$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: TG3ZJ1LGf1MdsDL+anO+BQH8ycNRM1ylqUbA7kPLS/U= Subject key identifier: FE:1D:0D:BE:78:F6:2E:7D:55:A5:7C:0D:22:5C:19:D7:F5:AA:82:0E Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 4503BE08908A5FE04409B29A02FD37558B8BDF1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 07FC Signing time: Sat 14 Jun 2025 18:23:57 +0000 Manifest this update: Sat 14 Jun 2025 18:18:57 +0000 Manifest next update: Sun 15 Jun 2025 21:49:57 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 3: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: 8E4cGv4aa+Tro7QmYQqJG76P8bd98H2tlzFMlgAgOAw=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) 5: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 21:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:03:be:08:90:8a:5f:e0:44:09:b2:9a:02:fd:37:55:8b:8b:df:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Jun 14 18:18:57 2025 GMT Not After : Jun 15 21:49:57 2025 GMT Subject: CN=FE1D0DBE78F62E7D55A57C0D225C19D7F5AA820E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:2a:fc:dc:4b:59:2e:6a:7a:33:2f:10:da: c2:08:35:4f:18:8a:8c:53:14:c5:5b:9f:b3:fc:b3: cf:c4:29:4f:dc:ea:92:10:03:7b:9d:0b:31:0c:23: 7d:84:3e:44:b2:c1:9b:a7:fb:6e:6d:70:6f:15:54: 72:08:15:65:f0:0c:0a:70:b5:6a:45:af:35:be:b0: 67:ff:25:6e:86:ae:8a:3b:15:10:1f:cc:fa:c0:30: 93:a2:03:1e:9f:a9:6b:9c:fa:02:95:ed:16:9d:4d: ba:50:e7:45:3c:22:d4:a4:c4:94:0b:f6:73:83:57: 4c:00:44:c6:c0:8c:74:ed:db:6a:28:cf:3b:45:6e: c0:85:e7:37:71:3b:10:e2:62:2d:e1:a7:fd:5d:ab: 27:55:15:f7:0d:b5:42:46:dd:1b:a5:7c:2e:30:0d: 0b:1d:b4:0e:f6:1c:0a:44:df:ab:94:bb:b3:ac:ca: b6:9b:71:16:27:88:30:2d:19:99:5f:9b:f4:3f:c4: 70:30:77:3c:4a:5a:2c:5c:f0:b2:5f:32:2b:10:f9: 6f:7d:65:f5:ec:1b:65:8e:ca:b0:bd:e6:1e:88:64: 90:52:7d:96:ab:0d:5a:61:1c:69:5c:35:ea:53:a4: 96:8f:c2:62:36:26:11:8b:67:d3:ab:13:02:02:90: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:0D:BE:78:F6:2E:7D:55:A5:7C:0D:22:5C:19:D7:F5:AA:82:0E X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:30:11:c1:ca:8b:c2:f4:32:d4:51:ca:e7:41:45:d7:76:f1: d3:04:ef:8c:e2:f9:da:19:c9:74:bd:cc:4b:ea:cb:2f:18:47: e3:6a:34:86:c5:e6:5f:7d:6d:67:ef:b3:d5:94:26:37:3d:2b: 58:a8:ff:a1:e4:77:68:65:6b:b9:74:dc:77:5d:e2:76:58:26: 8b:89:a9:7b:74:6d:3c:4a:e1:c3:a5:c0:c1:60:bc:b4:6c:21: 7c:78:8b:cd:74:a6:fb:75:1e:4b:b6:3d:30:44:65:bf:58:59: 1d:b5:d8:5d:00:9f:c1:bb:fd:3d:cb:4b:cf:58:85:b2:d6:6d: 9c:b9:35:d9:9c:58:d2:2c:84:e2:01:2e:50:89:5f:fc:a1:b2: 2c:54:a4:0f:a8:b3:a0:e4:c4:86:a8:37:21:33:7c:4a:cd:1f: 95:37:8a:65:f8:00:14:47:d7:0f:f8:eb:2a:68:21:56:7d:a5: 95:9c:ed:48:4f:93:ee:2d:43:90:a9:be:f7:f0:1a:d9:50:c6: 90:4c:2d:57:c6:4c:cd:16:23:3b:f5:c4:00:a0:9b:61:54:15: da:6a:7f:fc:21:64:38:96:95:cf:89:20:66:9e:b4:66:9b:88: ce:22:ec:52:6b:6b:10:5f:49:08:59:08:84:04:f7:e6:8f:82: 89:f0:32:24 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIURQO+CJCKX+BECbKaAv03VYuL3x0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDYxNDE4MTg1N1oX DTI1MDYxNTIxNDk1N1owMzExMC8GA1UEAxMoRkUxRDBEQkU3OEY2MkU3RDU1QTU3 QzBEMjI1QzE5RDdGNUFBODIwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOM8KvzcS1kuanozLxDawgg1TxiKjFMUxVufs/yzz8QpT9zqkhADe50LMQwj fYQ+RLLBm6f7bm1wbxVUcggVZfAMCnC1akWvNb6wZ/8lboauijsVEB/M+sAwk6ID Hp+pa5z6ApXtFp1NulDnRTwi1KTElAv2c4NXTABExsCMdO3baijPO0VuwIXnN3E7 EOJiLeGn/V2rJ1UV9w21QkbdG6V8LjANCx20DvYcCkTfq5S7s6zKtptxFieIMC0Z mV+b9D/EcDB3PEpaLFzwsl8yKxD5b31l9ewbZY7KsL3mHohkkFJ9lqsNWmEcaVw1 6lOklo/CYjYmEYtn06sTAgKQPusCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT+HQ2+ ePYufVWlfA0iXBnX9aqCDjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACswEcHKi8L0MtRRyudBRdd28dME74zi+doZ yXS9zEvqyy8YR+NqNIbF5l99bWfvs9WUJjc9K1io/6Hkd2hla7l03Hdd4nZYJouJ qXt0bTxK4cOlwMFgvLRsIXx4i810pvt1Hku2PTBEZb9YWR212F0An8G7/T3LS89Y hbLWbZy5NdmcWNIshOIBLlCJX/yhsixUpA+os6DkxIaoNyEzfErNH5U3imX4ABRH 1w/46ypoIVZ9pZWc7UhPk+4tQ5CpvvfwGtlQxpBMLVfGTM0WIzv1xACgm2FUFdpq f/whZDiWlc+JIGaetGabiM4i7FJraxBfSQhZCIQE9+aPgonwMiQ= -----END CERTIFICATE-----Generated at Sun Jun 15 05:02:55 2025 by rpki-client