$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: WqTEfOxWqRkpE/ZS/VvOISuPrKU+OZwTCLNn2BQapw4= Subject key identifier: EE:45:C5:4C:04:D9:53:95:8C:5D:F9:B4:49:62:FB:0B:3B:52:52:6E Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 64A96152E6F2C58CA6D44E527F655CDB64D436C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0870 Signing time: Sat 06 Sep 2025 01:37:15 +0000 Manifest this update: Sat 06 Sep 2025 01:32:15 +0000 Manifest next update: Sun 07 Sep 2025 01:49:15 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 2: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: vY/rvVnxrXlMeJhCvkbcqi2wIkKPtl9azcgpqpHMAyE=) 3: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 01:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a9:61:52:e6:f2:c5:8c:a6:d4:4e:52:7f:65:5c:db:64:d4:36:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Sep 6 01:32:15 2025 GMT Not After : Sep 7 01:49:15 2025 GMT Subject: CN=EE45C54C04D953958C5DF9B44962FB0B3B52526E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:a5:f5:66:8e:48:24:81:36:20:6b:a7:b7: c1:c5:43:98:36:4f:97:04:e8:f9:3d:4a:dc:15:13: 84:63:cc:51:00:ea:71:c7:1d:ee:81:47:12:55:96: e2:c3:79:b7:9d:5f:fd:d4:cd:f6:f5:a0:eb:38:75: e0:be:3f:90:23:1d:91:86:0c:e2:2b:89:75:cc:72: 1f:e8:79:c5:61:3c:0b:c5:52:6c:e2:79:e5:bf:d0: 7e:0f:74:4c:5e:ea:eb:81:aa:87:34:f1:27:57:72: 90:90:50:2e:a5:3f:68:82:f5:52:6b:d5:87:e0:27: aa:d2:94:8d:fc:fd:a6:e3:bb:f3:23:da:c7:bf:99: 51:3b:99:b7:2c:91:fe:1f:19:81:7f:ff:f0:78:73: 09:4a:fc:02:0a:e1:5a:aa:f5:33:b9:8b:92:66:1f: 8a:fb:d6:21:f4:38:48:e9:6f:6e:06:b7:43:82:46: c7:50:b3:3f:9f:21:60:1b:ac:00:df:30:05:60:d3: de:7e:67:3e:0a:20:2d:c6:c7:4d:11:c0:90:60:43: 2b:bb:fc:1a:57:02:fe:53:3f:ee:78:cd:c7:11:37: 6a:66:a5:99:5f:b7:96:90:fa:8b:e4:e3:f2:68:26: 7f:1e:9a:42:8c:29:14:79:9e:df:02:c3:b4:ab:21: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:45:C5:4C:04:D9:53:95:8C:5D:F9:B4:49:62:FB:0B:3B:52:52:6E X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:76:d5:db:a2:97:db:a3:c2:b8:d6:3b:47:95:65:1c:e2:03: af:4b:b6:a8:ab:09:f5:6d:34:79:a8:25:6f:24:ca:a6:63:34: dd:16:44:f7:bc:c2:9b:54:fa:8d:ad:c0:fc:19:d0:13:d9:0b: 1f:64:85:14:07:d1:c1:43:a5:0f:e0:67:0f:f3:65:e5:2a:e6: b6:1f:20:c5:36:05:73:3b:a6:11:ba:1e:8b:3e:87:b8:e9:95: e7:cc:fb:2e:25:78:51:fc:26:45:15:97:fd:6f:d7:6f:0a:58: b4:8a:82:2d:60:70:8a:21:82:c3:15:68:02:33:19:e2:d8:a3: 83:6f:96:7d:13:52:40:26:14:fc:9f:9d:3c:d8:b6:a5:9d:45: 78:3d:5f:18:0d:4e:31:f1:13:02:58:84:77:c4:67:2f:ff:c8: 13:8f:a3:0d:bf:b1:47:00:92:ea:c4:fb:98:37:62:97:96:7c: 70:84:49:07:1b:a3:78:28:b5:24:62:65:96:83:e5:1e:51:1b: 89:44:d8:d6:cf:e8:89:70:29:f7:61:72:fe:5b:16:be:03:ff: 92:cc:1b:dd:2d:59:33:3e:d6:cd:a5:8c:80:fe:a2:ab:4d:fa: 0f:e2:c0:8b:6c:62:9d:8d:b1:38:da:2e:c5:a2:ea:57:50:16: 55:20:87:08 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUZKlhUubyxYym1E5Sf2Vc22TUNsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDkwNjAxMzIxNVoX DTI1MDkwNzAxNDkxNVowMzExMC8GA1UEAxMoRUU0NUM1NEMwNEQ5NTM5NThDNURG OUI0NDk2MkZCMEIzQjUyNTI2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJCpfVmjkgkgTYga6e3wcVDmDZPlwTo+T1K3BUThGPMUQDqcccd7oFHElWW 4sN5t51f/dTN9vWg6zh14L4/kCMdkYYM4iuJdcxyH+h5xWE8C8VSbOJ55b/Qfg90 TF7q64GqhzTxJ1dykJBQLqU/aIL1UmvVh+AnqtKUjfz9puO78yPax7+ZUTuZtyyR /h8ZgX//8HhzCUr8AgrhWqr1M7mLkmYfivvWIfQ4SOlvbga3Q4JGx1CzP58hYBus AN8wBWDT3n5nPgogLcbHTRHAkGBDK7v8GlcC/lM/7njNxxE3amalmV+3lpD6i+Tj 8mgmfx6aQowpFHme3wLDtKshC8MCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTuRcVM BNlTlYxd+bRJYvsLO1JSbjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd21duil9ujwrjWO0eVZRziA69LtqirCfVt NHmoJW8kyqZjNN0WRPe8wptU+o2twPwZ0BPZCx9khRQH0cFDpQ/gZw/zZeUq5rYf IMU2BXM7phG6Hos+h7jplefM+y4leFH8JkUVl/1v128KWLSKgi1gcIohgsMVaAIz GeLYo4Nvln0TUkAmFPyfnTzYtqWdRXg9XxgNTjHxEwJYhHfEZy//yBOPow2/sUcA kurE+5g3YpeWfHCESQcbo3gotSRiZZaD5R5RG4lE2NbP6IlwKfdhcv5bFr4D/5LM G90tWTM+1s2ljID+oqtN+g/iwItsYp2NsTjaLsWi6ldQFlUghwg= -----END CERTIFICATE-----Generated at Sat Sep 6 05:34:24 2025 by rpki-client