$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: ghn9emaZVYP7BH3szM68RfI92ITl6LywiB5/+lORt8c= Subject key identifier: FB:5C:2C:ED:B7:7C:0D:63:01:76:2D:92:91:36:6B:ED:0B:68:C7:2E Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 73FBFE76B6BCB0C8A6198A19B11D6351C6507CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 05E5 Signing time: Sun 19 May 2024 10:22:40 +0000 Manifest this update: Sun 19 May 2024 10:17:40 +0000 Manifest next update: Mon 20 May 2024 12:42:40 +0000 Files and hashes: 1: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: XKR9nPoBsoDoZ2HRBv/aLCKYT0t66kTCTcpp160gUSY=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: 4pffNTKD+/XZ4RUWd3Pe48BQ5kUaJaP42S87uXf5J0w=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: Anxg4kHfUcWGdVLGck3cNYVeHbelOVEvLk0y7b98uJ4=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: F2ejdDo7xdI547FXQtI/gGSrs46yU2D/1GG3tj68oHE=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: B4E63UO53lFGg3uCanMChc7jerLuxlYOqng382b7M3k=) 6: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: nwykWUABK3aPl9d3nXR0L6hMd8ud//blJr+m2LhbNhc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 12:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fb:fe:76:b6:bc:b0:c8:a6:19:8a:19:b1:1d:63:51:c6:50:7c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: May 19 10:17:40 2024 GMT Not After : May 20 12:42:40 2024 GMT Subject: CN=FB5C2CEDB77C0D6301762D9291366BED0B68C72E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:f4:eb:8d:a0:58:82:5b:d7:84:6a:de:0c: b8:5e:b3:a8:bc:2d:89:f2:7d:19:c2:c6:eb:b8:e1: 23:67:7f:66:03:96:00:46:47:64:5b:f7:2b:7a:a7: 73:6f:08:8a:f0:b7:e4:cd:b5:5a:87:79:c1:74:4b: c2:16:75:19:4a:73:39:08:58:be:e1:71:c5:5c:ca: 1a:6f:dd:85:f4:69:d0:fc:6e:a1:b6:e0:f8:97:7d: c0:9c:54:c5:71:e7:4d:ed:f0:ec:ea:2d:e0:a3:4d: e5:60:07:77:21:ae:4e:58:7b:21:1a:ad:e7:39:24: 2d:be:19:ef:9a:bf:d8:fe:cb:5f:e7:55:34:c8:69: 6c:e2:cc:fc:55:82:10:5b:6a:59:39:56:14:54:e5: 46:2b:0e:a1:7f:b4:4d:a3:83:ad:09:0f:91:a9:4c: b1:39:a2:2e:d5:72:d1:8d:00:6b:e3:20:ff:d3:bc: 1c:93:e6:48:6d:8f:77:8b:71:02:ac:ec:65:3f:4c: cd:0a:68:ff:9a:24:10:10:e0:21:44:59:d9:6b:87: 26:54:d1:49:7e:00:34:6f:6d:13:3f:f9:03:5a:7e: ab:f9:11:99:44:1d:4c:65:f2:ed:f5:12:71:b8:3b: 13:5a:31:ff:e2:f0:96:32:1a:6f:ed:f8:fb:ef:de: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5C:2C:ED:B7:7C:0D:63:01:76:2D:92:91:36:6B:ED:0B:68:C7:2E X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:97:a4:c9:5d:e5:59:94:e1:b5:9b:e2:fc:34:17:97:f7:f4: 06:b5:3a:8d:fe:f7:af:1c:a2:03:65:c0:e6:ea:0b:e3:f2:e3: 22:62:1d:82:e2:53:e4:d3:38:1d:39:48:90:1e:cb:de:10:c8: b6:68:d0:67:eb:f4:a8:b1:a5:97:50:8b:97:b2:02:93:97:bb: 19:12:ce:bf:49:fb:42:8c:19:8e:90:df:c6:cc:36:f2:7f:12: 01:1d:34:10:0c:8f:a7:dd:4b:5c:be:88:fa:9b:a2:98:d2:2b: d3:bb:83:e6:4e:f4:47:af:de:ac:11:c4:94:9b:e1:cf:7b:f3: 09:22:34:5c:ec:2a:2b:bd:39:8d:9d:69:78:eb:f3:ac:70:34: 88:69:a3:08:e5:1a:45:df:0c:7c:80:29:28:0c:06:33:83:cf: bd:bd:85:f9:68:4c:53:05:f2:f9:f5:d4:09:2f:67:f0:99:8f: 84:b1:33:9d:ff:ce:02:15:b5:84:d6:44:46:6c:35:ea:44:2b: 72:c8:c8:b8:aa:f7:14:22:12:e6:7e:ba:d5:fd:c4:87:11:01: 22:22:61:a6:c6:8c:27:5a:fb:dc:4d:99:bc:76:c8:b7:9c:0b: 95:91:61:05:fa:9f:1e:1a:b4:2b:0f:cf:34:e7:87:c3:ce:67: 12:d9:a4:be -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUc/v+dra8sMimGYoZsR1jUcZQfK8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI0MDUxOTEwMTc0MFoX DTI0MDUyMDEyNDI0MFowMzExMC8GA1UEAxMoRkI1QzJDRURCNzdDMEQ2MzAxNzYy RDkyOTEzNjZCRUQwQjY4QzcyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUu9OuNoFiCW9eEat4MuF6zqLwtifJ9GcLG67jhI2d/ZgOWAEZHZFv3K3qn c28IivC35M21Wod5wXRLwhZ1GUpzOQhYvuFxxVzKGm/dhfRp0Pxuobbg+Jd9wJxU xXHnTe3w7Oot4KNN5WAHdyGuTlh7IRqt5zkkLb4Z75q/2P7LX+dVNMhpbOLM/FWC EFtqWTlWFFTlRisOoX+0TaODrQkPkalMsTmiLtVy0Y0Aa+Mg/9O8HJPmSG2Pd4tx AqzsZT9MzQpo/5okEBDgIURZ2WuHJlTRSX4ANG9tEz/5A1p+q/kRmUQdTGXy7fUS cbg7E1ox/+LwljIab+34++/e0/sCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT7XCzt t3wNYwF2LZKRNmvtC2jHLjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+XpMld5VmU4bWb4vw0F5f39Aa1Oo3+968c ogNlwObqC+Py4yJiHYLiU+TTOB05SJAey94QyLZo0Gfr9KixpZdQi5eyApOXuxkS zr9J+0KMGY6Q38bMNvJ/EgEdNBAMj6fdS1y+iPqbopjSK9O7g+ZO9Eev3qwRxJSb 4c978wkiNFzsKiu9OY2daXjr86xwNIhpowjlGkXfDHyAKSgMBjODz729hfloTFMF 8vn11AkvZ/CZj4SxM53/zgIVtYTWREZsNepEK3LIyLiq9xQiEuZ+utX9xIcRASIi YabGjCda+9xNmbx2yLecC5WRYQX6nx4atCsPzzTnh8POZxLZpL4= -----END CERTIFICATE-----Generated at Sun May 19 10:59:13 2024 by rpki-client on console-fra.rpki-client.org