$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: 8jPaMrmpom/9sWx7GGIwmr4bygBXCUMxTB6ILSla0uI= Subject key identifier: DB:86:41:9B:DC:19:53:64:7D:79:03:BB:36:D8:54:9A:F6:35:6C:19 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 5155D3F91BCE3EEE9DE18E36A33520F80C17734A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 0716 Signing time: Fri 08 Aug 2025 10:01:17 +0000 Manifest this update: Fri 08 Aug 2025 09:56:17 +0000 Manifest next update: Sat 09 Aug 2025 13:29:17 +0000 Files and hashes: 1: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=) 2: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: QKdp+97/jBscT8ua2qqpOoD5458W90JnJCIl2/HTZ9w=) 3: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: Urm4fJQNtDp6SIxaK4P3H3Ws3eyWvAIY2xosgFCtd8I=) 4: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: wAfETorQPk9igjbzfUZxSRRdxY5ukQBfki7FxMaqgck=) 5: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +eDM5ZsnYy/K8Vcs+UsJ0vBbFc9QK/+4cHvdTH8CcFY=) 6: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: ymAOwS4PLKpnSnnV8/IOAQp6MUyltwBjY+QUE6aswIU=) 7: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: qBNNAhrcYn7+7C6H5Usnl0BSwa+8x/tgu9RF6Ut6QGA=) 8: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: 7Wq2I+eG+i0crt18gB8fjrpeNgtc2h87eRDDsvP4ByQ=) 9: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: Gkk3pjPcBn1ydDwbDsy1KlefEvRWum7WwjI0/dDLNr0=) 10: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs=) 11: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=) 12: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: beAYsCRxqlE19Pd1+dyNigMnD/N60WKXUOqwwXx7mfY=) 13: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: 9uecxpl+8zhYNM/VLSzIYQFtoaNZNiKX2oWXwwGgZ5I=) 14: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: PZcihi+tKuobULExyy+RldrR5ZxGFpEQTkOgUfpHPaE=) 15: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: tWRnU+tdEJIxCaDFfPwNfAoTd6uvr3uzZ5QAJ9M+Zng=) 16: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: oAvLVEZUCqPZSKjbNm78EONoYmzYyZ6cmVQyo3qOyXU=) 17: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: z33pDE1uVCQz/+rMUZxr2CrKllnXqcBIx2p2sSpgt1w=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:55:d3:f9:1b:ce:3e:ee:9d:e1:8e:36:a3:35:20:f8:0c:17:73:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Aug 8 09:56:17 2025 GMT Not After : Aug 9 13:29:17 2025 GMT Subject: CN=DB86419BDC1953647D7903BB36D8549AF6356C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:67:7b:fc:67:98:eb:71:9d:fc:cb:2f:b9: 4e:5f:ea:96:0a:b3:99:8d:f4:39:6d:66:5e:ac:8a: d7:0b:26:30:1d:9b:76:e5:05:9d:6c:eb:ed:4e:74: e8:36:75:38:96:d4:38:2c:e1:b4:99:ed:ee:37:dc: e9:8e:de:b6:82:10:13:1b:20:27:85:79:8b:23:aa: 29:18:3a:c9:7b:36:fe:01:0d:d3:0d:c8:5a:26:d3: 37:e1:c8:da:73:3e:b6:ec:2b:1b:f6:b9:d0:39:04: 32:ce:12:c7:21:33:2a:64:44:24:5d:bf:03:4e:04: 3a:df:ac:7f:b3:79:c2:ab:23:79:16:8d:a1:10:42: ed:cb:14:13:c9:c0:8c:bf:ac:2b:f6:54:50:7d:06: 4b:88:86:40:bf:90:6a:f7:c6:f9:ef:e3:0c:6b:3d: 96:2a:09:a6:fa:73:a6:2e:2b:4b:bd:c2:5b:d5:5f: d4:79:e5:4d:b0:dc:28:f6:b2:47:24:d6:9b:c0:76: bf:a4:1b:c7:86:da:81:ef:bb:e5:ca:32:7d:2d:2f: d1:2b:25:ea:d0:9e:f3:c0:c0:00:b6:64:eb:b4:52: bf:3d:e7:32:b5:84:43:27:cb:f6:60:12:6f:12:0e: 95:5f:39:86:e9:c8:f9:5f:46:84:be:c6:11:fb:ed: 0b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:86:41:9B:DC:19:53:64:7D:79:03:BB:36:D8:54:9A:F6:35:6C:19 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:af:6c:87:e4:da:14:41:77:c0:da:10:13:df:6b:2a:2e:05: 88:2b:15:48:64:23:93:d4:38:a5:a7:2e:fc:a4:5e:20:6d:c5: 0c:3f:75:b1:28:f7:4d:ab:a4:1b:a0:1a:a3:47:9a:df:00:de: 4f:9a:d2:b8:51:25:92:c5:57:49:f5:ca:7c:39:b8:3c:81:09: ca:8b:7b:1b:af:f2:b4:d2:df:72:73:1f:dd:bf:e7:2e:40:15: 64:bc:56:6f:d8:02:a3:50:f7:65:cd:c0:02:b3:9c:ca:53:ee: 91:8a:66:cb:60:a0:86:07:9c:7f:7c:c0:b6:2f:3b:1a:ac:7f: d9:da:c9:7e:ef:3e:6f:1d:91:01:29:85:13:47:99:31:ef:eb: 5f:ae:e2:c5:f2:c0:e3:50:75:35:cf:b8:cd:5e:be:10:d6:70: 87:e3:28:fb:00:02:22:21:cf:c7:6b:0d:57:3d:71:bc:d0:62: 6b:25:f9:e8:b2:19:30:cd:b1:a4:d6:a9:1d:62:38:c3:c7:b1: 35:c3:a4:f7:51:42:08:c7:3e:d0:ec:c7:e5:44:25:c0:d0:09: 69:ba:bd:15:8b:2e:fa:cd:43:81:74:b1:6f:69:3e:25:a5:f8: ca:00:cb:f6:d5:77:97:55:61:dd:68:1d:fa:53:aa:8d:ee:cb: 84:80:c0:74 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUUVXT+RvOPu6d4Y42ozUg+AwXc0owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MDgwODA5NTYxN1oX DTI1MDgwOTEzMjkxN1owMzExMC8GA1UEAxMoREI4NjQxOUJEQzE5NTM2NDdENzkw M0JCMzZEODU0OUFGNjM1NkMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6XZ3v8Z5jrcZ38yy+5Tl/qlgqzmY30OW1mXqyK1wsmMB2bduUFnWzr7U50 6DZ1OJbUOCzhtJnt7jfc6Y7etoIQExsgJ4V5iyOqKRg6yXs2/gEN0w3IWibTN+HI 2nM+tuwrG/a50DkEMs4SxyEzKmREJF2/A04EOt+sf7N5wqsjeRaNoRBC7csUE8nA jL+sK/ZUUH0GS4iGQL+QavfG+e/jDGs9lioJpvpzpi4rS73CW9Vf1HnlTbDcKPay RyTWm8B2v6Qbx4bage+75coyfS0v0Ssl6tCe88DAALZk67RSvz3nMrWEQyfL9mAS bxIOlV85hunI+V9GhL7GEfvtC+MCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTbhkGb 3BlTZH15A7s22FSa9jVsGTAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyvbIfk2hRBd8DaEBPfayouBYgrFUhkI5PU OKWnLvykXiBtxQw/dbEo902rpBugGqNHmt8A3k+a0rhRJZLFV0n1ynw5uDyBCcqL exuv8rTS33JzH92/5y5AFWS8Vm/YAqNQ92XNwAKznMpT7pGKZstgoIYHnH98wLYv Oxqsf9nayX7vPm8dkQEphRNHmTHv61+u4sXywONQdTXPuM1evhDWcIfjKPsAAiIh z8drDVc9cbzQYmsl+eiyGTDNsaTWqR1iOMPHsTXDpPdRQgjHPtDsx+VEJcDQCWm6 vRWLLvrNQ4F0sW9pPiWl+MoAy/bVd5dVYd1oHfpTqo3uy4SAwHQ= -----END CERTIFICATE-----Generated at Fri Aug 8 21:00:32 2025 by rpki-client