$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: EUkv8OoJEaNIfmOMdsh3Zj5941C5qCw35x5m41W5nNw= Subject key identifier: EC:2D:E1:A6:CE:23:25:2B:B7:7B:B5:4D:99:CE:1E:AA:7F:62:38:BC Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 144C1B856FE09C74D6CE798B593763748E3F6A7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 082C Signing time: Sun 20 Jul 2025 23:39:59 +0000 Manifest this update: Sun 20 Jul 2025 23:34:59 +0000 Manifest next update: Tue 22 Jul 2025 01:54:59 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 5: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: ZINlfNsnXnlk4ikSBLlGU8icX52q7K199y+eNi5yVCA=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 01:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4c:1b:85:6f:e0:9c:74:d6:ce:79:8b:59:37:63:74:8e:3f:6a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jul 20 23:34:59 2025 GMT Not After : Jul 22 01:54:59 2025 GMT Subject: CN=EC2DE1A6CE23252BB77BB54D99CE1EAA7F6238BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6b:b1:1f:83:09:b0:2e:97:d7:ec:42:76:07: e1:92:9d:89:a6:f8:1c:09:62:9e:8e:25:b4:51:f4: bb:4e:62:98:28:42:31:17:93:f1:fa:f0:74:0c:ee: 7b:9c:b9:89:b3:95:3d:ca:c1:4a:7f:38:f2:02:f2: d9:ae:35:35:4c:6d:16:08:d5:7b:7a:f9:2d:36:11: fb:5c:d8:6c:40:ff:61:f6:f0:c7:99:f3:f4:58:ea: 01:67:d8:a3:3d:cf:43:a1:e4:45:38:48:44:be:40: 78:13:48:c8:e2:f7:91:c9:35:07:bc:ab:50:1f:b9: 77:c4:59:c3:d2:4f:fd:7e:19:59:60:21:1a:d5:2a: 44:6d:59:bf:55:7f:15:e3:07:4a:0b:bd:9b:be:9c: be:38:2d:c0:87:40:67:25:13:7c:ab:7d:1e:67:f7: 78:37:71:78:6c:46:7f:51:c9:21:91:b8:b5:22:5e: 1e:b9:11:58:58:86:bc:dc:43:5f:46:a4:df:84:ca: 7a:07:14:68:52:e8:24:c0:c2:14:f0:3c:f3:ac:4f: c1:77:28:4f:9a:ea:54:dc:4d:c8:69:e0:43:d0:cd: c7:3b:e2:da:b0:12:de:13:d0:18:a7:95:e1:c5:bb: 0b:1e:f6:ee:c0:d4:39:c0:f2:79:3f:6b:01:5a:5a: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2D:E1:A6:CE:23:25:2B:B7:7B:B5:4D:99:CE:1E:AA:7F:62:38:BC X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:fc:4a:f5:66:5b:79:75:a6:90:45:7a:1f:7a:30:98:32:e8: c4:d8:da:e5:ec:da:70:39:1a:1e:0d:b9:e9:f6:0c:08:7a:14: 5c:ed:f6:61:ac:b7:61:eb:4f:bc:08:df:30:be:d9:ef:ad:ee: 62:7d:d5:67:9e:7a:ff:50:65:79:5a:00:3c:5a:b1:d3:60:08: 21:6b:22:e9:aa:28:17:60:54:79:8d:41:e1:1b:87:6c:0d:85: de:c1:e1:72:73:99:25:e9:84:71:51:6f:9a:a1:65:a8:30:c1: 48:53:76:e5:5f:e2:2a:f3:de:3d:08:fa:56:11:99:07:1c:3b: f7:15:a1:6f:c4:6f:fc:63:ae:49:29:38:eb:32:31:49:ae:38: d3:28:c5:ba:2b:72:09:f0:d5:32:14:01:61:c0:9f:2a:bd:ee: 30:7e:60:c2:fb:6a:13:32:7b:fa:c7:f9:79:af:11:65:c9:d5: 86:3a:42:02:fa:fa:52:1b:53:fc:9a:6e:1c:a5:74:7d:81:d5: 18:66:bb:8b:6c:c7:93:01:6e:68:67:77:2c:dd:8f:dd:8a:45: 19:2a:f4:96:79:2a:4e:66:80:1a:d7:ba:69:a2:70:c1:00:a9: 81:6f:9f:b2:ed:c5:d6:74:a3:bb:35:8f:81:65:8d:fa:bc:05: ff:cf:c9:35 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUFEwbhW/gnHTWznmLWTdjdI4/an4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDcyMDIzMzQ1OVoX DTI1MDcyMjAxNTQ1OVowMzExMC8GA1UEAxMoRUMyREUxQTZDRTIzMjUyQkI3N0JC NTREOTlDRTFFQUE3RjYyMzhCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5rsR+DCbAul9fsQnYH4ZKdiab4HAlino4ltFH0u05imChCMReT8frwdAzu e5y5ibOVPcrBSn848gLy2a41NUxtFgjVe3r5LTYR+1zYbED/Yfbwx5nz9FjqAWfY oz3PQ6HkRThIRL5AeBNIyOL3kck1B7yrUB+5d8RZw9JP/X4ZWWAhGtUqRG1Zv1V/ FeMHSgu9m76cvjgtwIdAZyUTfKt9Hmf3eDdxeGxGf1HJIZG4tSJeHrkRWFiGvNxD X0ak34TKegcUaFLoJMDCFPA886xPwXcoT5rqVNxNyGngQ9DNxzvi2rAS3hPQGKeV 4cW7Cx727sDUOcDyeT9rAVpaDpECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTsLeGm ziMlK7d7tU2Zzh6qf2I4vDAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALH8SvVmW3l1ppBFeh96MJgy6MTY2uXs2nA5 Gh4Nuen2DAh6FFzt9mGst2HrT7wI3zC+2e+t7mJ91Weeev9QZXlaADxasdNgCCFr IumqKBdgVHmNQeEbh2wNhd7B4XJzmSXphHFRb5qhZagwwUhTduVf4irz3j0I+lYR mQccO/cVoW/Eb/xjrkkpOOsyMUmuONMoxborcgnw1TIUAWHAnyq97jB+YML7ahMy e/rH+XmvEWXJ1YY6QgL6+lIbU/yabhyldH2B1Rhmu4tsx5MBbmhndyzdj92KRRkq 9JZ5Kk5mgBrXummicMEAqYFvn7LtxdZ0o7s1j4Fljfq8Bf/PyTU= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:44 2025 by rpki-client