Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          tXguYyeRdBbcyxvmJrxojZicHExfr/YxtF3iSXTaTU8=
Subject key identifier:   39:60:BC:7E:A4:14:6F:2B:28:10:87:62:34:BF:2F:5B:E7:6C:0D:E7
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       4BC9F530818DAE7ACBBE28193D91ED2D5B30936B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          083F
Signing time:             Mon 21 Jul 2025 14:17:54 +0000
Manifest this update:     Mon 21 Jul 2025 14:12:54 +0000
Manifest next update:     Tue 22 Jul 2025 15:21:54 +0000
Files and hashes:         1: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: nZRdseJLG8pcz60dA2dIP+lQPJZ68YEbyLu8K+1sxGI=)
                          2: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          3: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          4: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          5: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jmlPHqT2zn/G8VxGtz4qGDGVkC091Y4a8xRHPA/+0+0=)
                          6: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
                          7: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          8: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: eglNokA0036JbGNEJ4JBpUI9W7LtrNCo3IjzCiifpEo=)
                          9: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: XsSHiraeLYNQTJR5HGAY6vwQ9Scu9lRrIHdSI54V+7M=)
                          10: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)
                          11: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          12: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          13: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=)
                          14: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          15: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: GMRaZkN3zIDxVuJVnldek+MoIhPgvQ/+nioWSoYNFg0=)
                          16: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: x/uqP8MSicx/HyjpTZ+5mHDrUPAbVrm5pFRbKMobVGE=)
                          17: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: YBRtGgVo128HYmmYrlq/rtgksrT7YQggo7xicgUIVnM=)
                          18: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          19: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: hJFUedJxlwrGsuBiVRcEB429TcpnC3Bw2MEl2q91qrM=)
                          20: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: 6oVWbbqVFk6Pwgux9V8jfDQRsMYOVT5jirPBSL3Wig4=)
                          21: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          22: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=)
                          23: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: rjHLbg5RxNx+OSrihRQaxhyOJyLwHXme40chbILQOQQ=)
                          24: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          25: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          26: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          27: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: sr7r8uO67cDPo72NjWdP3dlG7qJrC9xZ+w35SmZvRyk=)
                          28: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          29: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
                          30: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: lqCEmZ9NaCjaWEhq0OXTc04xBaaLhH59AP38axB9xQk=)
                          31: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
                          32: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          33: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 15:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c9:f5:30:81:8d:ae:7a:cb:be:28:19:3d:91:ed:2d:5b:30:93:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Jul 21 14:12:54 2025 GMT
            Not After : Jul 22 15:21:54 2025 GMT
        Subject: CN=3960BC7EA4146F2B2810876234BF2F5BE76C0DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:c4:6c:2f:ea:8f:32:9f:e2:1c:4c:5d:16:
                    b2:f7:dd:b3:5d:1d:10:81:04:05:db:45:35:c5:05:
                    38:c6:2b:18:c3:c3:da:78:03:da:a4:80:03:9f:eb:
                    ea:7f:60:dd:1e:eb:36:f1:e8:8c:d4:e7:f2:a4:9d:
                    cd:7a:37:8c:c0:a6:91:03:4b:9a:ee:26:7c:e2:37:
                    a7:0d:c6:0f:1e:fe:05:ee:23:a4:a8:40:fb:a5:f7:
                    34:cc:00:8c:10:f4:62:49:d2:4f:40:17:00:5d:40:
                    6c:01:5c:1f:cd:3c:2c:61:32:55:b0:51:88:73:ac:
                    f5:8a:b4:22:d3:ed:be:87:e4:bb:b9:f9:cf:ae:29:
                    a1:c4:7a:6b:d0:16:1b:35:98:3a:0d:e2:5a:1b:78:
                    19:0e:57:7b:f4:c1:e9:34:24:1b:52:80:67:a9:27:
                    1e:b1:e0:a6:7f:38:3d:e4:be:79:1d:82:c0:97:c4:
                    0c:e7:df:39:3c:ed:7d:ca:86:b2:4c:9c:c7:46:c8:
                    0a:b2:49:f5:7b:88:4a:60:20:04:75:f5:7f:88:24:
                    6a:23:e5:0d:fb:3b:bf:ec:6d:ef:bf:d2:1e:ce:6e:
                    a6:2d:f9:85:ff:af:d4:21:03:f9:5a:b7:cd:85:c9:
                    c4:9b:5d:30:6b:8a:c2:8c:76:76:47:78:c0:4c:d3:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:60:BC:7E:A4:14:6F:2B:28:10:87:62:34:BF:2F:5B:E7:6C:0D:E7
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:9a:d6:09:12:c7:94:a7:d4:32:ef:dc:d3:b6:e6:15:3e:
         24:0a:6f:6f:f6:65:82:aa:37:37:e3:71:e2:f5:43:c6:4a:24:
         61:92:c5:8f:d4:97:32:46:02:59:97:20:9a:f6:33:9b:c0:c0:
         8b:f7:cf:1d:1a:6c:24:29:e8:d5:36:07:01:f3:4b:f3:00:f4:
         e1:6f:fb:cc:f6:b2:6d:ac:40:c8:35:f1:06:84:0b:18:bd:77:
         fc:88:b5:4c:02:a6:00:b0:6a:f8:94:ab:bc:46:b9:a0:7d:90:
         ca:8c:4b:4a:c3:99:2e:e9:7f:c9:94:7e:d9:3d:f4:f7:45:5a:
         68:a2:2a:44:b8:41:da:5a:06:c2:e6:4b:2c:07:df:c6:5f:23:
         49:5e:de:df:cc:c9:c8:e8:d8:e2:84:bc:a3:5f:d8:25:e1:a5:
         5d:24:98:8a:7a:d3:3c:41:6e:50:2a:1e:61:07:c8:83:03:18:
         d4:b6:6c:73:de:19:02:d1:b1:f1:d8:96:80:55:1d:ab:b7:f7:
         cb:3b:ec:da:82:b3:74:1b:f1:4e:e6:09:90:96:40:86:24:b3:
         13:7f:a0:98:6f:b1:5f:5b:21:2e:05:8a:17:f4:6d:69:c5:0e:
         5a:3f:ed:8e:b9:da:3f:81:2a:05:46:aa:97:54:f6:5c:3c:64:
         64:91:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 06:32:05 2025 by rpki-client