$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: xOudzEbL3NUMcvOE5H8cMJkIkl9H4SaVl1iwaMQu5rE= Subject key identifier: C8:03:A9:C0:E4:B1:5B:14:D1:74:D2:27:31:42:58:1E:F5:3E:A2:32 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 5B1A5E995B9A62DBD6D8D5D1EDC03181581D7FC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 06FB Signing time: Tue 22 Jul 2025 02:10:16 +0000 Manifest this update: Tue 22 Jul 2025 02:05:16 +0000 Manifest next update: Wed 23 Jul 2025 03:49:16 +0000 Files and hashes: 1: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: 9uecxpl+8zhYNM/VLSzIYQFtoaNZNiKX2oWXwwGgZ5I=) 2: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +eDM5ZsnYy/K8Vcs+UsJ0vBbFc9QK/+4cHvdTH8CcFY=) 3: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: qBNNAhrcYn7+7C6H5Usnl0BSwa+8x/tgu9RF6Ut6QGA=) 4: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=) 5: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: tWRnU+tdEJIxCaDFfPwNfAoTd6uvr3uzZ5QAJ9M+Zng=) 6: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: z33pDE1uVCQz/+rMUZxr2CrKllnXqcBIx2p2sSpgt1w=) 7: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: 7Wq2I+eG+i0crt18gB8fjrpeNgtc2h87eRDDsvP4ByQ=) 8: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs=) 9: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: ymAOwS4PLKpnSnnV8/IOAQp6MUyltwBjY+QUE6aswIU=) 10: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=) 11: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: +W440KX/oLkp+uQDG0E0NZDB4tcCH05egdteoNSzmn0=) 12: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: Urm4fJQNtDp6SIxaK4P3H3Ws3eyWvAIY2xosgFCtd8I=) 13: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: PZcihi+tKuobULExyy+RldrR5ZxGFpEQTkOgUfpHPaE=) 14: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: beAYsCRxqlE19Pd1+dyNigMnD/N60WKXUOqwwXx7mfY=) 15: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: oAvLVEZUCqPZSKjbNm78EONoYmzYyZ6cmVQyo3qOyXU=) 16: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: Gkk3pjPcBn1ydDwbDsy1KlefEvRWum7WwjI0/dDLNr0=) 17: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: QKdp+97/jBscT8ua2qqpOoD5458W90JnJCIl2/HTZ9w=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1a:5e:99:5b:9a:62:db:d6:d8:d5:d1:ed:c0:31:81:58:1d:7f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Jul 22 02:05:16 2025 GMT Not After : Jul 23 03:49:16 2025 GMT Subject: CN=C803A9C0E4B15B14D174D2273142581EF53EA232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:14:33:16:2b:b4:ad:6e:f5:72:b1:34:47: df:38:12:7f:af:f9:ca:d0:14:41:7c:8e:c2:34:0b: 69:a4:27:99:04:3c:4c:9f:f6:80:b0:25:96:2d:9a: b1:b7:8d:5a:1c:73:d7:ad:8e:ad:a9:31:3c:a2:19: cf:a2:8f:f2:90:1f:b6:d1:07:14:b9:a5:e2:a7:e7: ea:d7:0d:00:f3:9a:7e:9b:ea:71:22:7a:d3:ab:92: a5:4a:f3:99:e9:50:96:d0:37:5a:4b:55:dc:db:9d: 31:c2:40:40:5a:73:03:b3:7e:f3:5a:b9:4d:b9:1d: 1d:ed:44:13:1f:f6:0e:76:05:d6:5b:99:91:1d:98: ee:17:a9:1a:87:2f:40:97:5b:a0:4c:3f:66:12:39: a4:93:d0:3b:08:2e:2a:fa:cf:db:1f:20:31:c0:45: 3a:a0:3b:96:be:1d:96:66:1f:5f:89:8b:ba:25:07: 62:d0:64:9b:50:8b:ad:66:18:47:33:30:16:21:27: 4c:76:93:d0:90:e9:ec:71:7d:73:a2:d1:46:25:4b: af:7b:1a:b5:ea:f9:eb:ca:e3:ad:3f:eb:77:66:7e: d9:b2:5f:cb:ed:69:9c:80:bf:b0:94:c4:06:a0:a3: f7:ba:f4:b2:cb:2a:30:d8:aa:4e:f0:e0:15:52:bc: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:03:A9:C0:E4:B1:5B:14:D1:74:D2:27:31:42:58:1E:F5:3E:A2:32 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:31:18:16:a6:d5:31:98:06:c5:1b:bf:55:57:a9:59:b6:cf: 8f:af:4c:1b:ca:c9:6f:4b:28:73:67:5d:31:50:f4:9e:66:11: d0:b6:03:88:9a:e9:c8:7b:ed:90:20:80:5b:8c:31:63:7b:16: 8a:35:b5:84:43:df:d0:ed:67:ec:f9:da:2c:73:f2:d8:84:fc: 1d:66:49:09:04:63:74:23:05:69:c7:c2:84:1e:32:b0:fd:75: af:78:e3:7f:28:72:37:a4:95:0e:84:ec:4f:2b:1d:65:03:5a: d1:ee:07:31:14:8b:91:a1:c5:6d:4c:f6:0c:32:74:7b:15:3d: 59:50:2e:64:21:7a:0a:9f:5c:8b:2d:0d:a4:0b:df:40:dd:d1: 69:c3:54:5d:9c:dc:6b:fb:86:e9:fe:49:de:8a:a7:57:98:22: 8f:4e:b3:a2:db:9b:09:ec:d7:f9:9a:11:31:59:a0:b4:5a:e3: 7b:da:a3:4e:a7:78:94:81:ff:aa:b4:7f:25:b1:b9:44:84:5b: aa:36:e8:1b:eb:3c:da:a4:83:d9:db:c8:e4:eb:44:62:a3:62: 6f:42:44:d5:e7:20:9f:10:b2:33:c1:ad:dc:86:ab:9b:e9:9f: f1:a7:20:45:85:86:8f:e3:7d:e8:b1:f8:92:c3:b6:fc:7a:d1: d2:90:45:a8 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUWxpemVuaYtvW2NXR7cAxgVgdf8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MDcyMjAyMDUxNloX DTI1MDcyMzAzNDkxNlowMzExMC8GA1UEAxMoQzgwM0E5QzBFNEIxNUIxNEQxNzRE MjI3MzE0MjU4MUVGNTNFQTIzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5yFDMWK7StbvVysTRH3zgSf6/5ytAUQXyOwjQLaaQnmQQ8TJ/2gLAlli2a sbeNWhxz162OrakxPKIZz6KP8pAfttEHFLml4qfn6tcNAPOafpvqcSJ606uSpUrz melQltA3WktV3NudMcJAQFpzA7N+81q5TbkdHe1EEx/2DnYF1luZkR2Y7hepGocv QJdboEw/ZhI5pJPQOwguKvrP2x8gMcBFOqA7lr4dlmYfX4mLuiUHYtBkm1CLrWYY RzMwFiEnTHaT0JDp7HF9c6LRRiVLr3sater568rjrT/rd2Z+2bJfy+1pnIC/sJTE BqCj97r0sssqMNiqTvDgFVK8TGkCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTIA6nA 5LFbFNF00icxQlge9T6iMjAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwxGBam1TGYBsUbv1VXqVm2z4+vTBvKyW9L KHNnXTFQ9J5mEdC2A4ia6ch77ZAggFuMMWN7Foo1tYRD39DtZ+z52ixz8tiE/B1m SQkEY3QjBWnHwoQeMrD9da94438ocjeklQ6E7E8rHWUDWtHuBzEUi5GhxW1M9gwy dHsVPVlQLmQhegqfXIstDaQL30Dd0WnDVF2c3Gv7hun+Sd6Kp1eYIo9Os6Lbmwns 1/maETFZoLRa43vao06neJSB/6q0fyWxuUSEW6o26BvrPNqkg9nbyOTrRGKjYm9C RNXnIJ8QsjPBrdyGq5vpn/GnIEWFho/jfeix+JLDtvx60dKQRag= -----END CERTIFICATE-----Generated at Tue Jul 22 19:21:34 2025 by rpki-client