$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: jstw+FJNi5c+fz+KMB3qZUdlvEoo56K4KUJHSLWD75M= Subject key identifier: 4A:88:EB:5F:23:0C:FD:56:F1:6B:C3:96:64:F2:34:09:7C:FB:2F:AE Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 5423CFA42F07F819D7716D4BB87AF67825F691DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 097F Signing time: Tue 17 Mar 2026 02:01:31 +0000 Manifest this update: Tue 17 Mar 2026 01:56:31 +0000 Manifest next update: Wed 18 Mar 2026 05:11:31 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 4: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: wxxUsnFkDLNCnGOzSqgYCvhXkhepZ+dr/zbBCpsAnQo=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 05:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:23:cf:a4:2f:07:f8:19:d7:71:6d:4b:b8:7a:f6:78:25:f6:91:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Mar 17 01:56:31 2026 GMT Not After : Mar 18 05:11:31 2026 GMT Subject: CN=4A88EB5F230CFD56F16BC39664F234097CFB2FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:91:7c:5e:80:3c:14:84:59:ab:50:0f:bf: bf:88:2a:e6:4f:c9:00:32:2c:73:29:4a:04:77:05: c4:2c:b0:ef:ac:91:85:db:4a:34:70:c5:a6:97:88: ba:e3:78:51:f7:26:48:31:a9:2f:2d:d1:40:b5:e8: d6:2a:1a:d9:7f:eb:da:60:71:24:dc:67:5a:07:bb: b0:93:fb:b4:d0:79:42:55:3f:96:07:da:de:80:18: 78:34:ec:98:70:c1:a5:98:fb:39:52:fd:ec:7b:23: 77:0d:77:be:3b:b5:97:ec:3d:57:a2:39:c0:44:58: ee:18:2d:1c:23:a0:50:d0:f3:cf:24:e0:47:36:76: cf:54:7c:74:51:40:a6:d3:be:e0:c1:ae:f2:0e:bd: 15:88:0f:bb:4b:96:26:fe:a9:b6:0d:6a:60:1d:22: 20:61:fa:db:56:a7:63:d1:a4:ca:c4:51:a5:7f:fb: ee:ee:82:76:9b:9c:de:bd:0a:d4:45:59:03:cc:b1: 7c:0d:94:75:5e:34:55:36:bf:ce:4e:15:1b:a2:71: 7a:76:c7:b2:e4:2e:2e:5e:59:1e:1f:f2:48:c0:e5: 06:fe:be:54:3c:e6:ab:9c:4b:3a:a1:23:52:18:aa: ee:02:bd:17:55:82:a8:ac:20:8c:8f:5a:e1:fb:c5: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:88:EB:5F:23:0C:FD:56:F1:6B:C3:96:64:F2:34:09:7C:FB:2F:AE X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:71:86:d1:84:9b:ef:78:dd:e5:dc:fc:0d:e1:e1:d0:39:b4: 10:44:c4:ea:4c:12:35:d4:a8:73:13:9d:11:a5:32:69:cc:f2: 5d:54:78:b2:61:1d:d9:c2:14:4f:c6:0e:06:0b:a2:d4:da:ae: 96:c3:18:c5:fc:55:11:e3:06:95:4b:36:98:71:2d:b0:1f:c2: 9f:ee:4e:e4:64:3f:27:da:9b:06:54:2f:3d:8c:96:35:f0:5d: 69:0d:d0:a2:83:7b:71:74:d5:cf:25:45:d2:13:8b:c9:d3:08: 77:04:08:04:05:80:bc:9d:43:c8:19:78:85:c6:2a:85:48:17: 82:a0:66:af:8c:fc:0b:ab:c6:ba:de:6a:7d:a3:9e:e4:54:a5: c5:27:07:e4:64:a2:6c:97:3f:fc:33:4f:97:16:f4:29:99:f4: dc:d1:89:08:9e:e8:a8:61:91:29:bb:30:ec:c3:3d:64:44:48: 5a:b2:02:6d:7b:02:f1:8c:ef:bf:59:74:93:14:9a:6d:81:61: 14:35:9d:b7:a7:56:1a:51:11:15:04:04:24:c6:78:82:99:ff: be:e9:69:8a:2f:d9:ba:f3:8b:99:34:2a:46:f7:d0:80:8f:10: e0:0d:c2:3b:06:94:00:a3:f8:9a:36:0f:df:1a:32:23:f3:64: 0b:35:b0:c7 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUVCPPpC8H+BnXcW1LuHr2eCX2kdwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDMxNzAxNTYzMVoX DTI2MDMxODA1MTEzMVowMzExMC8GA1UEAxMoNEE4OEVCNUYyMzBDRkQ1NkYxNkJD Mzk2NjRGMjM0MDk3Q0ZCMkZBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUskXxegDwUhFmrUA+/v4gq5k/JADIscylKBHcFxCyw76yRhdtKNHDFppeI uuN4UfcmSDGpLy3RQLXo1ioa2X/r2mBxJNxnWge7sJP7tNB5QlU/lgfa3oAYeDTs mHDBpZj7OVL97Hsjdw13vju1l+w9V6I5wERY7hgtHCOgUNDzzyTgRzZ2z1R8dFFA ptO+4MGu8g69FYgPu0uWJv6ptg1qYB0iIGH621anY9GkysRRpX/77u6Cdpuc3r0K 1EVZA8yxfA2UdV40VTa/zk4VG6JxenbHsuQuLl5ZHh/ySMDlBv6+VDzmq5xLOqEj Uhiq7gK9F1WCqKwgjI9a4fvFGCECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRKiOtf Iwz9VvFrw5Zk8jQJfPsvrjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1xhtGEm+943eXc/A3h4dA5tBBExOpMEjXU qHMTnRGlMmnM8l1UeLJhHdnCFE/GDgYLotTarpbDGMX8VRHjBpVLNphxLbAfwp/u TuRkPyfamwZULz2MljXwXWkN0KKDe3F01c8lRdITi8nTCHcECAQFgLydQ8gZeIXG KoVIF4KgZq+M/Aurxrrean2jnuRUpcUnB+RkomyXP/wzT5cW9CmZ9NzRiQie6Khh kSm7MOzDPWRESFqyAm17AvGM779ZdJMUmm2BYRQ1nbenVhpRERUEBCTGeIKZ/77p aYov2brzi5k0Kkb30ICPEOANwjsGlACj+Jo2D98aMiPzZAs1sMc= -----END CERTIFICATE-----Generated at Tue Mar 17 19:15:07 2026 by rpki-client