$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: 1EDCMwvhpLf3y4Hw6GSV3zmByiJ07+SdfqTN4mFoNo8= Subject key identifier: DA:59:91:B5:A3:2F:F2:9E:E8:EB:FC:0A:73:09:72:FF:6E:69:7E:2C Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 36B93A26087A6CDB1CB0548D9551E52833B8BA0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 06A6 Signing time: Fri 25 Apr 2025 20:10:59 +0000 Manifest this update: Fri 25 Apr 2025 20:05:59 +0000 Manifest next update: Sat 26 Apr 2025 23:20:59 +0000 Files and hashes: 1: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: JFgikoosW77rCCGiBkowQ97xtUQuU8MrNrAShHYoknM=) 2: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: DN/E6aOFiV8KoFntSlnkk78fDXrIalkTpGLDVfdtSoM=) 3: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=) 4: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: CkcwIHWn0HyhgMlk4pod07b2+k/saKDQ+abUMLP21kE=) 5: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=) 6: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=) 7: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: YBcj0Y7Hb7dgFTi+rZqUgqhjt4rx48fgaI0O88QVy6s=) 8: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: gleXammGNco3AiF4159jPajnO5VNN8RX+h5bhpaHj2c=) 9: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: Ajs11kbN11P2XWfoIJiRn6ZOdr7R8IeCxJs9fIcXO2M=) 10: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: f6TUhFqS3isV+/cNk8PgUfCkyR1D652ScYlagjbFUVg=) 11: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=) 12: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=) 13: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 23:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b9:3a:26:08:7a:6c:db:1c:b0:54:8d:95:51:e5:28:33:b8:ba:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Apr 25 20:05:59 2025 GMT Not After : Apr 26 23:20:59 2025 GMT Subject: CN=DA5991B5A32FF29EE8EBFC0A730972FF6E697E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:85:24:c3:c9:82:f7:74:bc:88:4e:11:3f: 39:ac:0f:24:ca:8d:8f:a3:07:85:76:5a:69:6d:c0: 21:fd:6b:70:2f:2d:ae:a7:41:80:0e:5c:15:60:84: ab:05:45:62:f7:57:f0:ce:52:21:a6:5d:38:0f:68: 86:f4:ff:09:5e:17:63:dd:04:69:3b:04:31:6a:2d: 0a:35:27:5f:83:88:9c:2c:e0:54:10:cd:93:34:d1: ad:29:35:81:04:9b:ce:76:7c:58:94:9b:ec:00:9b: 3f:da:65:ae:52:a5:d5:b5:53:e4:46:6c:d5:b9:c6: aa:84:f2:c0:f7:13:36:1b:2f:3b:7f:3d:b4:43:26: 2f:22:a6:e6:8d:a4:b7:1a:af:8b:ca:3c:f0:24:70: b6:92:d0:9e:fc:a9:b1:39:8d:9d:a5:76:59:5c:7a: 26:f3:f4:17:a2:c5:fe:a9:94:c0:52:01:bf:0b:5d: e9:0e:03:f5:e7:c6:fc:f4:d7:0c:72:a1:1c:4e:dc: f3:27:68:4e:e3:70:b6:f1:b8:b9:6b:66:bd:e8:48: 3e:a6:53:86:c8:2f:a1:aa:1e:04:e4:bc:e3:57:f2: 3e:58:6c:02:9e:94:fe:f7:cc:f2:35:85:e0:b6:1b: f6:89:c1:2a:08:58:0b:aa:1a:e8:79:0a:6e:93:e7: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:59:91:B5:A3:2F:F2:9E:E8:EB:FC:0A:73:09:72:FF:6E:69:7E:2C X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7f:93:fd:b6:ab:33:c6:23:ea:d1:0e:b2:ec:cb:e9:0f:46: 6e:72:71:62:20:a7:26:32:84:a9:cf:41:99:b1:58:ce:48:c3: 1d:a1:1d:b4:d5:1e:64:d9:86:62:44:ec:e0:de:85:d7:87:b9: 3b:65:8f:14:99:40:28:26:d0:60:e1:12:22:e1:aa:af:a3:c5: a0:db:3f:7d:b7:45:58:4d:7d:56:52:28:44:21:33:d0:34:85: ca:35:0f:d8:df:ec:5d:c8:c7:50:40:5c:0c:65:5f:31:da:62: eb:41:bd:59:63:61:c3:ab:50:20:cd:34:17:71:e3:46:6f:cf: 5a:5b:ef:e5:02:58:41:fe:fb:67:e4:cf:c6:64:66:95:2f:65: 13:fe:5c:c0:d0:1f:42:32:24:ce:00:05:99:21:63:45:5a:aa: 81:be:d4:cb:54:90:a1:b0:ce:4a:67:ff:5c:1e:e8:68:eb:50: 69:58:ca:b1:7e:ed:dc:3c:6f:10:09:b6:b4:2f:d6:e1:aa:92: 7b:89:8a:74:07:05:76:22:fe:47:50:fe:f3:67:61:30:37:6d: 55:11:4a:a1:5d:5f:b9:83:6e:97:4e:51:0d:51:79:60:f8:e2: 9d:39:63:7e:06:ef:95:e5:7a:fc:92:5a:e2:c7:03:6f:33:25: a1:e8:a1:b2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUNrk6Jgh6bNscsFSNlVHlKDO4ugwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDQyNTIwMDU1OVoX DTI1MDQyNjIzMjA1OVowMzExMC8GA1UEAxMoREE1OTkxQjVBMzJGRjI5RUU4RUJG QzBBNzMwOTcyRkY2RTY5N0UyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPMhSTDyYL3dLyIThE/OawPJMqNj6MHhXZaaW3AIf1rcC8trqdBgA5cFWCE qwVFYvdX8M5SIaZdOA9ohvT/CV4XY90EaTsEMWotCjUnX4OInCzgVBDNkzTRrSk1 gQSbznZ8WJSb7ACbP9plrlKl1bVT5EZs1bnGqoTywPcTNhsvO389tEMmLyKm5o2k txqvi8o88CRwtpLQnvypsTmNnaV2WVx6JvP0F6LF/qmUwFIBvwtd6Q4D9efG/PTX DHKhHE7c8ydoTuNwtvG4uWtmvehIPqZThsgvoaoeBOS841fyPlhsAp6U/vfM8jWF 4LYb9onBKghYC6oa6HkKbpPnyTcCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBTaWZG1 oy/ynujr/ApzCXL/bml+LDAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAuH+T/barM8Yj6tEOsuzL6Q9GbnJxYiCnJjKEqc9B mbFYzkjDHaEdtNUeZNmGYkTs4N6F14e5O2WPFJlAKCbQYOESIuGqr6PFoNs/fbdF WE19VlIoRCEz0DSFyjUP2N/sXcjHUEBcDGVfMdpi60G9WWNhw6tQIM00F3HjRm/P Wlvv5QJYQf77Z+TPxmRmlS9lE/5cwNAfQjIkzgAFmSFjRVqqgb7Uy1SQobDOSmf/ XB7oaOtQaVjKsX7t3DxvEAm2tC/W4aqSe4mKdAcFdiL+R1D+82dhMDdtVRFKoV1f uYNul05RDVF5YPjinTljfgbvleV6/JJa4scDbzMloeihsg== -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:59 2025 by rpki-client