$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: 7v0Qjt7LFLvMgY+XEywKLU/5NekYJwUCJngaH7y14Dc= Subject key identifier: 4C:86:28:19:74:89:4D:24:ED:94:9B:17:62:58:3F:B2:90:BC:92:89 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 5426848238669C381FF5522D8B26617E77A9955C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 0846 Signing time: Sun 01 Mar 2026 14:03:59 +0000 Manifest this update: Sun 01 Mar 2026 13:58:59 +0000 Manifest next update: Mon 02 Mar 2026 17:41:59 +0000 Files and hashes: 1: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=) 2: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=) 3: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=) 4: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=) 5: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=) 6: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=) 7: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=) 8: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=) 9: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=) 10: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=) 11: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: qlo/U6sEBK2tP+1VhgMeF0dV9gMs7ULcrPgjnh7FMzQ=) 12: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=) 13: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 17:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:26:84:82:38:66:9c:38:1f:f5:52:2d:8b:26:61:7e:77:a9:95:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Mar 1 13:58:59 2026 GMT Not After : Mar 2 17:41:59 2026 GMT Subject: CN=4C86281974894D24ED949B1762583FB290BC9289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:e7:35:6c:9a:8c:74:5c:b3:07:c4:77:d6: 5c:04:fa:9c:5d:0c:67:28:71:8a:70:9a:02:4b:8d: 6c:b8:d7:7e:9b:82:42:12:2c:d4:68:d3:70:42:ea: 65:35:0b:f3:49:68:c3:d0:cc:ba:59:26:3e:19:87: b2:3c:ea:3a:03:31:a5:da:c3:23:b1:c4:ee:fe:3b: b5:0a:2c:75:87:e7:ce:90:2c:91:c6:9c:00:20:b8: b0:5a:04:05:4f:d5:cb:a0:c3:37:81:f4:f5:bf:dc: d1:05:95:47:6b:c5:01:f8:f6:dc:c4:a2:e4:c3:8a: fd:49:3a:9a:d3:d3:6d:cc:86:7f:72:fc:76:81:e0: 0f:75:c5:dc:72:ae:31:00:bd:a9:c8:7d:b6:21:ff: ce:d4:b9:80:80:bf:f2:23:de:27:9d:97:0e:20:cb: 89:03:ba:b7:dd:84:05:32:ba:63:68:b2:76:a2:45: e5:5c:5f:a3:0b:4f:1a:c6:2d:e3:7f:22:0c:46:e9: 81:41:ad:51:97:c3:99:23:d4:4b:81:ee:3e:fb:af: e4:de:07:46:46:83:53:2a:fb:50:9e:d7:ac:df:01: 32:7f:3d:24:21:0c:95:34:ac:cb:76:c2:97:b2:8f: 15:42:95:e3:73:b2:90:c0:4b:5d:2a:59:86:20:40: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:28:19:74:89:4D:24:ED:94:9B:17:62:58:3F:B2:90:BC:92:89 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9f:14:5b:41:78:23:48:09:8d:87:62:19:ea:34:ed:6c:5f: cf:19:36:cb:96:da:f8:5c:5d:b2:30:c2:7d:0c:f7:d5:cb:94: e6:52:0b:c5:b0:ac:73:92:1c:5e:76:0f:cb:9c:1b:f1:b1:dc: 44:32:6e:78:80:e2:74:66:c2:8e:a2:75:28:dc:da:99:5b:e3: fa:25:22:55:6c:39:c9:0f:3f:3c:60:8f:bc:9e:ca:cb:62:a7: 48:85:77:10:1b:64:82:04:90:db:b1:73:7d:cf:52:b1:64:54: 50:78:38:a7:63:aa:db:c1:66:3e:05:68:a0:bb:a4:b5:d1:d7: a7:79:24:71:19:bd:0b:a1:9e:39:ee:be:7b:8a:2a:a1:de:17: cd:ca:d4:4f:52:fd:92:09:89:c8:bf:01:89:0e:9d:eb:a4:a8: 65:3e:aa:21:79:c7:ac:f6:2b:e3:04:86:e7:b7:24:ce:35:68: 9f:c7:1e:30:e6:4b:d4:aa:35:7c:4c:21:ce:6b:60:b5:4c:db: 63:8e:13:95:56:bd:c0:f8:af:0f:bd:32:c2:10:c8:ce:48:dc: 38:c5:24:a2:a6:9e:e2:02:a9:b1:03:f8:8a:06:c4:41:5c:a9: b1:33:92:bc:cb:4a:39:a2:6e:92:dd:ca:8c:69:4f:f8:9c:4b: da:39:6d:f0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUVCaEgjhmnDgf9VItiyZhfneplVwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI2MDMwMTEzNTg1OVoX DTI2MDMwMjE3NDE1OVowMzExMC8GA1UEAxMoNEM4NjI4MTk3NDg5NEQyNEVEOTQ5 QjE3NjI1ODNGQjI5MEJDOTI4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdF5zVsmox0XLMHxHfWXAT6nF0MZyhxinCaAkuNbLjXfpuCQhIs1GjTcELq ZTUL80low9DMulkmPhmHsjzqOgMxpdrDI7HE7v47tQosdYfnzpAskcacACC4sFoE BU/Vy6DDN4H09b/c0QWVR2vFAfj23MSi5MOK/Uk6mtPTbcyGf3L8doHgD3XF3HKu MQC9qch9tiH/ztS5gIC/8iPeJ52XDiDLiQO6t92EBTK6Y2iydqJF5VxfowtPGsYt 438iDEbpgUGtUZfDmSPUS4HuPvuv5N4HRkaDUyr7UJ7XrN8BMn89JCEMlTSsy3bC l7KPFUKV43OykMBLXSpZhiBAPIsCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBRMhigZ dIlNJO2UmxdiWD+ykLySiTAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAfJ8UW0F4I0gJjYdiGeo07Wxfzxk2y5ba+FxdsjDC fQz31cuU5lILxbCsc5IcXnYPy5wb8bHcRDJueIDidGbCjqJ1KNzamVvj+iUiVWw5 yQ8/PGCPvJ7Ky2KnSIV3EBtkggSQ27Fzfc9SsWRUUHg4p2Oq28FmPgVooLuktdHX p3kkcRm9C6GeOe6+e4oqod4XzcrUT1L9kgmJyL8BiQ6d66SoZT6qIXnHrPYr4wSG 57ckzjVon8ceMOZL1Ko1fEwhzmtgtUzbY44TlVa9wPivD70ywhDIzkjcOMUkoqae 4gKpsQP4igbEQVypsTOSvMtKOaJukt3KjGlP+JxL2jlt8A== -----END CERTIFICATE-----Generated at Sun Mar 1 23:39:24 2026 by rpki-client