Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          WlLYwp1XhEadbufQvn8JB23RjLj7+djylmkQYvR3ago=
Subject key identifier:   B2:1A:03:9F:8E:C3:E4:E2:C1:FB:3E:A9:23:E3:C5:99:A4:4A:9C:15
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       30FDEF9045AA168AA942D4C891CB6B3C6A1A4A1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          07CC
Signing time:             Sun 27 Apr 2025 09:13:04 +0000
Manifest this update:     Sun 27 Apr 2025 09:08:04 +0000
Manifest next update:     Mon 28 Apr 2025 09:26:04 +0000
Files and hashes:         1: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          2: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=)
                          3: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: XsSHiraeLYNQTJR5HGAY6vwQ9Scu9lRrIHdSI54V+7M=)
                          4: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=)
                          5: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          6: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          7: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          8: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          9: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: sr7r8uO67cDPo72NjWdP3dlG7qJrC9xZ+w35SmZvRyk=)
                          10: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: 6oVWbbqVFk6Pwgux9V8jfDQRsMYOVT5jirPBSL3Wig4=)
                          11: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: YBRtGgVo128HYmmYrlq/rtgksrT7YQggo7xicgUIVnM=)
                          12: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jmlPHqT2zn/G8VxGtz4qGDGVkC091Y4a8xRHPA/+0+0=)
                          13: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          14: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
                          15: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
                          16: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          17: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: nZRdseJLG8pcz60dA2dIP+lQPJZ68YEbyLu8K+1sxGI=)
                          18: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          19: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          20: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: eglNokA0036JbGNEJ4JBpUI9W7LtrNCo3IjzCiifpEo=)
                          21: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          22: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: AFtv2U+SRy70e/I8yu7H0b4qbonbuaC+cL/WCx9Zo6U=)
                          23: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          24: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
                          25: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: lqCEmZ9NaCjaWEhq0OXTc04xBaaLhH59AP38axB9xQk=)
                          26: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: GMRaZkN3zIDxVuJVnldek+MoIhPgvQ/+nioWSoYNFg0=)
                          27: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          28: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          29: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s=)
                          30: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: rjHLbg5RxNx+OSrihRQaxhyOJyLwHXme40chbILQOQQ=)
                          31: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          32: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: hJFUedJxlwrGsuBiVRcEB429TcpnC3Bw2MEl2q91qrM=)
                          33: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 09:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fd:ef:90:45:aa:16:8a:a9:42:d4:c8:91:cb:6b:3c:6a:1a:4a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Apr 27 09:08:04 2025 GMT
            Not After : Apr 28 09:26:04 2025 GMT
        Subject: CN=B21A039F8EC3E4E2C1FB3EA923E3C599A44A9C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:a5:cf:8e:61:0f:79:c7:ed:56:58:11:f2:
                    d6:3f:e7:2c:1c:9a:6f:34:0f:e1:b6:39:99:9e:4b:
                    47:89:26:6f:b6:be:c4:af:83:8f:80:e0:da:ad:79:
                    64:d8:b2:6a:d8:fb:7b:ea:0f:a8:1c:41:4d:9d:97:
                    58:4c:65:a9:3a:8d:96:aa:14:4d:7d:58:d9:fe:3b:
                    4e:3f:c9:70:ae:bd:3f:da:c2:05:7e:ee:df:a7:00:
                    6f:2f:69:3a:26:82:d6:30:c7:a7:12:26:67:4e:39:
                    8e:70:8d:44:f6:08:48:b4:9e:ab:b0:ca:6a:8e:c8:
                    10:97:da:79:b8:01:1c:b3:90:07:59:5e:24:d6:86:
                    5e:a3:aa:4b:71:c9:b1:ea:a1:fa:17:23:5d:e8:fd:
                    4b:ec:18:b5:76:a6:d2:3c:1f:de:e1:31:d9:9c:9e:
                    08:d9:69:9b:12:f8:41:39:63:ce:65:e7:d0:44:b5:
                    b3:0a:99:30:48:da:89:d1:80:19:11:91:82:85:a6:
                    c1:37:72:63:29:ae:a2:ab:dc:ba:72:75:2e:b7:50:
                    5f:ad:ed:24:1c:6d:ca:38:c5:f4:4b:ec:03:36:27:
                    f5:78:4e:46:d7:f8:2e:ff:0d:b2:8e:1b:aa:b3:9f:
                    6b:a9:5c:72:29:ab:00:03:f3:03:84:cc:ab:f2:d9:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1A:03:9F:8E:C3:E4:E2:C1:FB:3E:A9:23:E3:C5:99:A4:4A:9C:15
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:71:fb:b7:cd:1c:aa:3a:ef:30:84:28:4b:fd:dc:4a:3a:e4:
         21:1c:e1:50:54:e1:a9:8d:5e:33:9a:a8:dd:4d:00:70:3c:f9:
         a0:7a:61:5f:31:78:63:60:c1:1b:80:a6:27:c5:63:77:f8:67:
         92:d1:b7:f6:e3:d9:d2:ff:d6:86:29:ba:98:a9:fd:a4:17:d1:
         6e:af:eb:56:93:a6:c5:fc:2a:f3:02:5d:f0:26:79:53:ea:19:
         85:8c:36:c4:d9:8f:13:be:e2:40:5c:91:67:56:69:fa:ef:c2:
         41:af:c5:c1:e1:bd:66:70:58:ca:3f:a0:92:a2:79:9b:7c:75:
         5b:7d:cb:d5:c3:a6:f7:63:9e:dd:3b:2e:db:cb:38:7c:78:ef:
         0a:a3:36:2c:a1:4e:be:2b:7a:bf:bf:32:cd:4b:ce:5d:db:94:
         5c:c9:b0:8c:ce:50:71:ce:20:c6:02:1d:09:3a:c3:52:de:0b:
         aa:7b:72:24:76:c2:83:49:03:e0:1d:eb:66:ad:c6:97:df:83:
         97:18:a9:48:6c:d9:06:c5:49:f8:86:33:95:7f:13:c0:69:9a:
         6e:93:bd:d0:0f:9f:07:46:62:14:d9:79:73:90:50:52:f7:88:
         14:2c:a3:18:ff:51:97:bd:5a:ff:d0:71:34:8f:e0:3b:64:f9:
         d2:ac:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:41:11 2025 by rpki-client on console.sobornost.net