$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: vzbnNdpcb8xMCrLA9V086EHVNAbB3qj51QwXOFQDs0I= Subject key identifier: 7A:37:76:C6:12:18:88:E8:83:F4:82:BB:8A:C6:AA:89:17:56:E7:9F Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 0795D15D563CB9112499303C39D9E61584914359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 049B Signing time: Sun 05 May 2024 11:05:34 +0000 Manifest this update: Sun 05 May 2024 11:00:34 +0000 Manifest next update: Mon 06 May 2024 13:29:34 +0000 Files and hashes: 1: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: +l+LLJ5qv5rG9XpOB5EtnMQqcuLdwEUSxc3WkFstc9c=) 2: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: vZnhk1qnkuieKxbczelco+alg488jHi2LBkSN3IVSkU=) 3: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: OZCOlman0VGtfZyBAJHknQt53hf93ALFldrNGCqAMSY=) 4: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: LTtnDFSz/myPp9hdqfuiWCnQyszE+NFo5YNN6vgWKjs=) 5: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +yToZ7BGOFFxXGul3fg25yXDCi3mC/z+ay0bwq/Pphs=) 6: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: mzEbhTO98CfVw2AD0sc5QzB9gbdHkvUdClcNYu7+uPY=) 7: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: WfSrR5DYs/Gs9Ga24GRRtj2f8TQVcYq+PYVRGksgZTM=) 8: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: Jq9hRehMcgVd7eI/7fDvbCKmok5FYS+UZcW6PeZNgec=) 9: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: hcTTvlwOQ8mEYs87ZpBD+VvsUWR3jQz1lVEDv0L/QyU=) 10: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: uqZdKuttzTAJMpzM0yVhlTDNydzm82wcVNNAX37W0To=) 11: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: nhKW/U2mQE9hiEStWRXIlwCa4HYKtRhd1iwW6bvRww4=) 12: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: pYoUlXrlpDmN79NoJ37q6/uJItachuxXEg/wBWWNsls=) 13: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: BvohWATxMUq15cQWXI9T1mfM7DXZtT2rAfhq+oRSCqQ=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 13:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:95:d1:5d:56:3c:b9:11:24:99:30:3c:39:d9:e6:15:84:91:43:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: May 5 11:00:34 2024 GMT Not After : May 6 13:29:34 2024 GMT Subject: CN=7A3776C6121888E883F482BB8AC6AA891756E79F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:fe:e1:a5:24:b2:b9:f3:2f:ad:ad:7a:c1: ec:40:37:60:7f:4f:f6:ad:b8:ce:23:a8:09:c6:c1: d9:b0:62:cd:c3:77:dd:06:88:81:87:52:5f:b2:ee: 1c:92:62:c4:02:d7:99:e1:18:b1:45:5d:b0:16:9b: c3:47:7d:b3:ad:00:04:25:cd:ec:8a:bb:84:fd:97: a6:7d:44:dc:03:8e:ee:69:bb:64:5b:f8:8e:62:ae: 7a:79:c9:9e:84:95:77:8e:09:d9:77:fe:b5:09:58: 9f:f8:1a:ab:be:49:c0:2f:c1:09:84:69:79:24:61: bf:e0:0d:99:c1:8c:8c:02:12:c2:97:7c:ac:48:31: 5d:4f:7a:78:22:44:5b:9a:fa:a6:a7:87:4b:87:e0: d1:21:10:fc:3c:a0:50:1a:43:76:70:60:02:08:db: bb:bf:dd:e2:ae:87:51:97:5a:ee:a5:6d:b3:84:aa: ea:5c:03:00:49:d4:bb:5e:83:cc:ff:cd:5e:0a:9e: 3b:e0:69:ea:52:a2:d9:d0:52:8b:33:95:ca:bb:c5: f2:71:75:90:22:de:d8:4f:6e:97:8b:89:93:a4:9b: 12:93:2e:1d:cd:7a:51:d2:a3:c1:b0:41:11:ac:c2: 6e:3a:b1:30:b9:aa:cc:f5:62:97:b2:7d:90:b6:fa: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:37:76:C6:12:18:88:E8:83:F4:82:BB:8A:C6:AA:89:17:56:E7:9F X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1b:a2:71:5c:92:24:5a:56:40:79:87:c0:2b:c6:45:8d:24: a4:c9:dc:73:01:ce:c9:8d:fe:1e:cd:43:80:8d:ad:e2:c6:23: 22:48:8f:e0:cd:66:16:f6:a6:7e:ea:88:70:71:f2:9a:e9:41: eb:48:63:21:8f:9d:27:e6:48:68:48:da:e5:e1:79:0f:e5:01: 3f:0b:f3:98:3c:94:f1:d1:75:b5:16:b9:8e:dd:56:be:89:76: af:46:38:e3:65:e6:85:50:46:14:26:e8:6a:05:f7:b4:06:1d: da:50:75:d7:98:9a:5b:c1:32:3e:98:be:65:4b:53:1b:4b:ba: 13:b4:a0:d7:40:c4:12:9b:8a:fc:d3:91:8d:db:29:93:09:1a: 10:9d:ec:60:09:fc:41:fb:7d:60:2c:d0:be:2f:23:5a:1d:c0: 34:f5:84:e1:57:55:9b:51:cd:86:fd:3d:0d:23:87:ef:46:53: 8a:db:45:42:11:88:ee:c8:d7:9a:85:d9:2a:65:02:62:3e:22: 54:69:9f:34:88:1d:f1:cc:a0:43:8a:1d:77:50:6c:97:95:e6: 24:16:d6:e6:f0:2a:de:73:16:67:c1:43:aa:42:c5:21:30:ac: a9:48:d7:3d:e2:13:68:5c:f7:34:e7:03:22:da:bf:ae:46:cd: 7f:e9:e8:90 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUB5XRXVY8uREkmTA8OdnmFYSRQ1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI0MDUwNTExMDAzNFoX DTI0MDUwNjEzMjkzNFowMzExMC8GA1UEAxMoN0EzNzc2QzYxMjE4ODhFODgzRjQ4 MkJCOEFDNkFBODkxNzU2RTc5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeI/uGlJLK58y+trXrB7EA3YH9P9q24ziOoCcbB2bBizcN33QaIgYdSX7Lu HJJixALXmeEYsUVdsBabw0d9s60ABCXN7Iq7hP2Xpn1E3AOO7mm7ZFv4jmKuennJ noSVd44J2Xf+tQlYn/gaq75JwC/BCYRpeSRhv+ANmcGMjAISwpd8rEgxXU96eCJE W5r6pqeHS4fg0SEQ/DygUBpDdnBgAgjbu7/d4q6HUZda7qVts4Sq6lwDAEnUu16D zP/NXgqeO+Bp6lKi2dBSizOVyrvF8nF1kCLe2E9ul4uJk6SbEpMuHc16UdKjwbBB EazCbjqxMLmqzPVil7J9kLb65w8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBR6N3bG EhiI6IP0gruKxqqJF1bnnzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcbonFckiRaVkB5h8ArxkWNJKTJ3HMBzsmN /h7NQ4CNreLGIyJIj+DNZhb2pn7qiHBx8prpQetIYyGPnSfmSGhI2uXheQ/lAT8L 85g8lPHRdbUWuY7dVr6Jdq9GOONl5oVQRhQm6GoF97QGHdpQddeYmlvBMj6YvmVL UxtLuhO0oNdAxBKbivzTkY3bKZMJGhCd7GAJ/EH7fWAs0L4vI1odwDT1hOFXVZtR zYb9PQ0jh+9GU4rbRUIRiO7I15qF2SplAmI+IlRpnzSIHfHMoEOKHXdQbJeV5iQW 1ubwKt5zFmfBQ6pCxSEwrKlI1z3iE2hc9zTnAyLav65GzX/p6JA= -----END CERTIFICATE-----Generated at Sun May 5 13:18:34 2024 by rpki-client on console-ams.rpki-client.org