$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: nfKw8ZgN/KeXLFCC+h4rmURKs3HEV8sJ41gr7PpGCes= Subject key identifier: C7:B6:F7:92:15:5D:22:73:6C:6C:B2:EE:76:FD:45:D8:FB:64:BD:BF Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 7374E3A0C1748D779D20EBB5BE964F44D11F68D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 075A Signing time: Sun 16 Feb 2025 04:21:47 +0000 Manifest this update: Sun 16 Feb 2025 04:16:47 +0000 Manifest next update: Mon 17 Feb 2025 08:02:47 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 2: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: cjoI7BcDp/ipceGFMvYdMcKudXrz2fwJ6D2zagnyydk=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) 5: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: nwykWUABK3aPl9d3nXR0L6hMd8ud//blJr+m2LhbNhc=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Feb 2025 08:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:74:e3:a0:c1:74:8d:77:9d:20:eb:b5:be:96:4f:44:d1:1f:68:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000 Validity Not Before: Feb 16 04:16:47 2025 GMT Not After : Feb 17 08:02:47 2025 GMT Subject: CN=C7B6F792155D22736C6CB2EE76FD45D8FB64BDBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:1d:b3:a5:32:08:f5:3b:af:0c:db:31:9b: 37:ee:9a:0e:90:f8:52:89:c8:99:cc:a1:f5:c8:92: 02:24:6a:44:7e:e2:52:e6:b8:6b:39:85:19:99:39: 4b:ea:d3:00:85:d8:98:cd:bb:ab:aa:c8:1f:b8:e6: 35:0d:f7:67:f0:a8:30:66:e4:f6:c5:06:e5:df:a3: 7c:f4:f2:1c:4f:01:ec:2e:86:42:63:2a:b2:db:1c: bc:15:a5:25:a0:7f:dc:3e:a5:99:74:13:3f:70:4f: 94:cb:a0:ea:54:b3:b8:89:a2:bc:4b:10:0a:ef:88: 72:9e:99:0b:f3:e5:3b:db:fa:f6:0a:b1:69:54:10: dc:a8:4f:44:3c:46:e5:e6:bb:9d:cd:c1:75:e3:c6: b3:8f:c2:e3:0b:d5:a5:45:69:5c:fe:21:c7:1b:b1: bf:01:e1:3d:0c:c9:6d:25:77:a3:4a:9c:24:3b:6d: 74:11:08:b1:bd:38:2b:79:47:89:18:9b:ae:d9:c2: 3e:7a:cf:28:d6:bf:e5:58:c5:b1:3a:03:4e:16:01: cc:03:68:fc:b1:ad:22:68:0e:af:66:f0:77:5d:fa: d6:a8:a7:27:8f:d6:f3:34:5e:48:c5:42:30:0e:4f: ac:9e:f0:ba:06:b7:93:1a:6f:8e:cd:1c:a7:f2:16: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B6:F7:92:15:5D:22:73:6C:6C:B2:EE:76:FD:45:D8:FB:64:BD:BF X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:21:9a:2c:32:f1:7d:db:1f:8c:72:d9:bb:84:5a:06:63:b5: 94:e4:34:67:28:c9:72:3f:ec:b6:6f:bb:9b:fd:5d:3d:56:b3: ab:3c:e8:dc:ea:04:df:cb:66:c2:bb:24:c1:2b:5b:08:19:50: af:52:c8:3d:12:63:a7:05:61:86:62:b5:ea:53:97:0b:66:ed: b5:e8:26:67:37:fa:6e:0a:fb:de:65:42:b8:ac:33:69:34:5c: 33:72:56:c9:b3:03:71:3b:31:2e:3f:df:eb:08:57:e0:b7:e8: b9:4e:7c:a9:62:29:64:41:df:e9:8a:07:21:9c:e3:52:dd:92: 54:95:a6:60:32:ea:a2:42:05:dd:c7:7b:0d:c8:f8:30:ce:35: 8f:60:91:77:a3:44:4a:19:08:85:9a:14:db:1d:63:6e:d3:9e: 52:2c:c9:be:90:14:26:c8:0f:e2:65:1a:0c:78:ef:87:6f:f7: 7a:68:6d:5b:ce:f4:df:82:b9:4b:24:95:d3:c3:a7:1f:8b:f6: e9:74:07:92:4a:c4:3f:9b:87:8a:ba:bc:0c:dd:ce:5e:73:fc: e3:9e:de:6b:43:e4:0c:91:ce:5e:a5:de:14:a6:7e:4c:25:2f: 71:e8:f6:0a:91:84:40:9d:22:fd:3b:aa:3b:fa:ee:5b:60:8d: 63:72:e6:36 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUc3TjoMF0jXedIOu1vpZPRNEfaNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDIxNjA0MTY0N1oX DTI1MDIxNzA4MDI0N1owMzExMC8GA1UEAxMoQzdCNkY3OTIxNTVEMjI3MzZDNkNC MkVFNzZGRDQ1RDhGQjY0QkRCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANM2HbOlMgj1O68M2zGbN+6aDpD4UonImcyh9ciSAiRqRH7iUua4azmFGZk5 S+rTAIXYmM27q6rIH7jmNQ33Z/CoMGbk9sUG5d+jfPTyHE8B7C6GQmMqstscvBWl JaB/3D6lmXQTP3BPlMug6lSzuImivEsQCu+Icp6ZC/PlO9v69gqxaVQQ3KhPRDxG 5ea7nc3BdePGs4/C4wvVpUVpXP4hxxuxvwHhPQzJbSV3o0qcJDttdBEIsb04K3lH iRibrtnCPnrPKNa/5VjFsToDThYBzANo/LGtImgOr2bwd1361qinJ4/W8zReSMVC MA5PrJ7wuga3kxpvjs0cp/IWZxcCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTHtveS FV0ic2xssu52/UXY+2S9vzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAhmiwy8X3bH4xy2buEWgZjtZTkNGcoyXI/ 7LZvu5v9XT1Ws6s86NzqBN/LZsK7JMErWwgZUK9SyD0SY6cFYYZitepTlwtm7bXo Jmc3+m4K+95lQrisM2k0XDNyVsmzA3E7MS4/3+sIV+C36LlOfKliKWRB3+mKByGc 41LdklSVpmAy6qJCBd3Hew3I+DDONY9gkXejREoZCIWaFNsdY27TnlIsyb6QFCbI D+JlGgx474dv93pobVvO9N+CuUskldPDpx+L9ul0B5JKxD+bh4q6vAzdzl5z/OOe 3mtD5AyRzl6l3hSmfkwlL3Ho9gqRhECdIv07qjv67ltgjWNy5jY= -----END CERTIFICATE-----Generated at Sun Feb 16 22:34:20 2025 by rpki-client