$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json) Hash identifier: KskB4pYLFlI52DyBB+1IhVbdDGdMC2MBEu7/pD/ZxlU= Subject key identifier: 76:D4:2D:CA:9D:04:36:3B:5D:67:1D:F1:0E:F5:95:70:5C:A4:7D:13 Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Certificate serial: 20BC648540D5DC87BB7D4AE0CFD995F04EE5A2BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft Manifest number: 07A9 Signing time: Wed 05 Nov 2025 04:52:54 +0000 Manifest this update: Wed 05 Nov 2025 04:47:54 +0000 Manifest next update: Thu 06 Nov 2025 05:02:54 +0000 Files and hashes: 1: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=) 2: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=) 3: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=) 4: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=) 5: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=) 6: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=) 7: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=) 8: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=) 9: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: yvRDAkwx59qUlhHoEeu7yHSmhkc8/GRDUIxqQESNJko=) 10: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=) 11: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=) 12: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=) 13: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=) Validation: OK Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bc:64:85:40:d5:dc:87:bb:7d:4a:e0:cf:d9:95:f0:4e:e5:a2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0 Validity Not Before: Nov 5 04:47:54 2025 GMT Not After : Nov 6 05:02:54 2025 GMT Subject: CN=76D42DCA9D04363B5D671DF10EF595705CA47D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:af:83:15:77:e9:96:ac:ed:77:04:23:af: f8:37:a4:d7:27:1d:e5:fd:ec:02:39:1e:87:5c:69: 58:3b:16:3d:16:bd:45:3f:64:b4:42:a7:7e:a9:21: dd:5e:73:1c:68:66:ed:63:d1:60:c7:55:6e:c3:d8: db:de:c9:e6:73:7e:f2:22:2f:96:47:60:d2:0a:d5: 49:ce:c4:3c:06:30:94:7f:e4:d9:a0:96:eb:c6:44: 4e:8b:99:b4:24:07:04:2d:de:ed:70:78:63:2e:d4: 0e:e3:d1:6a:d4:3c:ee:2b:4c:16:fd:3c:d9:8d:b5: 8f:bd:23:ca:02:24:fc:60:e2:9a:0b:80:34:c2:7c: 65:9f:69:4f:74:94:be:06:5f:32:0c:3f:48:cc:ac: 18:d8:d2:3a:ec:76:58:38:0b:ee:85:de:36:8e:1f: 5d:e6:81:cb:b4:28:fc:28:6c:a0:81:32:81:1f:62: 38:29:65:0f:03:a1:41:3b:e1:e3:4b:50:19:7a:11: da:3c:0a:5a:fb:f2:1f:92:65:ac:c0:4c:1d:ed:7d: 51:a5:7e:9d:80:1c:b5:cd:57:e6:a9:83:72:d0:80: 36:99:40:b2:74:56:66:b6:7d:f3:95:3d:32:7d:69: 4a:7d:d6:c2:c6:d2:8d:62:e9:71:89:1b:38:7a:c2: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D4:2D:CA:9D:04:36:3B:5D:67:1D:F1:0E:F5:95:70:5C:A4:7D:13 X509v3 Authority Key Identifier: keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8c:ba:47:c0:7e:b6:2f:5e:a0:f7:f4:c1:55:40:3f:f6:b8: ed:e0:20:14:6c:1d:63:3a:85:38:07:17:88:6c:77:fe:9d:2c: d9:33:23:5d:9c:4c:61:81:17:c0:e8:22:91:6f:10:ae:6b:60: f4:8e:f2:d7:ff:54:36:c9:c8:52:ad:b8:3c:75:ed:cf:72:5c: b5:28:23:a6:34:ba:61:40:12:c4:ad:39:1c:6a:c1:c6:7c:c0: 1a:43:1b:dd:f1:3f:36:65:f8:ae:e0:69:63:46:ce:c1:33:d7: d9:d7:56:4f:60:a0:74:c1:e5:cb:aa:36:5b:9f:0a:64:99:ea: 02:4c:8f:89:57:3c:c6:4b:1e:a7:ca:47:46:09:cb:6d:e9:50: 5e:8f:75:57:45:8a:d8:e2:5c:e2:8e:52:03:c0:65:45:12:67: 2d:e5:2c:97:88:f3:b0:70:5c:1a:4f:18:bc:47:24:98:62:d3: 03:5e:66:8b:1e:7b:e9:43:17:d9:ff:6e:25:a8:97:79:ef:7d: 35:f5:1c:79:0b:68:f6:21:5d:b2:86:ae:89:48:92:a6:67:b6: 70:9c:dd:d6:dc:0f:4d:84:ee:29:66:51:23:e6:70:68:cd:a4: 65:28:36:d6:2b:13:c1:9f:27:ac:d4:c5:9d:83:b6:a0:ca:ed: 1c:42:74:d1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUILxkhUDV3Ie7fUrgz9mV8E7lorswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MTEwNTA0NDc1NFoX DTI1MTEwNjA1MDI1NFowMzExMC8GA1UEAxMoNzZENDJEQ0E5RDA0MzYzQjVENjcx REYxMEVGNTk1NzA1Q0E0N0QxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgQr4MVd+mWrO13BCOv+Dek1ycd5f3sAjkeh1xpWDsWPRa9RT9ktEKnfqkh 3V5zHGhm7WPRYMdVbsPY297J5nN+8iIvlkdg0grVSc7EPAYwlH/k2aCW68ZETouZ tCQHBC3e7XB4Yy7UDuPRatQ87itMFv082Y21j70jygIk/GDimguANMJ8ZZ9pT3SU vgZfMgw/SMysGNjSOux2WDgL7oXeNo4fXeaBy7Qo/ChsoIEygR9iOCllDwOhQTvh 40tQGXoR2jwKWvvyH5JlrMBMHe19UaV+nYActc1X5qmDctCANplAsnRWZrZ985U9 Mn1pSn3WwsbSjWLpcYkbOHrCVwsCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBR21C3K nQQ2O11nHfEO9ZVwXKR9EzAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0 MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2 ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAaoy6R8B+ti9eoPf0wVVAP/a47eAgFGwdYzqFOAcX iGx3/p0s2TMjXZxMYYEXwOgikW8Qrmtg9I7y1/9UNsnIUq24PHXtz3JctSgjpjS6 YUASxK05HGrBxnzAGkMb3fE/NmX4ruBpY0bOwTPX2ddWT2CgdMHly6o2W58KZJnq AkyPiVc8xksep8pHRgnLbelQXo91V0WK2OJc4o5SA8BlRRJnLeUsl4jzsHBcGk8Y vEckmGLTA15mix576UMX2f9uJaiXee99NfUceQto9iFdsoauiUiSpme2cJzd1twP TYTuKWZRI+ZwaM2kZSg21isTwZ8nrNTFnYO2oMrtHEJ00Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:59 2025 by rpki-client