$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: e+Q3IcCZU1syecT+PXSBTgDqyMeZrNWas2M0MRqXj5M= Subject key identifier: AB:6C:3E:0F:CD:08:66:42:B6:E8:44:0C:2F:3E:21:A2:F9:F8:E6:88 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 2BB931E8AAD7F9473F0649824F8ECD54F1B0F231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 0686 Signing time: Fri 25 Apr 2025 19:30:33 +0000 Manifest this update: Fri 25 Apr 2025 19:25:33 +0000 Manifest next update: Sat 26 Apr 2025 21:18:33 +0000 Files and hashes: 1: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: 7Wq2I+eG+i0crt18gB8fjrpeNgtc2h87eRDDsvP4ByQ=) 2: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: 9uecxpl+8zhYNM/VLSzIYQFtoaNZNiKX2oWXwwGgZ5I=) 3: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: z33pDE1uVCQz/+rMUZxr2CrKllnXqcBIx2p2sSpgt1w=) 4: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: QKdp+97/jBscT8ua2qqpOoD5458W90JnJCIl2/HTZ9w=) 5: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: tWRnU+tdEJIxCaDFfPwNfAoTd6uvr3uzZ5QAJ9M+Zng=) 6: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: /pFS9jc3UXK3h+G3zT64IF2jQPARtRJD1MfhJkIsAMM=) 7: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: oAvLVEZUCqPZSKjbNm78EONoYmzYyZ6cmVQyo3qOyXU=) 8: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: PZcihi+tKuobULExyy+RldrR5ZxGFpEQTkOgUfpHPaE=) 9: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: ymAOwS4PLKpnSnnV8/IOAQp6MUyltwBjY+QUE6aswIU=) 10: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: Urm4fJQNtDp6SIxaK4P3H3Ws3eyWvAIY2xosgFCtd8I=) 11: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs=) 12: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=) 13: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=) 14: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: beAYsCRxqlE19Pd1+dyNigMnD/N60WKXUOqwwXx7mfY=) 15: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: Gkk3pjPcBn1ydDwbDsy1KlefEvRWum7WwjI0/dDLNr0=) 16: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +eDM5ZsnYy/K8Vcs+UsJ0vBbFc9QK/+4cHvdTH8CcFY=) 17: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: qBNNAhrcYn7+7C6H5Usnl0BSwa+8x/tgu9RF6Ut6QGA=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b9:31:e8:aa:d7:f9:47:3f:06:49:82:4f:8e:cd:54:f1:b0:f2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Apr 25 19:25:33 2025 GMT Not After : Apr 26 21:18:33 2025 GMT Subject: CN=AB6C3E0FCD086642B6E8440C2F3E21A2F9F8E688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:cf:33:6f:c2:54:64:ae:e9:40:59:7a:c7: 37:7a:7f:b5:d0:f9:34:82:ee:30:73:ca:70:0d:75: 42:ee:6f:fd:b2:9d:2f:bf:f2:49:bc:09:06:88:e3: b7:26:ec:98:f9:dc:5f:85:49:29:40:7a:e4:75:c5: 87:57:56:66:31:1b:57:73:30:f7:ce:87:a3:06:93: 77:a4:b1:2f:a5:78:8c:70:05:e6:be:1d:72:49:16: 3f:f6:38:63:24:73:75:18:e5:d6:ad:8b:dd:2d:64: c6:d3:5a:4a:95:06:e7:56:a7:57:68:5d:56:37:86: 9a:f5:3f:8b:0d:a7:4c:0f:fb:f7:57:06:3d:65:43: aa:5e:27:45:17:15:be:80:2a:4b:88:f3:6b:11:01: 4b:5f:83:f7:4a:92:a1:a3:f8:be:6e:65:9a:91:d6: 8a:ed:47:a4:29:f3:dd:0b:d6:6f:06:63:02:3a:39: 2e:09:5a:58:ae:5e:e7:4d:70:ce:1c:d8:c9:c5:1d: 05:db:c6:a6:70:47:f2:c7:3e:e5:2d:18:98:dc:59: a9:8a:f9:56:09:7a:e2:76:1b:5e:86:aa:44:82:48: a8:e5:a3:fd:b1:09:fd:dd:52:2d:21:03:c3:56:c0: 5d:02:22:c1:c6:da:bf:9b:f5:14:48:e3:51:b9:66: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:3E:0F:CD:08:66:42:B6:E8:44:0C:2F:3E:21:A2:F9:F8:E6:88 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ee:bb:3a:a0:99:40:77:c6:db:1c:67:09:fa:cf:ff:74:ff: 41:3a:8b:fc:c0:a5:45:d5:d5:98:c9:ed:f2:af:25:4f:23:07: 6c:97:5c:13:0a:35:f7:be:f4:24:83:07:75:67:9e:8b:c3:c8: 4c:f6:f7:e9:c7:ed:5b:0f:92:b0:9b:ee:ec:c0:c3:f8:b9:61: ab:3f:7b:c5:6a:c8:c5:88:29:5c:85:e5:d2:8d:62:59:c8:1c: dc:81:ef:9d:c8:d4:08:a5:e8:59:b3:81:68:ac:06:11:ed:b6: 9f:a9:cc:b2:e9:ed:38:5b:18:69:22:80:ec:71:2f:27:fd:3b: a9:3b:0a:54:0d:fe:2e:f8:6b:d0:f1:35:33:bf:4d:41:18:25: 60:d4:53:ec:68:0e:c7:40:e5:2f:d3:c2:b9:9a:b0:d1:3b:f0: e5:52:f7:63:08:d9:9f:a4:c8:a3:c7:c6:47:39:cc:63:98:c7: ad:22:96:4c:ec:9a:96:8f:b2:33:e0:6c:4c:b8:52:58:a6:ed: 55:58:aa:9a:77:48:87:74:b8:e7:20:02:3b:37:36:86:bd:97: 42:21:b4:a5:02:65:1d:5f:5a:cd:d7:3a:18:fe:26:89:57:31: cd:b1:5d:ae:cb:07:9b:82:3a:92:a0:60:11:f4:c3:a3:18:4a: ca:d5:d6:ec -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUK7kx6KrX+Uc/BkmCT47NVPGw8jEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MDQyNTE5MjUzM1oX DTI1MDQyNjIxMTgzM1owMzExMC8GA1UEAxMoQUI2QzNFMEZDRDA4NjY0MkI2RTg0 NDBDMkYzRTIxQTJGOUY4RTY4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALD0zzNvwlRkrulAWXrHN3p/tdD5NILuMHPKcA11Qu5v/bKdL7/ySbwJBojj tybsmPncX4VJKUB65HXFh1dWZjEbV3Mw986HowaTd6SxL6V4jHAF5r4dckkWP/Y4 YyRzdRjl1q2L3S1kxtNaSpUG51anV2hdVjeGmvU/iw2nTA/791cGPWVDql4nRRcV voAqS4jzaxEBS1+D90qSoaP4vm5lmpHWiu1HpCnz3QvWbwZjAjo5LglaWK5e501w zhzYycUdBdvGpnBH8sc+5S0YmNxZqYr5Vgl64nYbXoaqRIJIqOWj/bEJ/d1SLSED w1bAXQIiwcbav5v1FEjjUblmTIUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSrbD4P zQhmQrboRAwvPiGi+fjmiDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHuuzqgmUB3xtscZwn6z/90/0E6i/zApUXV 1ZjJ7fKvJU8jB2yXXBMKNfe+9CSDB3VnnovDyEz29+nH7VsPkrCb7uzAw/i5Yas/ e8VqyMWIKVyF5dKNYlnIHNyB753I1Ail6FmzgWisBhHttp+pzLLp7ThbGGkigOxx Lyf9O6k7ClQN/i74a9DxNTO/TUEYJWDUU+xoDsdA5S/TwrmasNE78OVS92MI2Z+k yKPHxkc5zGOYx60ilkzsmpaPsjPgbEy4Ulim7VVYqpp3SId0uOcgAjs3Noa9l0Ih tKUCZR1fWs3XOhj+JolXMc2xXa7LB5uCOpKgYBH0w6MYSsrV1uw= -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:58 2025 by rpki-client