$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: bW+4X2ROhW8wcbvrkzVGScY2dWftVoo6+WpxptmU43M= Subject key identifier: 1C:FA:0A:74:E7:F4:DE:39:45:EB:11:B5:13:A7:49:90:1C:5C:8B:67 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 3EA5C3DC46402061B51C197CF72FB0FE8D03A7ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 07B9 Signing time: Fri 25 Apr 2025 18:10:17 +0000 Manifest this update: Fri 25 Apr 2025 18:05:17 +0000 Manifest next update: Sat 26 Apr 2025 18:51:17 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: LAAnEwXyDjatEYAomEc0Jb20tMIcHmddd3nuThwfaD8=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: 7FdETKoxElVjcOsDJIaDUyil4Bs1FCFVotpYBRxrob0=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: nhBNadwaQjT5vGs//PSioBj4Cmmoe+zwvDEtSqAfO20=) 4: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: E76qCyiamh43IrAlSeINWGr9A7fb6C4N1hJ5HEf0GaM=) 5: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: vcYtX/zhnpbPSWPDFx3/cEWTRhmP12Y2ZAhfMklFx/Q=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a5:c3:dc:46:40:20:61:b5:1c:19:7c:f7:2f:b0:fe:8d:03:a7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Apr 25 18:05:17 2025 GMT Not After : Apr 26 18:51:17 2025 GMT Subject: CN=1CFA0A74E7F4DE3945EB11B513A749901C5C8B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:4a:a8:f9:fb:e8:b8:f6:9f:84:a5:4c:da: 3a:7c:86:d7:24:ff:d6:1a:b7:72:78:45:d9:5d:38: 05:0d:a6:9f:e2:fd:dd:54:4a:75:17:ae:7a:0c:d0: 30:f5:64:2b:67:ce:11:87:dc:1a:67:3e:1c:2b:e1: 03:05:79:84:b0:bd:58:82:de:60:ec:df:f4:3d:c4: 8b:c5:11:74:e0:7e:82:88:c2:d4:59:5c:1d:af:3d: 85:ce:b6:f7:6f:04:2e:31:a9:21:16:93:c9:fa:28: 5f:3f:43:48:8e:7c:a8:44:8d:00:49:29:d2:9e:e6: 36:53:42:3e:26:49:0f:45:c9:f7:d6:96:84:f1:3b: 94:f4:ae:7e:83:1d:fc:ab:27:4a:8f:6e:26:b6:a3: fb:b9:14:03:f5:ca:5f:63:24:c8:55:c7:79:6c:36: d6:6d:00:09:d0:e5:33:14:3c:57:e8:bb:76:b4:8a: 9e:74:43:1a:f8:53:84:cb:02:23:6b:d1:c8:e0:64: f0:62:88:31:ef:f1:45:4d:38:45:a8:c8:b8:2b:e9: ff:73:9a:5c:52:1a:a0:61:4a:b7:d7:1e:4f:88:78: db:84:15:25:79:42:37:bf:06:92:68:4e:97:08:bb: 3b:70:96:78:7f:72:98:83:d5:9d:82:21:f8:c8:46: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FA:0A:74:E7:F4:DE:39:45:EB:11:B5:13:A7:49:90:1C:5C:8B:67 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:28:f5:79:69:bd:ed:ff:24:ae:29:d6:96:77:54:3b:fb:81: f0:a5:90:35:ff:14:78:20:c0:ef:32:f9:39:d4:40:94:21:09: 51:e7:8a:94:2f:19:68:ac:5c:2f:8c:ee:24:31:70:09:c1:d1: b8:d3:c8:e6:22:42:dd:6f:be:e8:53:64:e4:15:e6:b0:27:a5: 1f:c7:e8:a8:bd:43:d5:83:66:99:a7:e3:41:cb:63:cf:33:53: 93:2a:1d:d0:60:03:1c:c1:db:0b:24:02:ee:83:24:f6:21:fb: e6:e8:08:ad:2e:ac:98:a7:06:e9:94:ca:f3:61:ac:15:3f:e1: c5:35:fa:58:35:5f:39:ac:41:aa:f6:a0:f3:32:dc:a8:db:4f: 7c:36:2d:37:3e:d9:01:6f:e6:36:d4:29:d6:42:f3:82:4b:78: a9:73:96:2e:80:d0:13:ef:0d:76:6a:77:a7:16:8f:61:e6:31: cd:51:a6:44:2d:23:84:2d:c6:37:5a:ed:2a:18:2b:9c:83:4a: 14:20:7c:94:e2:a4:9a:00:8c:ed:02:02:6f:f1:4f:66:8a:63: cd:db:12:bd:81:c9:c3:c2:9a:e2:19:5d:d3:bd:65:2d:24:d5: 54:f3:6b:2f:3e:83:73:05:0a:05:d4:a9:9c:cb:58:6f:08:7d: c0:3d:1d:05 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUPqXD3EZAIGG1HBl89y+w/o0Dp+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MDQyNTE4MDUxN1oX DTI1MDQyNjE4NTExN1owMzExMC8GA1UEAxMoMUNGQTBBNzRFN0Y0REUzOTQ1RUIx MUI1MTNBNzQ5OTAxQzVDOEI2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKlSqj5++i49p+EpUzaOnyG1yT/1hq3cnhF2V04BQ2mn+L93VRKdReuegzQ MPVkK2fOEYfcGmc+HCvhAwV5hLC9WILeYOzf9D3Ei8URdOB+gojC1FlcHa89hc62 928ELjGpIRaTyfooXz9DSI58qESNAEkp0p7mNlNCPiZJD0XJ99aWhPE7lPSufoMd /KsnSo9uJraj+7kUA/XKX2MkyFXHeWw21m0ACdDlMxQ8V+i7drSKnnRDGvhThMsC I2vRyOBk8GKIMe/xRU04RajIuCvp/3OaXFIaoGFKt9ceT4h424QVJXlCN78GkmhO lwi7O3CWeH9ymIPVnYIh+MhGjAUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQc+gp0 5/TeOUXrEbUTp0mQHFyLZzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEo9Xlpve3/JK4p1pZ3VDv7gfClkDX/FHgg wO8y+TnUQJQhCVHnipQvGWisXC+M7iQxcAnB0bjTyOYiQt1vvuhTZOQV5rAnpR/H 6Ki9Q9WDZpmn40HLY88zU5MqHdBgAxzB2wskAu6DJPYh++boCK0urJinBumUyvNh rBU/4cU1+lg1XzmsQar2oPMy3KjbT3w2LTc+2QFv5jbUKdZC84JLeKlzli6A0BPv DXZqd6cWj2HmMc1RpkQtI4Qtxjda7SoYK5yDShQgfJTipJoAjO0CAm/xT2aKY83b Er2BycPCmuIZXdO9ZS0k1VTzay8+g3MFCgXUqZzLWG8IfcA9HQU= -----END CERTIFICATE-----Generated at Sat Apr 26 05:35:37 2025 by rpki-client