$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 60aIIE7Ho0q2qQy7YvqwqQldoTKLmjAi/0gN6hKGcuk= Subject key identifier: 43:7C:58:B8:0D:10:BF:8D:1E:00:9A:53:AC:99:DB:45:1E:27:81:A5 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 568FE080346FC793A4CD2483EB3F8A2E999F7364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 048B Signing time: Fri 25 Apr 2025 00:00:14 +0000 Manifest this update: Fri 25 Apr 2025 00:00:14 +0000 Manifest next update: Tue 29 Apr 2025 00:00:14 +0000 Files and hashes: 1: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (hash: wP4Hpdmr/OwNXZR/z2mxgpBvFN4dWJn2rSKiJOl3I1I=) 2: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: DfrkbOo8lDmuidO0Oh4TueAyjRfprlOP/E1R8OJuAGk=) 3: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: EEVkOaEXmz5Tf159IxMdOl9eDIg+DdMd8jYJw0A1zdA=) 4: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: DZ4V1VY2NPdlYAhqmNqpWfZSU78K7H5shN4WYYovjY0=) 5: 4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa (hash: 9Cu3sMIOvJbiXT4QemB0aP4Dse8bfnB6AkPJJ1M4Oro=) 6: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: Vm7QfjHgAlb0UPcOnTyqKW32B6tcAoSX7QGWNxOXr68=) 7: 6982f3ac-c7ae-423c-a028-517d7541d973.roa (hash: +1qhA0qqK2NjVj1z4Ed9dkztWxHZdc+r8eaFbwy+2a8=) 8: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: VJjwA9E8igccih3oBbfYt2BRAHIMCoB6efVTGk4Se4s=) 9: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: aWmx8lm9+dbngOtB5H2OhOAmt3Vdrj6J7A7RESAkpCo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8f:e0:80:34:6f:c7:93:a4:cd:24:83:eb:3f:8a:2e:99:9f:73:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 25 00:00:14 2025 GMT Not After : Apr 29 00:00:14 2025 GMT Subject: serialNumber=bb9c85aeaa106e1addb3ac0377d8a8f5f388e5ebde115a7f29ad0fdd4e0425ad, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:5d:7e:46:e0:45:b7:27:85:ad:7e:1f:ae: e4:2f:c7:dc:59:63:cd:6d:61:47:25:21:d5:db:52: b0:ff:50:4f:eb:ab:d4:61:67:5f:dc:79:24:ba:5e: a7:66:6e:30:a2:ed:09:9f:b6:12:02:90:c6:b6:fe: fa:37:6f:fc:db:ec:71:88:9b:70:70:3f:cf:89:e4: eb:e0:01:49:dc:4b:93:06:a0:35:03:84:0c:80:c2: ae:d7:7c:aa:9b:b8:76:e1:65:c4:f3:85:86:75:17: 60:73:e2:64:9d:0e:11:c2:db:01:0b:88:29:02:88: 8e:ec:b5:77:3a:fc:0c:36:b3:31:27:a8:e3:d5:0f: 18:c7:a1:3e:93:5a:b8:e4:34:42:3f:55:b9:7b:54: 98:76:c4:e4:76:19:7b:e0:bf:e1:3d:01:89:7e:26: 55:d0:57:21:65:30:f2:71:35:36:48:47:bd:7b:e8: 5b:f6:b5:cf:fd:10:55:e5:72:95:41:26:59:b1:b6: 63:e1:7d:e3:c7:72:66:d8:7f:fe:dc:4c:8b:d1:1b: 4e:93:11:41:37:a3:25:c0:32:81:0f:06:9b:76:a6: 96:ae:26:3a:4a:bb:f8:30:8a:1c:0f:f5:97:54:4a: 3d:11:26:72:75:04:15:6f:de:77:98:ba:78:05:97: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7C:58:B8:0D:10:BF:8D:1E:00:9A:53:AC:99:DB:45:1E:27:81:A5 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:de:4a:31:73:13:7b:2f:8b:d9:70:de:e6:5f:42:6f:4f:ce: 74:47:8a:c0:06:e6:c1:03:7c:9d:45:6d:7b:75:b7:45:92:79: 62:8e:3e:76:7a:ba:f0:59:52:c4:66:43:17:20:d3:87:f3:21: 4c:78:23:e3:c3:b1:37:66:56:a4:d0:b9:2c:6b:11:d3:b4:79: 6b:f1:d2:db:49:d5:ac:14:f3:56:ea:b0:05:83:a8:45:ca:f8: 0e:c3:ad:b1:3c:0e:7f:9f:d0:d2:43:22:46:e1:36:4f:8f:1c: f4:23:3b:65:4d:88:b7:53:43:3d:1a:26:3e:ec:27:b2:36:b5: cb:b3:07:38:63:78:60:70:71:9c:37:a2:41:cf:41:71:de:cc: 3e:bb:78:f4:9d:63:21:df:ed:74:f3:b9:4a:9e:8e:80:e0:8f: 95:5e:fb:31:fd:2b:15:3d:ef:63:10:ee:1b:75:10:4b:47:75: 71:0a:7d:41:2c:3e:59:78:fa:8e:50:28:3f:f7:c7:5d:03:24: f1:73:1a:49:0b:61:a7:6a:30:42:a7:79:4d:75:a3:09:4c:a4: 04:5a:c8:9e:e7:70:87:5e:a8:00:d5:d4:2f:75:24:91:f4:1f: f6:4d:b5:33:06:29:14:fe:62:67:09:b6:fb:5e:d0:d4:31:03: 42:b5:b1:fc -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUVo/ggDRvx5OkzSSD6z+KLpmfc2QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDQyNTAwMDAxNFoX DTI1MDQyOTAwMDAxNFowejFJMEcGA1UEBRNAYmI5Yzg1YWVhYTEwNmUxYWRkYjNh YzAzNzdkOGE4ZjVmMzg4ZTVlYmRlMTE1YTdmMjlhZDBmZGQ0ZTA0MjVhZDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTxdfkbgRbcnha1+H67kL8fcWWPN bWFHJSHV21Kw/1BP66vUYWdf3Hkkul6nZm4wou0Jn7YSApDGtv76N2/82+xxiJtw cD/PieTr4AFJ3EuTBqA1A4QMgMKu13yqm7h24WXE84WGdRdgc+JknQ4RwtsBC4gp AoiO7LV3OvwMNrMxJ6jj1Q8Yx6E+k1q45DRCP1W5e1SYdsTkdhl74L/hPQGJfiZV 0FchZTDycTU2SEe9e+hb9rXP/RBV5XKVQSZZsbZj4X3jx3Jm2H/+3EyL0RtOkxFB N6MlwDKBDwabdqaWriY6Srv4MIocD/WXVEo9ESZydQQVb953mLp4BZc/ywIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEN8WLgNEL+NHgCaU6yZ20UeJ4GlMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAAveSjFzE3svi9lw3uZfQm9PznRHisAG 5sEDfJ1FbXt1t0WSeWKOPnZ6uvBZUsRmQxcg04fzIUx4I+PDsTdmVqTQuSxrEdO0 eWvx0ttJ1awU81bqsAWDqEXK+A7DrbE8Dn+f0NJDIkbhNk+PHPQjO2VNiLdTQz0a Jj7sJ7I2tcuzBzhjeGBwcZw3okHPQXHezD67ePSdYyHf7XTzuUqejoDgj5Ve+zH9 KxU972MQ7ht1EEtHdXEKfUEsPll4+o5QKD/3x10DJPFzGkkLYadqMEKneU11owlM pARayJ7ncIdeqADV1C91JJH0H/ZNtTMGKRT+YmcJtvte0NQxA0K1sfw= -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:34 2025 by rpki-client on console.sobornost.net