$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: K8ysD09r7w+agPkF9MQ4WChDl7vqKqkYCRcapPJ/ZEE= Subject key identifier: DC:99:5B:80:E4:67:42:A1:96:75:DC:CB:2C:7B:55:A8:58:57:03:8C Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 3D7289CDBDF4CC0788DF2DCE4749730DB3544954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 0684 Signing time: Sat 05 Apr 2025 23:10:46 +0000 Manifest this update: Sat 05 Apr 2025 23:05:46 +0000 Manifest next update: Mon 07 Apr 2025 00:24:46 +0000 Files and hashes: 1: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: vQUCPoRr3+lo5nvD0KvrM8PVhcp/pLPT9iSPOFYaz4Q=) 2: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: gleXammGNco3AiF4159jPajnO5VNN8RX+h5bhpaHj2c=) 3: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: Ajs11kbN11P2XWfoIJiRn6ZOdr7R8IeCxJs9fIcXO2M=) 4: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: VCiQgGJC0woztKedBbZdy+byeG2dvfPseQNFg+NN9aw=) 5: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: hZi6xVGFuBm2cE8kEk7yPC6zUVltxG7VPQHnO46XkB8=) 6: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: DN/E6aOFiV8KoFntSlnkk78fDXrIalkTpGLDVfdtSoM=) 7: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: f6TUhFqS3isV+/cNk8PgUfCkyR1D652ScYlagjbFUVg=) 8: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: JFgikoosW77rCCGiBkowQ97xtUQuU8MrNrAShHYoknM=) 9: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: YBcj0Y7Hb7dgFTi+rZqUgqhjt4rx48fgaI0O88QVy6s=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 00:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:72:89:cd:bd:f4:cc:07:88:df:2d:ce:47:49:73:0d:b3:54:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000 Validity Not Before: Apr 5 23:05:46 2025 GMT Not After : Apr 7 00:24:46 2025 GMT Subject: CN=DC995B80E46742A19675DCCB2C7B55A85857038C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c5:74:14:fc:4c:fa:11:11:e3:aa:88:91:73: 1d:6c:48:15:4b:66:7f:c2:b2:41:08:57:4f:f7:2d: f6:53:bd:0e:d7:4e:6d:29:32:dd:e2:69:65:bc:9c: e9:c9:8e:8b:a7:bb:82:06:0a:c0:44:ee:80:f2:68: 0f:83:3c:af:fb:94:aa:1f:b0:cd:da:17:7b:8f:fe: d5:f3:74:d2:0a:9a:20:3a:14:4b:33:6a:4d:3e:6e: fb:d0:22:a4:e0:12:40:8d:df:13:95:0b:82:78:08: e7:6c:14:37:f6:1c:af:35:d0:9c:7d:3f:fb:d9:0d: b1:0e:75:53:0f:87:58:43:72:64:2f:42:e0:e9:37: 73:bd:b5:64:b5:c2:9b:5a:87:9b:c9:da:2a:f0:76: 89:3a:90:c1:5f:b5:69:c2:93:d9:a0:ad:c2:8d:86: f4:6c:de:b9:75:74:eb:8d:25:ff:c4:42:03:02:9c: 33:f0:d4:c8:65:5a:e0:d2:ac:a0:2f:18:a8:00:1f: 23:1c:c0:ef:80:37:98:6b:90:9b:b4:49:8a:c4:08: f3:fe:a5:d3:cc:67:1a:f2:a9:ef:5b:72:d8:1d:1e: 99:f7:0b:84:62:60:8d:9f:50:33:b0:d3:63:20:71: 7e:23:2f:81:da:ba:56:8c:79:ff:53:f0:6c:aa:dd: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:99:5B:80:E4:67:42:A1:96:75:DC:CB:2C:7B:55:A8:58:57:03:8C X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:37:2d:1d:ba:dc:6e:8e:ee:c0:e7:98:b5:52:2f:90:03:34: 05:84:d4:98:3a:0e:70:5c:da:6a:9e:de:29:27:d8:8c:13:75: d2:49:4e:73:d4:7f:e8:7e:71:6c:79:21:a3:6e:15:20:78:23: c8:c2:c2:44:f3:ff:f4:96:72:79:c1:63:fd:7e:ee:fd:ec:d7: 2c:ee:24:df:b0:ed:53:62:7c:22:d1:71:16:50:72:86:19:7c: 96:de:7d:d7:f0:68:d5:54:c3:83:58:c6:f4:2a:94:f5:e2:86: 83:05:7d:29:3b:93:d3:d2:a2:f2:1f:4c:17:bf:be:72:8c:6a: 6d:3e:f3:89:3c:66:e5:11:b1:05:b3:2c:fb:87:0b:f8:8f:d1: b4:ee:5b:39:4f:a9:7f:b7:55:6a:36:d2:c9:f6:7a:06:bf:7a: a3:5a:54:5d:5b:d3:48:6b:2d:23:a1:a3:c6:8e:f3:f5:9c:ff: d1:0a:89:ec:54:a2:08:e1:ee:15:db:90:e4:2d:d2:7a:bf:3a: cd:58:d4:61:c2:58:41:e8:3a:6b:26:c9:68:d6:4e:e5:93:a4: 38:d4:67:e6:ad:03:2c:21:3e:50:9b:30:f0:ad:0e:4f:19:32: c8:ef:fb:08:c8:c6:02:e5:c6:a1:4c:99:b9:b7:50:a8:f8:6d: c3:ab:22:05 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUPXKJzb30zAeI3y3OR0lzDbNUSVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDQwNTIzMDU0NloX DTI1MDQwNzAwMjQ0NlowMzExMC8GA1UEAxMoREM5OTVCODBFNDY3NDJBMTk2NzVE Q0NCMkM3QjU1QTg1ODU3MDM4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODFdBT8TPoREeOqiJFzHWxIFUtmf8KyQQhXT/ct9lO9DtdObSky3eJpZbyc 6cmOi6e7ggYKwETugPJoD4M8r/uUqh+wzdoXe4/+1fN00gqaIDoUSzNqTT5u+9Ai pOASQI3fE5ULgngI52wUN/YcrzXQnH0/+9kNsQ51Uw+HWENyZC9C4Ok3c721ZLXC m1qHm8naKvB2iTqQwV+1acKT2aCtwo2G9GzeuXV0640l/8RCAwKcM/DUyGVa4NKs oC8YqAAfIxzA74A3mGuQm7RJisQI8/6l08xnGvKp71ty2B0emfcLhGJgjZ9QM7DT YyBxfiMvgdq6Vox5/1PwbKrd/ykCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBTcmVuA 5GdCoZZ13Msse1WoWFcDjDAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAxTctHbrcbo7uwOeYtVIvkAM0BYTUmDoOcFzaap7e KSfYjBN10klOc9R/6H5xbHkho24VIHgjyMLCRPP/9JZyecFj/X7u/ezXLO4k37Dt U2J8ItFxFlByhhl8lt591/Bo1VTDg1jG9CqU9eKGgwV9KTuT09Ki8h9MF7++coxq bT7ziTxm5RGxBbMs+4cL+I/RtO5bOU+pf7dVajbSyfZ6Br96o1pUXVvTSGstI6Gj xo7z9Zz/0QqJ7FSiCOHuFduQ5C3Ser86zVjUYcJYQeg6aybJaNZO5ZOkONRn5q0D LCE+UJsw8K0OTxkyyO/7CMjGAuXGoUyZubdQqPhtw6siBQ== -----END CERTIFICATE-----Generated at Sun Apr 6 10:57:40 2025 by rpki-client