$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: 3nrB0RAfuN7t4vhzsZvn0uuW1aD7HKGGvpQckY9Xdbk= Subject key identifier: 70:2C:63:32:A7:20:D6:A3:69:7C:1A:5C:2A:6A:BE:F4:E5:FF:98:C2 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 3B5ADFB4910308CB6220938FE2764E0BEFE094B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 0897 Signing time: Fri 01 May 2026 12:33:48 +0000 Manifest this update: Fri 01 May 2026 12:28:48 +0000 Manifest next update: Sat 02 May 2026 12:38:48 +0000 Files and hashes: 1: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=) 2: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: jJv5C8cdQcwYJ8GVofimSRERFMCyDjYPWoTEuV7Inyw=) 3: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=) 4: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=) 5: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=) 6: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=) 7: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=) 8: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=) 9: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=) 10: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=) 11: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=) 12: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=) 13: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 May 2026 12:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5a:df:b4:91:03:08:cb:62:20:93:8f:e2:76:4e:0b:ef:e0:94:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: May 1 12:28:48 2026 GMT Not After : May 2 12:38:48 2026 GMT Subject: CN=702C6332A720D6A3697C1A5C2A6ABEF4E5FF98C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:c8:ec:09:d8:e7:8b:f4:b2:06:3f:97:39: 12:74:a5:04:ad:64:d8:86:a9:c4:a7:fc:f3:57:f2: 11:43:a3:e4:29:58:f3:81:9f:07:6a:6d:c9:68:17: df:b0:b4:61:5c:99:99:aa:2b:b2:b0:e0:a2:f1:6e: 5f:e7:7f:7d:d4:8c:76:c1:31:38:cf:2f:78:59:69: 8f:a8:82:55:b3:65:66:87:7d:12:0c:6d:f7:f0:bc: e0:bd:bd:bb:58:d2:36:b0:79:2c:ec:20:fb:7c:77: 8a:49:e2:7d:c9:f2:a2:1a:5b:27:66:2d:71:fc:1b: 2a:b9:44:de:86:64:f5:5f:b8:f8:6c:f6:ba:09:18: 59:e1:db:68:c3:eb:ab:b3:03:07:f4:e0:c9:0c:96: ac:6a:e5:42:82:48:a6:88:88:02:12:31:d7:c2:fe: c4:f0:82:40:25:a3:34:f9:e8:ee:6a:2b:74:e6:28: 72:d1:4c:56:c7:be:fd:6f:5b:86:e6:ce:6e:8f:e2: e8:45:d2:69:22:dd:20:27:35:59:77:6c:f8:9c:6c: 5e:0c:b0:ec:cf:79:5c:33:00:28:6a:1f:dd:c5:fb: 56:10:5e:97:42:68:3d:f4:b3:87:5b:6e:00:17:6a: 85:5b:61:10:b0:7f:1c:a6:55:38:1c:1f:f9:aa:e2: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2C:63:32:A7:20:D6:A3:69:7C:1A:5C:2A:6A:BE:F4:E5:FF:98:C2 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2f:83:68:c7:ba:9a:32:c3:e3:13:ad:65:1b:bb:e7:18:ca: 3d:52:e2:fd:f6:a9:a4:3b:00:b3:07:87:b5:7d:57:38:15:51: 6f:bf:fd:a5:70:92:04:bb:f4:66:65:0d:07:16:04:f1:db:92: 28:21:7a:7f:96:8d:00:bc:fb:66:bd:11:42:f6:89:95:c6:c0: e4:80:56:56:b1:f4:bc:e8:76:65:a4:f3:9a:f4:cf:39:bb:35: 5c:e4:2d:b4:c3:f1:41:e4:a6:8e:d7:79:fe:e6:b0:70:9b:dc: 6a:c5:b6:c8:97:c0:f0:dd:f5:1a:91:d5:ff:82:6c:e0:c3:5b: 5f:52:0a:79:64:6c:76:e0:74:aa:01:18:ca:c2:4c:ac:ad:2f: b3:6c:02:7b:5a:26:68:5b:10:7b:d4:b9:d5:ad:bf:e4:ad:c4: 2f:cb:c2:66:8b:fa:66:b3:15:9c:e4:53:36:bd:96:b5:e2:62: 14:63:13:bc:96:36:c9:d1:8f:cc:aa:78:8a:c4:62:7c:10:00: c0:65:8c:14:cc:bb:e3:98:de:2b:a4:6c:6b:65:5c:a1:85:aa: 76:2f:78:ba:3f:22:50:3a:10:0d:a3:a7:23:b4:89:54:ba:7e: 1b:2d:c3:14:57:72:75:10:9a:35:52:a8:ad:0f:39:fd:96:fa: 39:ed:61:ef -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUO1rftJEDCMtiIJOP4nZOC+/glLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI2MDUwMTEyMjg0OFoX DTI2MDUwMjEyMzg0OFowMzExMC8GA1UEAxMoNzAyQzYzMzJBNzIwRDZBMzY5N0Mx QTVDMkE2QUJFRjRFNUZGOThDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3tyOwJ2OeL9LIGP5c5EnSlBK1k2IapxKf881fyEUOj5ClY84GfB2ptyWgX 37C0YVyZmaorsrDgovFuX+d/fdSMdsExOM8veFlpj6iCVbNlZod9Egxt9/C84L29 u1jSNrB5LOwg+3x3iknifcnyohpbJ2YtcfwbKrlE3oZk9V+4+Gz2ugkYWeHbaMPr q7MDB/TgyQyWrGrlQoJIpoiIAhIx18L+xPCCQCWjNPno7mordOYoctFMVse+/W9b hubObo/i6EXSaSLdICc1WXds+JxsXgyw7M95XDMAKGof3cX7VhBel0JoPfSzh1tu ABdqhVthELB/HKZVOBwf+ariXx8CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBRwLGMy pyDWo2l8Glwqar705f+YwjAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAjS+DaMe6mjLD4xOtZRu75xjKPVLi/fappDsAsweH tX1XOBVRb7/9pXCSBLv0ZmUNBxYE8duSKCF6f5aNALz7Zr0RQvaJlcbA5IBWVrH0 vOh2ZaTzmvTPObs1XOQttMPxQeSmjtd5/uawcJvcasW2yJfA8N31GpHV/4Js4MNb X1IKeWRsduB0qgEYysJMrK0vs2wCe1omaFsQe9S51a2/5K3EL8vCZov6ZrMVnORT Nr2WteJiFGMTvJY2ydGPzKp4isRifBAAwGWMFMy745jeK6Rsa2VcoYWqdi94uj8i UDoQDaOnI7SJVLp+Gy3DFFdydRCaNVKorQ85/Zb6Oe1h7w== -----END CERTIFICATE-----Generated at Sat May 2 01:26:22 2026 by rpki-client