$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: txmNOy8Blie1JeMk+6sg3PUePNAKtW721KAWOIWyOAg= Subject key identifier: 24:F6:7A:90:85:1E:61:70:09:61:2C:B4:AA:ED:CA:D9:38:69:93:2A Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 0EBC1FB7F177D92F1F8BB8E4DB3583377D653968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 08AF Signing time: Wed 22 Oct 2025 05:09:09 +0000 Manifest this update: Wed 22 Oct 2025 05:04:09 +0000 Manifest next update: Thu 23 Oct 2025 08:04:09 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 3: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: Nk07T6ltem8JWhL3q2BaBc00nBH1jC3+WlE/mCU9TSI=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 6: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:bc:1f:b7:f1:77:d9:2f:1f:8b:b8:e4:db:35:83:37:7d:65:39:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Oct 22 05:04:09 2025 GMT Not After : Oct 23 08:04:09 2025 GMT Subject: CN=24F67A90851E617009612CB4AAEDCAD93869932A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:c2:17:22:00:0f:58:c8:c8:38:96:33:f4: b9:a3:2d:3e:7c:e0:a0:1a:84:85:5f:73:c2:bc:62: d4:cb:5a:43:d1:75:77:ab:d9:24:5e:7c:e1:07:b8: 35:3a:7e:69:c6:48:15:6c:89:c8:84:63:ee:27:a9: 71:e6:e8:7c:34:49:ca:b0:89:49:bf:37:f8:4e:fc: 44:7c:f7:7f:2a:b2:32:64:03:6f:dc:4f:4a:74:07: 52:bb:fc:da:b9:43:19:05:ad:14:e2:a0:e1:44:f3: c1:29:b8:7c:e3:b8:5e:39:60:f9:ad:0b:f0:9b:1f: 81:66:d5:b7:04:5d:31:d7:23:f7:76:5f:bb:3d:9b: 44:78:54:a6:c5:48:2e:d8:15:cc:6a:63:28:60:4f: ce:e6:9f:a0:0a:2b:95:a5:6d:f3:fa:3f:12:90:db: 91:f5:46:cc:08:55:a9:0a:8a:8e:2b:74:fd:4c:cd: 26:ed:61:a9:11:7f:11:47:a2:d0:d7:a4:86:b7:ed: 54:3d:4c:3b:1a:97:d6:c9:f9:53:c6:42:02:80:91: a6:60:4c:73:85:e3:f8:bd:c9:5a:e0:60:fc:95:76: 68:3b:91:0d:93:d8:77:e6:9b:f2:60:71:9c:c2:9f: b4:4a:57:7f:47:10:a8:4e:c6:78:45:8e:4c:b3:0f: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F6:7A:90:85:1E:61:70:09:61:2C:B4:AA:ED:CA:D9:38:69:93:2A X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:77:ab:c2:41:0c:ba:e5:14:7a:9d:76:5e:af:bb:2d:b9:4a: 78:db:44:42:13:66:31:8b:70:26:46:15:f4:13:c2:2c:60:c7: 42:4a:f3:8d:56:23:40:d7:a5:5d:ee:a2:00:ea:47:e0:4a:0c: 9c:f7:de:b4:a2:e8:a2:0e:f9:20:3c:c6:78:16:03:e6:53:7f: 0f:13:91:69:27:19:93:b1:53:3d:5f:f1:10:43:fb:9d:b8:46: a2:bd:2f:45:0a:48:21:4e:95:65:64:42:3b:3a:25:07:d3:80: 20:6a:38:39:b7:b0:63:73:8f:80:17:e8:86:75:3a:27:5e:78: f8:85:49:20:b3:49:ee:d6:05:22:a2:bd:b8:d5:15:08:6b:67: 86:32:08:d7:16:96:cb:3b:c2:b5:db:62:57:66:52:f1:4f:ee: f7:db:e9:93:23:16:e0:4f:78:5e:f4:ea:e4:e3:5c:1d:35:f6: 46:7c:19:0e:bf:ef:83:18:99:2d:ee:e9:dd:0a:14:4a:ca:bc: 82:d8:5b:c8:92:e6:62:ab:9c:d8:d0:1b:b8:91:97:63:b6:24: 53:09:91:0e:7f:8e:10:e3:34:a3:c2:49:fe:fc:0b:e0:87:08: 82:f2:bc:b6:b7:3a:9e:93:66:2e:22:50:23:71:fe:55:35:29: 85:07:0d:52 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUDrwft/F32S8fi7jk2zWDN31lOWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MTAyMjA1MDQwOVoX DTI1MTAyMzA4MDQwOVowMzExMC8GA1UEAxMoMjRGNjdBOTA4NTFFNjE3MDA5NjEy Q0I0QUFFRENBRDkzODY5OTMyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmWwhciAA9YyMg4ljP0uaMtPnzgoBqEhV9zwrxi1MtaQ9F1d6vZJF584Qe4 NTp+acZIFWyJyIRj7iepcebofDRJyrCJSb83+E78RHz3fyqyMmQDb9xPSnQHUrv8 2rlDGQWtFOKg4UTzwSm4fOO4Xjlg+a0L8JsfgWbVtwRdMdcj93Zfuz2bRHhUpsVI LtgVzGpjKGBPzuafoAorlaVt8/o/EpDbkfVGzAhVqQqKjit0/UzNJu1hqRF/EUei 0NekhrftVD1MOxqX1sn5U8ZCAoCRpmBMc4Xj+L3JWuBg/JV2aDuRDZPYd+ab8mBx nMKftEpXf0cQqE7GeEWOTLMPFS0CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQk9nqQ hR5hcAlhLLSq7crZOGmTKjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR3q8JBDLrlFHqddl6vuy25SnjbREITZjGL cCZGFfQTwixgx0JK841WI0DXpV3uogDqR+BKDJz33rSi6KIO+SA8xngWA+ZTfw8T kWknGZOxUz1f8RBD+524RqK9L0UKSCFOlWVkQjs6JQfTgCBqODm3sGNzj4AX6IZ1 OideePiFSSCzSe7WBSKivbjVFQhrZ4YyCNcWlss7wrXbYldmUvFP7vfb6ZMjFuBP eF706uTjXB019kZ8GQ6/74MYmS3u6d0KFErKvILYW8iS5mKrnNjQG7iRl2O2JFMJ kQ5/jhDjNKPCSf78C+CHCILyvLa3Op6TZi4iUCNx/lU1KYUHDVI= -----END CERTIFICATE-----Generated at Wed Oct 22 16:18:40 2025 by rpki-client