
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: hD/S+AtQhIXAXRG5HBr312PRunNQ51fdYmVuo9Mglbc=
Subject key identifier: C1:1C:9C:3F:BF:5D:C7:D8:E8:97:1B:FA:F4:67:25:45:11:61:08:92
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 300F24C0582683255696943E632186C6EB24C7BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 0A6D
Signing time: Tue 21 Jul 2026 19:04:57 +0000
Manifest this update: Tue 21 Jul 2026 18:59:57 +0000
Manifest next update: Wed 22 Jul 2026 20:14:57 +0000
Files and hashes: 1: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
2: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
3: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
4: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
5: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
6: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
7: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
8: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
9: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
10: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
11: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
12: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
13: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
14: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
15: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
16: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
17: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
18: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: +iBxIryo2qJ39x7faeZ6bGbllS5VeR410SIHzxsC5hY=)
19: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
20: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
21: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
22: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
23: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
24: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
25: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
26: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
27: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
28: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
29: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
30: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
31: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
32: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
33: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
34: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
35: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
36: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
37: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
38: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
39: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
40: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
41: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
42: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
43: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
44: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
45: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 20:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0f:24:c0:58:26:83:25:56:96:94:3e:63:21:86:c6:eb:24:c7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Jul 21 18:59:57 2026 GMT
Not After : Jul 22 20:14:57 2026 GMT
Subject: CN=C11C9C3FBF5DC7D8E8971BFAF467254511610892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:95:11:18:76:d1:43:5d:a7:82:9b:c7:fc:
6b:7b:7f:78:3e:2e:fb:ab:09:a2:46:fb:e4:d7:27:
02:bc:ed:4f:bc:1b:56:3a:7a:0f:4d:9d:e1:1a:f6:
af:1b:f9:13:21:e9:39:e5:95:88:34:6c:83:72:65:
d1:d0:8e:bc:03:52:e7:7b:b2:5e:73:dd:a4:d3:08:
60:40:76:a7:ef:e1:1e:c8:e1:ea:0d:d3:64:f0:37:
99:70:d1:e1:8c:20:35:68:b9:ef:a0:03:4a:9b:58:
5c:dc:37:3f:3b:09:34:9a:5c:57:46:f9:42:f2:71:
9a:7b:38:61:99:5f:4f:a4:2a:8b:00:2d:7c:b8:8e:
c5:16:9a:cf:76:55:ac:1c:eb:89:10:13:ac:e9:ba:
18:21:aa:e3:ae:43:37:fc:73:5c:f6:b5:43:6c:22:
e4:74:b1:fa:fb:05:6d:90:09:13:ea:54:51:fb:4b:
59:64:c5:6f:98:60:2e:47:db:03:bd:91:05:23:41:
66:71:9c:5c:44:52:b5:0a:43:3a:51:01:99:f4:1f:
f8:c6:38:b9:fe:40:9a:77:08:a8:77:00:ca:51:52:
0a:eb:9d:a7:f0:98:bc:31:d4:3f:51:4c:57:38:66:
1d:7b:39:fd:4c:90:69:3a:3e:bf:81:c6:f3:48:8a:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:9C:3F:BF:5D:C7:D8:E8:97:1B:FA:F4:67:25:45:11:61:08:92
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5a:ad:2e:60:f1:52:bb:ab:ff:82:23:a6:62:ed:a9:6b:42:
fb:9f:47:c3:51:43:36:93:af:e7:f5:9c:26:02:fc:94:82:c3:
1b:8a:1b:14:e5:69:f5:37:02:7c:8a:37:0f:9a:a7:74:24:fe:
52:91:c6:cd:77:f0:06:e9:bc:9a:90:c9:69:d7:4e:bd:52:38:
32:c2:2b:54:bb:bd:53:2b:22:c9:6d:99:a9:96:5c:41:17:e5:
12:79:e1:ee:69:80:54:8c:61:02:8e:65:a1:6d:d3:0e:10:65:
c0:90:8d:8d:19:f4:aa:2b:7c:29:8c:31:81:0f:3f:06:f5:f9:
ce:8d:8c:4f:e8:f7:78:dc:96:e7:19:88:5a:be:8b:a1:f4:48:
ef:f8:3f:b2:81:32:a4:51:ff:2b:33:36:b8:b8:80:a3:2e:53:
e7:aa:aa:e8:d6:20:73:15:1e:5c:c1:4c:5e:ca:68:aa:af:6d:
36:4d:cb:49:80:a0:3a:47:f6:72:ce:bf:8f:fc:5b:de:23:b2:
ba:ad:41:7c:be:5a:61:44:9c:3f:70:c5:bd:19:f3:6a:cb:42:
8f:d6:78:9b:af:7d:f1:c7:b0:29:42:62:d6:1a:cc:62:2d:a5:
fe:b9:ce:15:69:d1:72:54:78:e3:3b:54:77:29:9d:23:48:18:
57:ab:f8:59
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUMA8kwFgmgyVWlpQ+YyGGxuskx74wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDcyMTE4NTk1N1oX
DTI2MDcyMjIwMTQ1N1owMzExMC8GA1UEAxMoQzExQzlDM0ZCRjVEQzdEOEU4OTcx
QkZBRjQ2NzI1NDUxMTYxMDg5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKGrlREYdtFDXaeCm8f8a3t/eD4u+6sJokb75NcnArztT7wbVjp6D02d4Rr2
rxv5EyHpOeWViDRsg3Jl0dCOvANS53uyXnPdpNMIYEB2p+/hHsjh6g3TZPA3mXDR
4YwgNWi576ADSptYXNw3PzsJNJpcV0b5QvJxmns4YZlfT6QqiwAtfLiOxRaaz3ZV
rBzriRATrOm6GCGq465DN/xzXPa1Q2wi5HSx+vsFbZAJE+pUUftLWWTFb5hgLkfb
A72RBSNBZnGcXERStQpDOlEBmfQf+MY4uf5AmncIqHcAylFSCuudp/CYvDHUP1FM
VzhmHXs5/UyQaTo+v4HG80iK/dMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTBHJw/
v13H2OiXG/r0ZyVFEWEIkjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5
QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACNarS5g8VK7q/+CI6Zi7alrQvufR8NRQzaT
r+f1nCYC/JSCwxuKGxTlafU3AnyKNw+ap3Qk/lKRxs138AbpvJqQyWnXTr1SODLC
K1S7vVMrIsltmamWXEEX5RJ54e5pgFSMYQKOZaFt0w4QZcCQjY0Z9KorfCmMMYEP
Pwb1+c6NjE/o93jclucZiFq+i6H0SO/4P7KBMqRR/yszNri4gKMuU+eqqujWIHMV
HlzBTF7KaKqvbTZNy0mAoDpH9nLOv4/8W94jsrqtQXy+WmFEnD9wxb0Z82rLQo/W
eJuvffHHsClCYtYazGItpf65zhVp0XJUeOM7VHcpnSNIGFer+Fk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:20:25 2026 by rpki-client