$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json) Hash identifier: Z+p9IfzO6FSuXrENBEQxkyeLNemoSo1MAwsiu9mS590= Subject key identifier: 16:99:C4:D3:48:24:93:DB:BB:29:00:F6:88:50:82:47:1D:41:38:27 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 5BD166712F8DDDAC66B7A99E30340807FB451248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft Manifest number: 07CA Signing time: Fri 25 Apr 2025 21:20:55 +0000 Manifest this update: Fri 25 Apr 2025 21:15:55 +0000 Manifest next update: Sun 27 Apr 2025 00:18:55 +0000 Files and hashes: 1: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: 6oVWbbqVFk6Pwgux9V8jfDQRsMYOVT5jirPBSL3Wig4=) 2: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=) 3: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: GMRaZkN3zIDxVuJVnldek+MoIhPgvQ/+nioWSoYNFg0=) 4: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=) 5: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=) 6: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=) 7: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=) 8: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: lqCEmZ9NaCjaWEhq0OXTc04xBaaLhH59AP38axB9xQk=) 9: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=) 10: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: eglNokA0036JbGNEJ4JBpUI9W7LtrNCo3IjzCiifpEo=) 11: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jmlPHqT2zn/G8VxGtz4qGDGVkC091Y4a8xRHPA/+0+0=) 12: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: nZRdseJLG8pcz60dA2dIP+lQPJZ68YEbyLu8K+1sxGI=) 13: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=) 14: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=) 15: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: XsSHiraeLYNQTJR5HGAY6vwQ9Scu9lRrIHdSI54V+7M=) 16: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=) 17: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=) 18: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s=) 19: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=) 20: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=) 21: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=) 22: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=) 23: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=) 24: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=) 25: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=) 26: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: hJFUedJxlwrGsuBiVRcEB429TcpnC3Bw2MEl2q91qrM=) 27: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: rjHLbg5RxNx+OSrihRQaxhyOJyLwHXme40chbILQOQQ=) 28: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: sr7r8uO67cDPo72NjWdP3dlG7qJrC9xZ+w35SmZvRyk=) 29: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=) 30: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: YBRtGgVo128HYmmYrlq/rtgksrT7YQggo7xicgUIVnM=) 31: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=) 32: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: s7/DIm0yufCE9ckQwE1mH+AKTh2O991S3A0bkngFp88=) 33: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 00:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d1:66:71:2f:8d:dd:ac:66:b7:a9:9e:30:34:08:07:fb:45:12:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Apr 25 21:15:55 2025 GMT Not After : Apr 27 00:18:55 2025 GMT Subject: CN=1699C4D3482493DBBB2900F6885082471D413827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:18:fa:3f:49:5a:05:cd:77:dd:44:1c:6a: 03:3d:78:59:6c:78:e1:28:fe:9b:33:4d:e2:14:f2: 40:e9:95:1b:77:34:4d:d0:0b:20:37:70:a2:12:26: 19:15:f0:a1:2b:2f:86:2a:75:6e:cc:8c:31:7c:3c: 25:04:a9:ed:cd:7b:90:87:83:25:c1:11:4b:e4:14: ba:47:f1:76:bd:83:55:c1:a5:74:9a:92:28:86:31: d2:57:1a:f0:56:c0:a2:38:01:b2:07:51:56:be:35: 86:a1:0c:c8:88:17:81:49:05:4e:84:8f:e4:80:69: ee:11:88:00:75:fa:d6:9f:10:7a:74:be:1f:76:75: 32:52:1e:e6:26:c6:26:87:aa:36:cd:4f:b6:ab:93: 72:64:12:ae:f6:0c:70:1a:fb:2b:9d:18:aa:ec:f0: 8b:a3:7d:d1:5e:f1:46:83:e3:dc:04:ef:2d:e5:5d: db:e4:a8:09:8a:ba:59:78:1c:63:0c:df:bf:fb:76: 0f:c8:a5:b9:e6:d4:2a:3f:af:e8:c2:86:4d:c5:7f: ab:04:06:5d:9c:1b:f6:d8:94:85:ed:dc:67:6e:37: 48:4e:5d:0b:a4:55:62:62:93:0f:cc:29:8c:4e:2b: a7:64:64:47:a5:9f:cc:08:bf:98:4e:ee:0b:0f:90: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:C4:D3:48:24:93:DB:BB:29:00:F6:88:50:82:47:1D:41:38:27 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:89:ef:4d:0f:79:9f:c0:7a:e6:3a:2f:06:07:c9:d4:6d:a4: ad:34:af:4a:e3:bc:63:c4:29:ee:91:cc:32:e0:84:fc:e9:53: 0e:b5:06:8a:e5:69:35:c5:87:05:3b:9d:9b:cc:de:61:c1:a7: ff:5b:51:87:3c:d4:89:f8:e3:fb:ff:b3:a1:45:40:ed:2e:a5: 50:28:87:f8:01:5e:85:9e:71:48:c3:fb:86:ba:e7:82:7a:0e: 83:6a:7b:2d:88:af:41:83:68:4f:d1:e7:1e:55:31:37:70:2d: 9c:cb:7e:bb:29:31:fe:ea:9b:55:43:8c:66:fb:c6:ae:48:1b: ce:41:d1:81:f2:5f:30:75:56:81:3f:ba:3b:08:6b:77:6b:c4: 29:d3:31:fb:09:3f:bb:d0:3a:91:dd:d4:29:04:2f:78:73:45: 28:f7:5d:a6:9e:5f:ca:92:b4:58:ac:65:bc:8d:d8:3e:f1:26: 70:af:6d:65:c8:ac:cb:c2:c9:01:7d:10:08:44:09:01:29:8b: b2:e9:50:41:e3:80:bf:5e:27:cf:9c:5b:05:a4:3c:5a:49:5b: 3b:98:ba:e5:67:76:6e:80:df:27:2b:59:32:ca:f3:a3:2c:a9: cc:8a:10:92:42:e3:96:f2:d2:94:17:63:f3:13:7e:e7:4e:7d: 6a:a6:50:82 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUW9FmcS+N3axmt6meMDQIB/tFEkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MDQyNTIxMTU1NVoX DTI1MDQyNzAwMTg1NVowMzExMC8GA1UEAxMoMTY5OUM0RDM0ODI0OTNEQkJCMjkw MEY2ODg1MDgyNDcxRDQxMzgyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxeGPo/SVoFzXfdRBxqAz14WWx44Sj+mzNN4hTyQOmVG3c0TdALIDdwohIm GRXwoSsvhip1bsyMMXw8JQSp7c17kIeDJcERS+QUukfxdr2DVcGldJqSKIYx0lca 8FbAojgBsgdRVr41hqEMyIgXgUkFToSP5IBp7hGIAHX61p8QenS+H3Z1MlIe5ibG JoeqNs1PtquTcmQSrvYMcBr7K50Yquzwi6N90V7xRoPj3ATvLeVd2+SoCYq6WXgc Ywzfv/t2D8iluebUKj+v6MKGTcV/qwQGXZwb9tiUhe3cZ243SE5dC6RVYmKTD8wp jE4rp2RkR6WfzAi/mE7uCw+Q36kCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQWmcTT SCST27spAPaIUIJHHUE4JzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5 QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeJ700PeZ/AeuY6LwYHydRtpK00r0rjvGPE Ke6RzDLghPzpUw61BorlaTXFhwU7nZvM3mHBp/9bUYc81In44/v/s6FFQO0upVAo h/gBXoWecUjD+4a654J6DoNqey2Ir0GDaE/R5x5VMTdwLZzLfrspMf7qm1VDjGb7 xq5IG85B0YHyXzB1VoE/ujsIa3drxCnTMfsJP7vQOpHd1CkEL3hzRSj3XaaeX8qS tFisZbyN2D7xJnCvbWXIrMvCyQF9EAhECQEpi7LpUEHjgL9eJ8+cWwWkPFpJWzuY uuVndm6A3ycrWTLK86MsqcyKEJJC45by0pQXY/MTfudOfWqmUII= -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:47 2025 by rpki-client