzIfJknAkLh21INH8TcT Yd+BkQBCStsDfKT3wy8dNYTcYQliVC7MTXSYc7as0viIFNd0LUmQT3kkc8d0P6rJ WAm1fi9Bz6aLxHlQgJCbYU6bGaH8JzzCZMu0arplHk7vmnFI4bI29fL0738EcVHx pbHkUlLjoBD4JY15MVQ0hXrAxVSJ+VOyBi2BxIEBcR1OqvIH9kA= -----END CERTIFICATE-----Generated at Mon Apr 14 10:37:40 2025 by rpki-client