$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: igRF2i2ZbOZOiiacMIZevKhxe4I9Aa576jXT8vWcJVI= Subject key identifier: BC:C4:E2:16:46:A2:E8:A9:F7:0B:8E:D1:39:7C:85:07:17:ED:E7:A7 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 16327D0AC183DB559F3A4F74BBBC61AF6016840D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 05A8 Signing time: Mon 25 Nov 2024 08:56:21 +0000 Manifest this update: Mon 25 Nov 2024 08:51:21 +0000 Manifest next update: Tue 26 Nov 2024 09:42:21 +0000 Files and hashes: 1: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: 7aQssMoiIk4Hw984W2Sx2jAXRY4bIOCvTDbnkYSmZ0A=) 2: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: Gkk3pjPcBn1ydDwbDsy1KlefEvRWum7WwjI0/dDLNr0=) 3: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: beAYsCRxqlE19Pd1+dyNigMnD/N60WKXUOqwwXx7mfY=) 4: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: 7Wq2I+eG+i0crt18gB8fjrpeNgtc2h87eRDDsvP4ByQ=) 5: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: qBNNAhrcYn7+7C6H5Usnl0BSwa+8x/tgu9RF6Ut6QGA=) 6: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +eDM5ZsnYy/K8Vcs+UsJ0vBbFc9QK/+4cHvdTH8CcFY=) 7: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: PZcihi+tKuobULExyy+RldrR5ZxGFpEQTkOgUfpHPaE=) 8: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: oAvLVEZUCqPZSKjbNm78EONoYmzYyZ6cmVQyo3qOyXU=) 9: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: ymAOwS4PLKpnSnnV8/IOAQp6MUyltwBjY+QUE6aswIU=) 10: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: Urm4fJQNtDp6SIxaK4P3H3Ws3eyWvAIY2xosgFCtd8I=) 11: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: tWRnU+tdEJIxCaDFfPwNfAoTd6uvr3uzZ5QAJ9M+Zng=) 12: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: 9uecxpl+8zhYNM/VLSzIYQFtoaNZNiKX2oWXwwGgZ5I=) 13: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: z33pDE1uVCQz/+rMUZxr2CrKllnXqcBIx2p2sSpgt1w=) 14: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: 7bXECpg42zxbCQgfpxjT+5/oYhnn2WkFzbnlaCCpA2c=) 15: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 09:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:32:7d:0a:c1:83:db:55:9f:3a:4f:74:bb:bc:61:af:60:16:84:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Nov 25 08:51:21 2024 GMT Not After : Nov 26 09:42:21 2024 GMT Subject: CN=BCC4E21646A2E8A9F70B8ED1397C850717EDE7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:49:ca:3e:8f:1e:cf:17:a0:b3:54:32:8d: 7b:79:dd:a8:52:50:d9:6f:33:8e:85:7d:09:a3:69: d0:a7:b0:48:d8:50:a4:08:df:1c:7f:01:51:c2:35: 86:bf:86:b2:8e:c3:0c:30:c9:db:b9:d2:ad:89:17: da:6c:8e:16:5e:fb:a9:0d:2e:38:10:42:b3:39:b7: 83:41:a8:0c:66:2f:39:08:49:6f:1b:c6:9d:72:0c: a6:fd:3c:63:79:fa:dd:78:28:bc:23:f4:33:1a:c2: d1:8c:76:ad:29:6f:b8:26:6d:86:bd:b5:22:e5:59: 05:52:da:9b:0a:02:6a:0d:c5:9c:f8:8e:b7:c1:9f: 86:20:71:16:3d:36:f0:89:70:37:d3:e6:22:63:bd: c1:7c:2b:1f:ee:97:96:1a:0b:67:bb:8a:c2:74:5a: 62:9a:1c:2b:3d:3e:f0:88:a4:2c:ea:86:7b:f8:91: 37:bd:ca:68:b1:50:b2:0e:12:94:da:43:52:ee:a4: 84:ad:00:fe:35:41:ce:6c:6d:1e:6d:b3:f4:24:c8: da:1a:c0:22:75:6d:c0:cb:5e:71:44:90:7b:a3:6b: c1:89:10:98:b3:f1:52:cb:6b:f8:ba:a5:1b:1e:6a: 3c:b9:9d:4f:2e:fe:b5:6f:59:cf:c5:28:62:e8:6c: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C4:E2:16:46:A2:E8:A9:F7:0B:8E:D1:39:7C:85:07:17:ED:E7:A7 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:29:93:7e:08:1f:2d:a8:d7:a9:4f:f1:17:17:4a:ea:cc:32: ea:9e:6e:72:98:53:16:5a:af:37:70:58:ff:65:05:74:9f:86: de:33:4a:dc:2e:95:d3:a7:16:fa:a2:1f:83:b7:e4:37:4f:17: 08:a1:89:af:36:c9:67:43:d9:45:7d:ab:f6:c2:0c:af:2f:45: 28:21:6d:19:47:be:f8:3a:bf:3f:64:90:1d:03:43:fa:61:b1: e4:af:77:f5:95:a6:18:96:1a:3a:ad:78:34:36:db:53:61:d4: 83:85:8c:c9:1a:ef:39:2d:7d:91:9e:4e:64:ca:59:a0:50:1d: 30:fa:fc:68:5e:85:44:95:79:a4:4b:5c:8c:99:0f:c7:dd:ae: 6a:8c:fb:1a:69:c4:83:45:ab:0c:28:7e:36:68:0a:ad:91:6c: 29:17:32:49:29:e1:b1:01:51:3b:a7:11:2e:5d:f4:69:cb:81: fe:fa:fa:74:a4:e8:8d:a6:4d:ad:00:c7:7d:a1:ea:f7:4b:96: a6:4b:25:41:07:f4:90:ad:81:b1:92:0a:48:99:28:ea:fc:25: 72:b5:c8:de:6e:0f:16:c2:49:6b:e5:e6:6d:df:28:6a:b6:af: 96:5a:a8:48:54:4a:54:16:79:75:bd:82:c2:e7:1a:f8:bc:29: 5d:ca:b4:ff -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUFjJ9CsGD21WfOk90u7xhr2AWhA0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI0MTEyNTA4NTEyMVoX DTI0MTEyNjA5NDIyMVowMzExMC8GA1UEAxMoQkNDNEUyMTY0NkEyRThBOUY3MEI4 RUQxMzk3Qzg1MDcxN0VERTdBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRPSco+jx7PF6CzVDKNe3ndqFJQ2W8zjoV9CaNp0KewSNhQpAjfHH8BUcI1 hr+Gso7DDDDJ27nSrYkX2myOFl77qQ0uOBBCszm3g0GoDGYvOQhJbxvGnXIMpv08 Y3n63XgovCP0MxrC0Yx2rSlvuCZthr21IuVZBVLamwoCag3FnPiOt8GfhiBxFj02 8IlwN9PmImO9wXwrH+6XlhoLZ7uKwnRaYpocKz0+8IikLOqGe/iRN73KaLFQsg4S lNpDUu6khK0A/jVBzmxtHm2z9CTI2hrAInVtwMtecUSQe6NrwYkQmLPxUstr+Lql Gx5qPLmdTy7+tW9Zz8UoYuhsup0CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBS8xOIW RqLoqfcLjtE5fIUHF+3npzAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEspk34IHy2o16lP8RcXSurMMuqebnKYUxZa rzdwWP9lBXSfht4zStwuldOnFvqiH4O35DdPFwihia82yWdD2UV9q/bCDK8vRSgh bRlHvvg6vz9kkB0DQ/phseSvd/WVphiWGjqteDQ221Nh1IOFjMka7zktfZGeTmTK WaBQHTD6/GhehUSVeaRLXIyZD8fdrmqM+xppxINFqwwofjZoCq2RbCkXMkkp4bEB UTunES5d9GnLgf76+nSk6I2mTa0Ax32h6vdLlqZLJUEH9JCtgbGSCkiZKOr8JXK1 yN5uDxbCSWvl5m3fKGq2r5ZaqEhUSlQWeXW9gsLnGvi8KV3KtP8= -----END CERTIFICATE-----Generated at Mon Nov 25 12:00:41 2024 by rpki-client on console-ams.rpki-client.org