$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: l1THZYn42jYiqhQ8tv2VhHMG/8LBRZMP2M47PLn7CLM= Subject key identifier: 1A:51:72:08:9F:5D:BE:99:ED:95:EE:D8:81:2E:7A:FA:9C:8B:3E:EB Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 635ABCCB3B995F39A52E15404E00AE16B560FACB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 04B0 Signing time: Mon 20 May 2024 02:10:49 +0000 Manifest this update: Mon 20 May 2024 02:05:49 +0000 Manifest next update: Tue 21 May 2024 03:57:49 +0000 Files and hashes: 1: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: w/v36hhzgF4hIxd8LkOEUAi0PPytolQAooythr+Q3R8=) 2: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: WfSrR5DYs/Gs9Ga24GRRtj2f8TQVcYq+PYVRGksgZTM=) 3: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: pYoUlXrlpDmN79NoJ37q6/uJItachuxXEg/wBWWNsls=) 4: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: nhKW/U2mQE9hiEStWRXIlwCa4HYKtRhd1iwW6bvRww4=) 5: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: Jq9hRehMcgVd7eI/7fDvbCKmok5FYS+UZcW6PeZNgec=) 6: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: uqZdKuttzTAJMpzM0yVhlTDNydzm82wcVNNAX37W0To=) 7: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: hcTTvlwOQ8mEYs87ZpBD+VvsUWR3jQz1lVEDv0L/QyU=) 8: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: 7aQssMoiIk4Hw984W2Sx2jAXRY4bIOCvTDbnkYSmZ0A=) 9: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: LTtnDFSz/myPp9hdqfuiWCnQyszE+NFo5YNN6vgWKjs=) 10: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: mzEbhTO98CfVw2AD0sc5QzB9gbdHkvUdClcNYu7+uPY=) 11: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: BvohWATxMUq15cQWXI9T1mfM7DXZtT2rAfhq+oRSCqQ=) 12: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: +l+LLJ5qv5rG9XpOB5EtnMQqcuLdwEUSxc3WkFstc9c=) 13: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +yToZ7BGOFFxXGul3fg25yXDCi3mC/z+ay0bwq/Pphs=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 03:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5a:bc:cb:3b:99:5f:39:a5:2e:15:40:4e:00:ae:16:b5:60:fa:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: May 20 02:05:49 2024 GMT Not After : May 21 03:57:49 2024 GMT Subject: CN=1A5172089F5DBE99ED95EED8812E7AFA9C8B3EEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d1:30:1d:b9:74:18:9e:e8:2c:e2:4c:2f:3b: 07:e6:81:72:89:aa:5c:37:fd:4a:aa:d0:84:05:a6: 91:da:44:3a:1c:89:e6:36:c2:d1:bf:e9:e9:4a:f9: 8e:27:aa:88:84:68:c7:e9:5d:5c:3f:67:f8:68:2a: 68:80:bf:a8:37:44:02:0a:51:80:8c:9b:11:f8:1b: a5:e7:65:d4:e2:44:60:c6:51:c2:a8:3a:df:1c:8a: fb:83:3f:81:6e:ff:f4:9b:51:a1:0f:60:ef:5a:46: 20:f1:12:24:8b:f2:42:ef:a0:85:45:2e:f1:68:d6: 11:82:e1:cc:da:4c:17:72:ab:62:3c:37:fc:e2:94: aa:41:f9:6f:7a:eb:29:af:a7:d0:f3:ae:fd:d7:26: 3a:2b:4d:7a:f6:d8:84:25:c6:cb:98:0c:07:30:d1: 5a:dc:6a:9c:47:55:d5:9d:92:59:64:9c:0a:8c:45: 90:67:45:f3:68:b0:05:7a:d3:31:cc:bb:73:4a:01: ac:07:f2:2d:c6:95:2b:de:2c:07:63:47:54:49:17: c9:72:f4:32:77:61:9f:4a:e4:6e:db:44:57:50:02: 1a:17:15:a0:6b:92:96:5b:56:bb:e4:41:35:19:af: 02:fe:fc:49:c6:2f:82:ce:00:e3:29:33:5c:a3:8d: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:51:72:08:9F:5D:BE:99:ED:95:EE:D8:81:2E:7A:FA:9C:8B:3E:EB X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5e:d1:71:19:75:d6:84:74:4d:53:e4:39:52:d1:8e:b2:44: 0a:5a:23:0b:ee:ba:7e:5e:84:cd:74:04:fe:52:0d:dd:63:8b: 57:fb:d8:a7:55:bd:c4:9f:a8:51:a0:02:8b:2a:cc:a4:d1:47: 1d:05:49:04:54:6d:9c:65:9c:0c:8a:5c:1a:bf:64:34:95:6e: d7:35:c5:cf:0e:a1:a2:1e:c1:e9:fc:9c:dc:84:e0:e6:48:30: 1a:a4:a6:34:23:ca:4e:92:a1:77:13:ed:48:6e:a2:0d:3b:9a: 3f:60:1c:b0:23:ad:12:3a:55:96:b0:0b:12:f5:76:15:7d:f7: 45:71:47:a3:f9:aa:f8:b4:5e:d2:fa:b2:f8:9a:04:7e:06:a9: 89:e8:c9:48:83:54:d8:bc:bb:00:47:96:54:06:43:d9:90:eb: 10:23:2c:61:51:35:03:88:b7:d0:73:d5:73:0a:68:62:9d:75: c5:53:c2:9c:6c:2e:ce:7c:0a:2b:53:fa:0a:7a:80:c0:e9:2d: 4e:4e:76:6b:a8:a1:15:97:30:b4:22:76:1a:73:38:4e:c6:b6: 5f:db:b3:4c:01:89:98:47:57:83:c7:33:72:fe:52:61:82:db: fc:88:ab:30:f6:bf:70:bc:47:55:e7:df:c8:da:b8:12:4f:26: 41:2a:c8:35 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUY1q8yzuZXzmlLhVATgCuFrVg+sswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI0MDUyMDAyMDU0OVoX DTI0MDUyMTAzNTc0OVowMzExMC8GA1UEAxMoMUE1MTcyMDg5RjVEQkU5OUVEOTVF RUQ4ODEyRTdBRkE5QzhCM0VFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPfRMB25dBie6CziTC87B+aBcomqXDf9SqrQhAWmkdpEOhyJ5jbC0b/p6Ur5 jieqiIRox+ldXD9n+GgqaIC/qDdEAgpRgIybEfgbpedl1OJEYMZRwqg63xyK+4M/ gW7/9JtRoQ9g71pGIPESJIvyQu+ghUUu8WjWEYLhzNpMF3KrYjw3/OKUqkH5b3rr Ka+n0POu/dcmOitNevbYhCXGy5gMBzDRWtxqnEdV1Z2SWWScCoxFkGdF82iwBXrT Mcy7c0oBrAfyLcaVK94sB2NHVEkXyXL0Mndhn0rkbttEV1ACGhcVoGuSlltWu+RB NRmvAv78ScYvgs4A4ykzXKONsZkCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQaUXII n12+me2V7tiBLnr6nIs+6zAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRe0XEZddaEdE1T5DlS0Y6yRApaIwvuun5e hM10BP5SDd1ji1f72KdVvcSfqFGgAosqzKTRRx0FSQRUbZxlnAyKXBq/ZDSVbtc1 xc8OoaIewen8nNyE4OZIMBqkpjQjyk6SoXcT7Uhuog07mj9gHLAjrRI6VZawCxL1 dhV990VxR6P5qvi0XtL6sviaBH4GqYnoyUiDVNi8uwBHllQGQ9mQ6xAjLGFRNQOI t9Bz1XMKaGKddcVTwpxsLs58CitT+gp6gMDpLU5OdmuooRWXMLQidhpzOE7Gtl/b s0wBiZhHV4PHM3L+UmGC2/yIqzD2v3C8R1Xn38jauBJPJkEqyDU= -----END CERTIFICATE-----Generated at Mon May 20 02:42:35 2024 by rpki-client on console-ams.rpki-client.org