$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: GXdyG4ZbHFKSiqWLfKHf91F6HgJoC3iWTtGyh4wxEA4= Subject key identifier: 4C:F4:D6:9B:21:E3:5C:39:EB:49:4C:A0:95:DF:4E:C5:46:07:51:6F Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 443794785481630953B56D6ECD4B3BFBE738A575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0840 Signing time: Mon 04 Aug 2025 06:33:23 +0000 Manifest this update: Mon 04 Aug 2025 06:28:23 +0000 Manifest next update: Tue 05 Aug 2025 09:26:23 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) 3: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 5: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: lEuzpSfEUGccAUQ9pvs4W+azFYDUlBBvSh5uu/cpd2w=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 09:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:37:94:78:54:81:63:09:53:b5:6d:6e:cd:4b:3b:fb:e7:38:a5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Aug 4 06:28:23 2025 GMT Not After : Aug 5 09:26:23 2025 GMT Subject: CN=4CF4D69B21E35C39EB494CA095DF4EC54607516F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:25:ac:1e:24:1c:c4:42:9a:58:64:4b:d0: 54:fd:c0:38:5e:f6:a0:35:9d:84:42:b6:ea:5e:3a: d9:17:e1:f1:25:e0:68:01:0f:b6:32:88:84:ef:4c: 29:64:50:91:00:f2:2e:f3:74:37:71:cc:91:10:2e: 42:8e:5f:9b:32:00:d6:9a:96:5a:be:8b:12:66:e4: d5:24:b7:74:db:0c:0f:eb:d1:92:bb:3d:9b:63:c8: ac:00:d1:7c:cb:08:eb:49:f7:29:96:12:0b:18:77: a3:58:05:7a:b6:ed:da:ac:c5:b4:a2:36:6e:18:f8: be:3c:68:9c:99:a9:4c:e2:9e:a1:d8:75:cd:7c:43: 14:60:15:f1:ad:e6:a3:2d:83:53:30:4a:c4:b2:54: 08:e8:e6:72:8a:03:d7:15:53:29:cc:bc:e7:a7:22: 8c:b5:42:c2:8a:7e:19:97:ad:d9:94:14:25:b8:63: 19:6e:e4:ff:6f:ee:af:51:7a:ee:5c:66:3f:5f:a2: 35:89:68:00:4f:e3:26:e6:a6:e4:ef:fe:5b:53:da: f4:37:22:ae:03:ef:ca:6b:c3:d7:c6:cb:2b:b4:ee: 77:5c:7e:2c:2f:6a:fb:22:b9:f7:4f:ee:ee:84:26: d1:a4:76:be:2e:0f:ce:9f:31:7d:67:f7:39:f0:4d: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F4:D6:9B:21:E3:5C:39:EB:49:4C:A0:95:DF:4E:C5:46:07:51:6F X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:45:95:57:a1:d1:c6:93:97:74:c0:ae:89:00:06:74:6c:04: d6:b1:16:99:5f:5a:e7:e8:e9:ea:2f:f2:84:fb:61:3f:55:87: fb:a6:77:b0:a8:79:e4:e3:44:49:2f:05:f6:ae:81:26:d9:3a: dd:92:f8:9c:cc:bb:af:02:d0:44:22:a5:72:f4:e9:a0:d8:fc: 82:16:15:60:24:64:1e:08:b8:8e:96:ff:e0:97:2c:cc:69:c7: df:c3:c6:e0:eb:81:0a:4d:5c:c6:03:06:b5:b1:0f:e7:bd:5f: e4:b2:12:b1:b1:da:03:75:f8:5b:4f:db:1c:0f:af:d5:19:13: 53:24:4e:10:7f:01:85:d2:81:4f:56:96:f7:a3:01:6c:79:99: 96:18:72:f7:d3:af:97:99:ec:27:b6:4e:c6:2e:6f:d9:4a:0b: d8:d7:99:67:c8:0b:ed:9d:00:63:4d:57:2c:f8:d6:ee:6f:d1: 5a:7d:75:13:93:02:f7:d5:71:df:6d:91:d9:02:8c:26:98:4c: a7:fe:39:e3:1f:52:39:fb:2d:cd:00:4c:91:8d:c1:a9:62:a8: 58:2e:c1:d5:08:23:df:b0:85:8d:23:fd:81:06:d0:23:d2:d0: 42:89:19:0a:e0:1c:14:80:66:4d:4b:16:d4:24:ec:20:07:51: 80:09:ee:0e -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIURDeUeFSBYwlTtW1uzUs7++c4pXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDgwNDA2MjgyM1oX DTI1MDgwNTA5MjYyM1owMzExMC8GA1UEAxMoNENGNEQ2OUIyMUUzNUMzOUVCNDk0 Q0EwOTVERjRFQzU0NjA3NTE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN01JaweJBzEQppYZEvQVP3AOF72oDWdhEK26l462Rfh8SXgaAEPtjKIhO9M KWRQkQDyLvN0N3HMkRAuQo5fmzIA1pqWWr6LEmbk1SS3dNsMD+vRkrs9m2PIrADR fMsI60n3KZYSCxh3o1gFerbt2qzFtKI2bhj4vjxonJmpTOKeodh1zXxDFGAV8a3m oy2DUzBKxLJUCOjmcooD1xVTKcy856cijLVCwop+GZet2ZQUJbhjGW7k/2/ur1F6 7lxmP1+iNYloAE/jJuam5O/+W1Pa9DcirgPvymvD18bLK7Tud1x+LC9q+yK590/u 7oQm0aR2vi4Pzp8xfWf3OfBN7hECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRM9Nab IeNcOetJTKCV307FRgdRbzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJFlVeh0caTl3TArokABnRsBNaxFplfWufo 6eov8oT7YT9Vh/umd7CoeeTjREkvBfaugSbZOt2S+JzMu68C0EQipXL06aDY/IIW FWAkZB4IuI6W/+CXLMxpx9/DxuDrgQpNXMYDBrWxD+e9X+SyErGx2gN1+FtP2xwP r9UZE1MkThB/AYXSgU9WlvejAWx5mZYYcvfTr5eZ7Ce2TsYub9lKC9jXmWfIC+2d AGNNVyz41u5v0Vp9dROTAvfVcd9tkdkCjCaYTKf+OeMfUjn7Lc0ATJGNwaliqFgu wdUII9+whY0j/YEG0CPS0EKJGQrgHBSAZk1LFtQk7CAHUYAJ7g4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:34:34 2025 by rpki-client