$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: /RlxQ3FtiNLFfzadaETVUTOhCMcK8WoPECLaQJtjr6w= Subject key identifier: 43:A4:16:D0:6A:94:F3:B9:78:B5:5B:21:D2:F6:13:13:1E:22:46:9E Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 41EF6CFADC6AFAC37AC5A4E648B794E0EE1E1066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 09D3 Signing time: Fri 01 May 2026 21:11:32 +0000 Manifest this update: Fri 01 May 2026 21:06:32 +0000 Manifest next update: Sun 03 May 2026 00:09:32 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 3: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 5: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 7: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: utkR5LAs+4YJWGNd7A/m5A0MlDJ0gFPMRT+XiCaK3RU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 00:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ef:6c:fa:dc:6a:fa:c3:7a:c5:a4:e6:48:b7:94:e0:ee:1e:10:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: May 1 21:06:32 2026 GMT Not After : May 3 00:09:32 2026 GMT Subject: CN=43A416D06A94F3B978B55B21D2F613131E22469E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:bd:74:ee:1a:73:fd:66:fa:14:31:d2:e1: b5:de:52:6f:45:e6:ce:94:4b:5f:4d:c1:88:f0:12: 94:e8:7e:a1:2c:b7:eb:8d:c4:35:66:9b:1d:c4:e3: 18:9f:c4:6f:59:1e:21:b8:12:3d:43:50:78:c3:73: ed:f6:38:1b:52:b8:10:41:f2:19:4d:9f:e0:ae:1f: 45:21:a8:25:56:0a:a4:75:1a:01:85:51:5c:90:33: e3:e0:ee:5d:b7:34:36:24:7b:cb:4a:99:f5:49:3f: ef:a8:6d:91:4d:92:b5:6e:49:b5:a2:ff:29:a4:05: 88:ba:a4:a3:93:96:06:ef:bb:5c:67:92:d0:9c:da: 6b:fe:96:3c:3b:41:76:4d:5b:4c:39:5d:19:b2:e0: e4:cc:ac:ab:7f:ca:94:14:ba:e2:6e:81:cb:7d:6b: 3a:89:8a:4f:9c:93:77:f9:9f:5a:13:25:07:6e:d4: 30:22:4c:b1:28:ed:17:a7:66:9a:13:42:43:21:f1: 1f:bd:de:8f:93:55:41:d3:3c:14:e4:56:32:80:6b: 57:c0:9e:ff:74:c2:2b:5f:17:0f:99:07:c7:0b:f4: d4:2f:98:ee:02:63:76:30:f4:7a:36:f8:80:f5:02: 5a:6e:c9:03:ef:05:3c:f1:56:a4:19:c6:e5:f8:3c: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A4:16:D0:6A:94:F3:B9:78:B5:5B:21:D2:F6:13:13:1E:22:46:9E X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:66:64:9e:dc:8a:08:aa:76:ec:2b:8f:2e:45:6f:e5:fb:05: 07:28:8a:6c:61:23:54:34:11:e2:e4:68:a1:d8:94:62:a7:b7: d9:bc:9e:f2:03:94:b5:6f:3c:8b:08:49:d3:a3:b3:5f:28:6d: 8f:c2:fc:1e:c1:95:bf:9c:44:b8:39:cf:35:db:58:ea:0e:2b: f9:9a:c9:e0:95:c2:25:6e:0b:ca:e6:43:67:9e:ad:c0:6d:8a: c9:ce:75:5e:03:4a:a2:5b:f3:27:3a:a0:e6:3b:29:ed:42:af: 90:4c:62:19:3f:7f:a8:49:ba:19:92:1a:c7:78:c4:6f:04:48: e3:d2:69:7c:73:a8:f2:2b:84:02:d6:2c:9a:80:c4:47:ec:97: df:18:fc:3b:29:8f:37:d9:41:6d:91:f4:30:b4:81:22:5e:52: e9:c7:63:7a:12:17:5e:84:ed:00:b1:e0:3b:87:c7:d4:57:b2: d7:23:2f:91:45:fd:d7:36:56:6e:fb:da:45:20:11:f4:b5:ca: f2:fc:9b:cc:cb:8d:97:4f:29:64:eb:39:f8:bf:03:3c:37:23: 2c:76:de:c3:7f:30:ab:e8:90:83:6e:83:56:a8:7a:49:4f:f8: 74:99:7d:7d:bd:a8:b2:f8:17:08:85:aa:f3:e5:aa:0b:40:8f: 80:64:ac:84 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUQe9s+txq+sN6xaTmSLeU4O4eEGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDUwMTIxMDYzMloX DTI2MDUwMzAwMDkzMlowMzExMC8GA1UEAxMoNDNBNDE2RDA2QTk0RjNCOTc4QjU1 QjIxRDJGNjEzMTMxRTIyNDY5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCZvXTuGnP9ZvoUMdLhtd5Sb0XmzpRLX03BiPASlOh+oSy3643ENWabHcTj GJ/Eb1keIbgSPUNQeMNz7fY4G1K4EEHyGU2f4K4fRSGoJVYKpHUaAYVRXJAz4+Du Xbc0NiR7y0qZ9Uk/76htkU2StW5JtaL/KaQFiLqko5OWBu+7XGeS0Jzaa/6WPDtB dk1bTDldGbLg5Mysq3/KlBS64m6By31rOomKT5yTd/mfWhMlB27UMCJMsSjtF6dm mhNCQyHxH73ej5NVQdM8FORWMoBrV8Ce/3TCK18XD5kHxwv01C+Y7gJjdjD0ejb4 gPUCWm7JA+8FPPFWpBnG5fg82TECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRDpBbQ apTzuXi1WyHS9hMTHiJGnjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZmZJ7cigiqduwrjy5Fb+X7BQcoimxhI1Q0 EeLkaKHYlGKnt9m8nvIDlLVvPIsISdOjs18obY/C/B7Blb+cRLg5zzXbWOoOK/ma yeCVwiVuC8rmQ2eercBtisnOdV4DSqJb8yc6oOY7Ke1Cr5BMYhk/f6hJuhmSGsd4 xG8ESOPSaXxzqPIrhALWLJqAxEfsl98Y/DspjzfZQW2R9DC0gSJeUunHY3oSF16E 7QCx4DuHx9RXstcjL5FF/dc2Vm772kUgEfS1yvL8m8zLjZdPKWTrOfi/Azw3Iyx2 3sN/MKvokINug1aoeklP+HSZfX29qLL4FwiFqvPlqgtAj4BkrIQ= -----END CERTIFICATE-----Generated at Sat May 2 01:34:36 2026 by rpki-client