$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: AY74u6em2y6NqeIWU/CoQbgBUBnyKssRUm4EmAZG4gI= Subject key identifier: EE:4A:13:6D:BA:F7:95:7F:CC:AB:F4:08:B1:C6:C2:FD:57:55:1F:DB Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 0ECAB175772AF6E871134F69BAAFD1D2B9881DB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 07E8 Signing time: Sat 31 May 2025 03:24:45 +0000 Manifest this update: Sat 31 May 2025 03:19:45 +0000 Manifest next update: Sun 01 Jun 2025 06:28:45 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) 2: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: DMuw+uvLiw5YCuujrtKmioeHiTgvR4mb7bGxmkTcbVU=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 5: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Jun 2025 06:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ca:b1:75:77:2a:f6:e8:71:13:4f:69:ba:af:d1:d2:b9:88:1d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: May 31 03:19:45 2025 GMT Not After : Jun 1 06:28:45 2025 GMT Subject: CN=EE4A136DBAF7957FCCABF408B1C6C2FD57551FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:d7:31:49:e2:8f:ec:e3:81:de:89:a2:b6: ee:ca:f1:fe:79:15:b5:0f:58:ce:54:48:89:6d:ef: 64:e9:3c:76:a1:f2:83:bc:3a:2a:08:14:dd:0d:83: 34:c1:73:21:34:70:ec:78:c0:1f:73:77:a7:cf:b2: 20:b3:2f:d0:ef:ff:9a:98:fe:b1:2e:a5:90:aa:36: 8d:61:40:f6:1d:0f:65:cd:38:cb:53:1b:a9:42:86: 5f:51:6c:4f:a1:ea:f7:62:76:ab:b2:32:77:e5:dc: 7d:72:87:10:72:31:1a:47:2e:db:8f:18:6d:9e:13: 00:81:b7:c0:2d:fc:83:5f:36:8a:31:10:3e:34:c3: 2a:e2:a5:44:0d:8e:1a:d3:85:a1:e9:66:9d:54:c8: 42:63:17:a7:eb:d0:0c:04:0e:69:b7:4e:25:d3:0b: 06:b1:6e:43:1e:83:41:97:f1:26:ea:f9:c5:bc:e7: 28:cf:df:97:fc:cf:33:83:cd:76:9f:dc:46:8c:30: e5:f9:e7:1a:cf:b3:75:74:9a:18:f4:4d:33:04:ce: ee:c0:7b:f9:f8:91:9a:4d:c4:c1:70:5c:fb:af:86: 69:4f:8f:97:a7:1e:ec:cd:97:74:c6:fd:49:c8:9c: 11:94:7c:85:e8:e0:44:bc:98:43:41:df:b1:d6:0f: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4A:13:6D:BA:F7:95:7F:CC:AB:F4:08:B1:C6:C2:FD:57:55:1F:DB X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6f:a1:a5:cb:22:dc:bc:d9:e4:67:5a:b8:6f:60:28:81:c9: ee:b8:f7:82:e7:a7:de:a1:0b:e9:62:9f:fd:f3:0e:e0:a8:9b: 71:23:cc:e9:98:ad:f1:8a:69:dd:f7:3c:e1:6c:dd:76:b8:31: 4e:a4:f2:d9:f3:30:06:d5:b8:02:7f:c2:14:9b:fd:3e:8a:21: 2a:7a:c7:04:93:20:81:77:b3:b0:79:11:28:5e:11:e3:64:1d: 8a:b9:bc:8c:0e:ff:51:f6:7a:46:7d:e5:b2:91:83:8b:bb:32: b2:57:0b:f8:de:f1:86:d2:2a:09:56:50:c6:d9:2b:06:50:10: 57:3f:62:24:7b:a6:5e:a8:38:2d:1c:57:dd:02:89:c8:61:bf: 3a:86:29:39:35:fd:41:ea:a8:5d:d6:35:73:f1:d3:55:19:5f: a2:78:e9:d3:88:e9:ea:0d:cc:05:6f:c6:90:df:61:75:5b:99: ac:98:52:8d:31:89:c0:eb:e2:89:af:01:2d:a3:fe:2f:12:ef: 3f:83:75:1e:cf:c4:62:7e:83:2b:37:65:ce:5e:c8:fc:57:91: 7f:fb:78:a8:6b:a1:67:fb:63:4b:5a:7b:13:31:97:e3:e3:46: 57:d8:b6:b7:16:c4:df:b0:58:c2:8e:7a:47:77:c7:d7:58:05: c5:be:27:5f -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUDsqxdXcq9uhxE09puq/R0rmIHbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDUzMTAzMTk0NVoX DTI1MDYwMTA2Mjg0NVowMzExMC8GA1UEAxMoRUU0QTEzNkRCQUY3OTU3RkNDQUJG NDA4QjFDNkMyRkQ1NzU1MUZEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgM1zFJ4o/s44HeiaK27srx/nkVtQ9YzlRIiW3vZOk8dqHyg7w6KggU3Q2D NMFzITRw7HjAH3N3p8+yILMv0O//mpj+sS6lkKo2jWFA9h0PZc04y1MbqUKGX1Fs T6Hq92J2q7Iyd+XcfXKHEHIxGkcu248YbZ4TAIG3wC38g182ijEQPjTDKuKlRA2O GtOFoelmnVTIQmMXp+vQDAQOabdOJdMLBrFuQx6DQZfxJur5xbznKM/fl/zPM4PN dp/cRoww5fnnGs+zdXSaGPRNMwTO7sB7+fiRmk3EwXBc+6+GaU+Pl6ce7M2XdMb9 ScicEZR8hejgRLyYQ0HfsdYPpA8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTuShNt uveVf8yr9AixxsL9V1Uf2zAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNvoaXLIty82eRnWrhvYCiBye6494Lnp96h C+lin/3zDuCom3EjzOmYrfGKad33POFs3Xa4MU6k8tnzMAbVuAJ/whSb/T6KISp6 xwSTIIF3s7B5ESheEeNkHYq5vIwO/1H2ekZ95bKRg4u7MrJXC/je8YbSKglWUMbZ KwZQEFc/YiR7pl6oOC0cV90CichhvzqGKTk1/UHqqF3WNXPx01UZX6J46dOI6eoN zAVvxpDfYXVbmayYUo0xicDr4omvAS2j/i8S7z+DdR7PxGJ+gys3Zc5eyPxXkX/7 eKhroWf7Y0taexMxl+PjRlfYtrcWxN+wWMKOekd3x9dYBcW+J18= -----END CERTIFICATE-----Generated at Sat May 31 16:27:49 2025 by rpki-client