$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: C7N/1+L1SNRVVCThqOAkqFDs3o55aznHhs0dsg2Lz5Q= Subject key identifier: FB:D3:B6:2D:54:27:33:1E:22:56:1F:1D:D9:D7:56:D6:7F:6E:3D:4B Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 7EFFB23C83EDAE85EC4B7378AC94504ED49B7858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 04D0 Signing time: Sat 04 May 2024 02:46:29 +0000 Manifest this update: Sat 04 May 2024 02:41:29 +0000 Manifest next update: Sun 05 May 2024 06:44:29 +0000 Files and hashes: 1: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: 39vslnGpRUqWixVX58xNulztMVEk9ux6GJsMXqfcyAo=) 2: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: l6toJ/5u+kekimF+wp5SK8xJpPGfw4YUGId63hwYiVo=) 3: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: 89wx/aMrljDG6BExTIRocIeCScS1wwm0mZXycDLm5ec=) 4: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: Orhkd5BJrOYHH04ItUP52PTFKFnHDMsVnu+OAkIgfd0=) 5: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: ZCnR11qTxj3RYRHIHQJDvvYbIfEcJ2WzK66prby+EXk=) 6: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: RYou/+EhCBE95tEi/MsaTQgt0n2IT60HuvzCvZEk+54=) 7: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: t/IvExZPisuCT40I66rzBh3x410A0T8+JyYBhEtPSmQ=) 8: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: fqCkQ1X57BQQIQhZvjOGgtLEka7dhGZuUWNiEO6MzSA=) 9: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: ncLoevwvKvodUNiAaicIXnW/zgXdJWnC1DW1H1nOvqo=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 06:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ff:b2:3c:83:ed:ae:85:ec:4b:73:78:ac:94:50:4e:d4:9b:78:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: May 4 02:41:29 2024 GMT Not After : May 5 06:44:29 2024 GMT Subject: CN=FBD3B62D5427331E22561F1DD9D756D67F6E3D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:70:fb:8d:57:52:93:e0:ac:34:fe:89:63: 05:99:83:35:12:c1:02:61:3c:6a:54:bc:5c:2c:01: f7:6e:64:3e:92:f7:6f:40:63:bc:85:86:e3:8c:fa: 06:66:71:4a:a7:0d:74:7f:87:da:c5:f6:f3:0c:8f: cb:35:c3:6b:26:41:4a:4c:3c:02:94:87:0e:09:8a: 54:6a:da:18:7b:60:fe:5d:a6:58:ee:c3:9a:69:88: 6d:8e:13:25:1b:a5:be:2e:10:30:d2:e6:64:9e:c6: d7:54:55:80:b2:74:1f:7e:07:a0:c3:e6:b3:61:9f: 86:6f:ec:b6:6f:18:b6:ee:1e:6b:32:30:19:b5:6b: 57:d0:e1:2c:65:bd:bf:c0:14:54:b8:b1:95:72:25: 81:f1:98:9d:ad:77:e1:9f:86:66:5b:48:d4:9c:0b: 44:f3:b5:9f:ea:9c:ba:3d:bf:31:84:84:d3:82:d7: a8:bf:4f:c8:45:78:33:20:c0:38:42:95:83:31:ff: e5:90:cd:0b:6c:ae:1e:e2:d2:38:a1:18:91:84:31: 6f:3b:f6:2b:01:b0:1b:54:a8:ef:14:9e:7c:63:9c: f6:60:91:b9:a4:20:8a:7d:81:5e:7d:f3:6d:28:5d: 23:c8:3e:e1:6c:54:ec:ec:e8:13:fd:34:33:9b:d8: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:B6:2D:54:27:33:1E:22:56:1F:1D:D9:D7:56:D6:7F:6E:3D:4B X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c1:4d:41:a6:74:ed:01:db:55:27:35:c0:fe:ac:48:20:be: c7:53:b7:76:35:c2:e9:d9:cc:ee:4d:91:70:f9:cf:4d:63:f6: a5:f5:de:9d:8f:93:3b:9c:e5:a9:ee:a6:34:86:e4:a8:0f:05: 05:4f:6a:f2:4d:dd:85:a9:a5:f8:8d:bb:a6:be:a9:87:97:3a: 8b:7b:a2:67:56:63:68:b2:9c:76:01:91:b9:5e:a7:ec:46:b4: 65:86:d8:0e:ee:6a:b8:49:5b:63:f0:68:61:ad:c6:c6:94:bc: 69:cc:d3:f9:0b:31:ad:dd:6d:a8:a2:04:53:18:47:1e:3c:00: 0a:b1:6c:38:05:a5:0f:4e:af:bc:be:02:b9:a9:75:0c:9b:04: 3f:dc:fd:42:a0:e5:3d:2e:4f:50:ca:2b:31:ad:3d:b6:23:b8: 2c:2e:8c:bf:05:9a:83:54:cc:c0:4c:b1:ed:17:ff:ae:33:13: c6:88:93:53:fa:71:e4:85:17:9f:6b:cb:6a:71:33:dc:62:c4: ec:b7:f0:4b:57:1d:eb:51:bc:53:8f:a7:6b:bc:53:c8:21:17: bf:46:ea:44:d1:75:42:12:48:96:77:2b:db:b9:51:d5:bc:3d: 0b:99:39:44:9c:aa:cc:65:8f:09:9f:33:d4:6b:e0:b8:a0:93: 1a:59:09:5a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUfv+yPIPtroXsS3N4rJRQTtSbeFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI0MDUwNDAyNDEyOVoX DTI0MDUwNTA2NDQyOVowMzExMC8GA1UEAxMoRkJEM0I2MkQ1NDI3MzMxRTIyNTYx RjFERDlENzU2RDY3RjZFM0Q0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaNcPuNV1KT4Kw0/oljBZmDNRLBAmE8alS8XCwB925kPpL3b0BjvIWG44z6 BmZxSqcNdH+H2sX28wyPyzXDayZBSkw8ApSHDgmKVGraGHtg/l2mWO7DmmmIbY4T JRulvi4QMNLmZJ7G11RVgLJ0H34HoMPms2Gfhm/stm8Ytu4eazIwGbVrV9DhLGW9 v8AUVLixlXIlgfGYna134Z+GZltI1JwLRPO1n+qcuj2/MYSE04LXqL9PyEV4MyDA OEKVgzH/5ZDNC2yuHuLSOKEYkYQxbzv2KwGwG1So7xSefGOc9mCRuaQgin2BXn3z bShdI8g+4WxU7OzoE/00M5vYewMCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBT707Yt VCczHiJWHx3Z11bWf249SzAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAPsFNQaZ07QHbVSc1wP6sSCC+x1O3djXC6dnM7k2R cPnPTWP2pfXenY+TO5zlqe6mNIbkqA8FBU9q8k3dhaml+I27pr6ph5c6i3uiZ1Zj aLKcdgGRuV6n7Ea0ZYbYDu5quElbY/BoYa3GxpS8aczT+Qsxrd1tqKIEUxhHHjwA CrFsOAWlD06vvL4Cual1DJsEP9z9QqDlPS5PUMorMa09tiO4LC6MvwWag1TMwEyx 7Rf/rjMTxoiTU/px5IUXn2vLanEz3GLE7LfwS1cd61G8U4+na7xTyCEXv0bqRNF1 QhJIlncr27lR1bw9C5k5RJyqzGWPCZ8z1GvguKCTGlkJWg== -----END CERTIFICATE-----Generated at Sat May 4 03:57:19 2024 by rpki-client on console-fra.rpki-client.org