$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json) Hash identifier: OHMIF8V1PW1oJpNcoKUDgwvA8aaPFGHP2IHY4Z935EE= Subject key identifier: AD:2F:4F:B0:35:A3:70:D1:82:C9:20:3E:2B:9B:10:57:DB:C4:B5:FA Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 6EB155B9A7439780A9246AADB7ED010A233C4DF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft Manifest number: 07AC Signing time: Sat 05 Apr 2025 18:34:34 +0000 Manifest this update: Sat 05 Apr 2025 18:29:34 +0000 Manifest next update: Sun 06 Apr 2025 22:32:34 +0000 Files and hashes: 1: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: GMRaZkN3zIDxVuJVnldek+MoIhPgvQ/+nioWSoYNFg0=) 2: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=) 3: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=) 4: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=) 5: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=) 6: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=) 7: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s=) 8: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=) 9: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: XsSHiraeLYNQTJR5HGAY6vwQ9Scu9lRrIHdSI54V+7M=) 10: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: rjHLbg5RxNx+OSrihRQaxhyOJyLwHXme40chbILQOQQ=) 11: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=) 12: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=) 13: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: hJFUedJxlwrGsuBiVRcEB429TcpnC3Bw2MEl2q91qrM=) 14: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=) 15: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=) 16: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=) 17: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=) 18: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jmlPHqT2zn/G8VxGtz4qGDGVkC091Y4a8xRHPA/+0+0=) 19: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=) 20: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: eglNokA0036JbGNEJ4JBpUI9W7LtrNCo3IjzCiifpEo=) 21: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=) 22: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: YBRtGgVo128HYmmYrlq/rtgksrT7YQggo7xicgUIVnM=) 23: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: sr7r8uO67cDPo72NjWdP3dlG7qJrC9xZ+w35SmZvRyk=) 24: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=) 25: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=) 26: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: 6oVWbbqVFk6Pwgux9V8jfDQRsMYOVT5jirPBSL3Wig4=) 27: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: nZRdseJLG8pcz60dA2dIP+lQPJZ68YEbyLu8K+1sxGI=) 28: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=) 29: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=) 30: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: lqCEmZ9NaCjaWEhq0OXTc04xBaaLhH59AP38axB9xQk=) 31: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: 5VOHdVimQTcLkjv1/qfyTfwKQZTSkqKggALrxDa3ecs=) 32: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b1:55:b9:a7:43:97:80:a9:24:6a:ad:b7:ed:01:0a:23:3c:4d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000 Validity Not Before: Apr 5 18:29:34 2025 GMT Not After : Apr 6 22:32:34 2025 GMT Subject: CN=AD2F4FB035A370D182C9203E2B9B1057DBC4B5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:c9:2b:f6:7e:ca:9c:30:f3:8d:c9:ab:47: da:25:f1:79:25:5f:15:28:93:73:cc:51:cf:d2:b6: c5:77:23:8b:6e:48:d7:bf:ac:4b:64:43:24:91:6e: 8a:f4:d1:55:38:31:de:6a:91:70:63:bb:0a:44:f8: 4f:f4:13:0f:2e:0e:99:a0:f9:3b:53:de:4c:55:30: f4:df:54:10:e1:4f:29:aa:3b:55:22:81:c6:70:2b: f6:59:88:13:48:ea:b0:a0:35:66:d3:a3:95:00:47: 64:fe:0c:af:1c:cc:a6:73:cc:6d:22:af:ba:52:64: 95:c6:22:4a:ab:07:e4:65:76:a4:43:bf:74:88:9b: 0b:e9:39:d9:ae:ea:0a:b8:4c:e8:b8:33:98:d9:ee: f4:0f:c9:6c:55:a3:e3:77:62:3d:36:7b:db:dc:05: 2f:f5:a4:af:e1:73:fa:53:89:a3:ca:81:d2:6a:f6: e7:62:d8:9a:64:b7:c8:0e:35:d6:a0:4c:57:89:cd: 81:c2:80:1d:f0:74:31:b2:28:5b:d3:92:06:6d:6e: 0e:76:15:5b:22:20:3d:c7:a4:05:b2:1e:a9:a8:3e: ab:30:4b:d0:65:61:c4:9c:64:d4:4e:c6:3b:ea:9c: 79:24:de:31:6f:ce:1a:27:5a:8e:53:be:19:58:bf: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2F:4F:B0:35:A3:70:D1:82:C9:20:3E:2B:9B:10:57:DB:C4:B5:FA X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:77:e0:c8:d0:08:e1:d6:2d:54:ea:74:9f:d6:17:7e:00:2b: ff:70:5d:93:97:5a:87:8c:f5:1c:e6:12:21:2a:c4:0b:ee:a7: e7:ff:42:71:03:51:96:e9:00:13:96:4f:e7:1f:66:a3:d1:86: c8:44:d3:40:2e:19:2c:b7:ab:dd:28:3f:4e:33:4f:d2:8a:03: c4:5c:0a:0e:ac:c6:36:db:11:31:c8:54:fd:c9:52:ea:f9:03: 38:82:a0:6c:b0:74:30:30:ee:35:56:26:37:83:8a:21:3a:53: eb:3c:05:74:5c:a9:22:07:1a:5f:4f:4d:ff:6a:68:fb:61:1b: 98:24:18:1c:e6:e1:1a:19:b7:a7:30:96:32:fe:c6:ba:99:a6: 8d:02:2a:69:77:ad:ca:08:bf:a0:25:b1:29:f8:af:41:45:ac: 6f:2b:7a:ed:49:01:a5:0f:0d:23:ca:bf:1a:54:cb:0c:7b:ad: 9c:37:17:b8:7d:f9:2c:38:0d:1a:b5:16:42:65:c6:3a:61:bd: 4e:d6:a9:c4:7b:1a:6d:3a:a0:cd:ad:95:48:c1:20:bf:ce:ca: 96:9e:03:f9:0a:b2:ab:d8:f6:c9:c7:ed:56:ce:01:47:cb:8a: b1:bb:d3:a6:93:46:34:46:9b:a4:be:2f:88:fb:42:e3:56:81: 99:14:f6:94 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUbrFVuadDl4CpJGqtt+0BCiM8TfkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MDQwNTE4MjkzNFoX DTI1MDQwNjIyMzIzNFowMzExMC8GA1UEAxMoQUQyRjRGQjAzNUEzNzBEMTgyQzky MDNFMkI5QjEwNTdEQkM0QjVGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlXySv2fsqcMPONyatH2iXxeSVfFSiTc8xRz9K2xXcji25I17+sS2RDJJFu ivTRVTgx3mqRcGO7CkT4T/QTDy4OmaD5O1PeTFUw9N9UEOFPKao7VSKBxnAr9lmI E0jqsKA1ZtOjlQBHZP4MrxzMpnPMbSKvulJklcYiSqsH5GV2pEO/dIibC+k52a7q CrhM6LgzmNnu9A/JbFWj43diPTZ729wFL/Wkr+Fz+lOJo8qB0mr252LYmmS3yA41 1qBMV4nNgcKAHfB0MbIoW9OSBm1uDnYVWyIgPcekBbIeqag+qzBL0GVhxJxk1E7G O+qceSTeMW/OGidajlO+GVi/QK8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBStL0+w NaNw0YLJID4rmxBX28S1+jAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5 QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABR34MjQCOHWLVTqdJ/WF34AK/9wXZOXWoeM 9RzmEiEqxAvup+f/QnEDUZbpABOWT+cfZqPRhshE00AuGSy3q90oP04zT9KKA8Rc Cg6sxjbbETHIVP3JUur5AziCoGywdDAw7jVWJjeDiiE6U+s8BXRcqSIHGl9PTf9q aPthG5gkGBzm4RoZt6cwljL+xrqZpo0CKml3rcoIv6AlsSn4r0FFrG8reu1JAaUP DSPKvxpUywx7rZw3F7h9+Sw4DRq1FkJlxjphvU7WqcR7Gm06oM2tlUjBIL/Oypae A/kKsqvY9snH7VbOAUfLirG706aTRjRGm6S+L4j7QuNWgZkU9pQ= -----END CERTIFICATE-----Generated at Sat Apr 5 22:57:33 2025 by rpki-client