$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: JfkeoIBqLkI/JAIURDWNyNXe+mKFohnTB1D1AQlmgOY= Subject key identifier: 56:FF:29:EB:F7:07:F9:31:0C:0C:3F:FE:12:CA:91:37:BF:A5:F7:9B Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 7BB37B2AC653A83BA35E70218C0436F42B3B9701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0A71 Signing time: Sat 08 Aug 2026 05:59:57 +0000 Manifest this update: Sat 08 Aug 2026 05:54:57 +0000 Manifest next update: Sun 09 Aug 2026 09:31:57 +0000 Files and hashes: 1: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: jhxCCHBKPxvksH0YdUVn1gXZP6BYIa7ysmlYSiq8kas=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: uJpbUW4JrPXqpwkMTMWdVzPekrlj0XntAcL3muKs+sE=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: wp3ums3gGQiHSeOASzDuZJLMnB77wkX449JJWXCY9dk=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa (hash: N/0jPEvGNb25DvrH55KAo4wT1xlr30VbD4rmDHGaE0c=) 5: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: ynOny1uJUNDJNLQfaFn9KT+EKSkm3BPUARRqhnmeOW8=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa (hash: Sct428YozHYxwSzzijejfY4VQuK7q1QPuNYpBC2I2tk=) 7: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 8: 323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa (hash: E4Vla9mTVyy4cCQ80hyemXilIWR1XzkNFgiTj+0GXmo=) 9: 323030313a6466343a646438303a3a2f34382d3438203d3e2036323333.roa (hash: P+DRN1x6WrCoJ1/bJW3ozMaF6OfEUO23SN1Y8pMwFHY=) 10: 323030313a6466343a646438303a3a2f34382d3438203d3e2039333132.roa (hash: sOqxixjklaWO40uc9Yh3uSerFS1KO2El68KsQLHv5XU=) 11: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: KFvnslCPL4X/LQ69pCWBq5qDUjXjtppzmmhIraVeEMM=) 12: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa (hash: PLRJaVF0Jd4MzsBLSWEvQcF65VlQI4URu4pK/WVh1RA=) 13: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 09:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b3:7b:2a:c6:53:a8:3b:a3:5e:70:21:8c:04:36:f4:2b:3b:97:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Aug 8 05:54:57 2026 GMT Not After : Aug 9 09:31:57 2026 GMT Subject: CN=56FF29EBF707F9310C0C3FFE12CA9137BFA5F79B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:ef:40:0d:df:8f:44:ac:8e:32:46:22:ac: 65:80:95:9c:d2:14:16:c1:76:5d:a3:04:a7:45:c7: 27:21:19:24:21:ad:10:be:7b:0f:d6:1e:a4:5c:c0: a4:69:5f:24:98:fa:e8:35:dc:8d:21:21:89:b7:d8: 5e:80:f8:1c:f1:b4:c5:93:dc:ee:3f:bf:c6:08:3c: 0b:55:17:79:af:20:b9:2f:d8:92:d7:23:8d:43:c0: b5:3f:cc:3a:61:e0:24:8a:5c:9e:4d:1a:7c:1e:7c: dd:db:22:d0:24:38:4d:5f:97:4b:a1:d6:3e:d5:9d: 73:5f:76:85:64:d6:79:e4:b1:26:ed:36:16:01:37: 14:70:36:7f:de:9d:f1:69:03:c6:95:47:e7:5e:c9: 62:a4:a2:d0:cb:f0:67:5a:e2:90:37:0c:b1:32:4b: 46:5e:34:f1:b0:ad:48:cf:01:ab:88:48:fe:c9:6c: 1d:41:ce:cc:af:b0:fc:41:51:c1:73:ee:bd:93:b4: 3b:9b:e5:16:d8:86:8d:7b:5a:c9:16:bf:04:1a:88: c5:2e:0b:88:52:92:45:35:b8:6c:29:95:c4:48:ea: 11:61:ee:db:1c:0b:b2:b3:c0:92:67:fe:fc:19:4e: ac:b8:c4:8b:6f:f4:36:ed:a4:38:77:dd:ae:00:d3: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FF:29:EB:F7:07:F9:31:0C:0C:3F:FE:12:CA:91:37:BF:A5:F7:9B X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:31:28:dd:5a:e9:a2:cf:6e:aa:e6:cc:f9:6a:a2:21:a6:a2: 19:b2:8b:00:1e:79:8e:a1:4c:91:9a:c4:3b:31:0b:e6:cb:e8: d8:25:7c:0a:ec:06:8f:96:e5:92:d3:5d:9a:e8:cd:6f:dc:09: 0f:a3:30:97:02:76:84:e5:fa:4c:2e:e4:4f:61:1d:84:83:94: a0:5c:f8:5a:b3:f7:72:9c:79:56:e0:01:e9:b4:05:df:ba:fd: 9d:e6:42:38:42:c3:b3:56:db:9a:df:0b:a3:1d:65:ff:82:df: 3e:73:58:38:f2:75:54:99:90:29:87:93:c0:f3:72:d3:0b:d9: 87:19:83:49:69:96:78:cb:5d:03:05:26:b1:ef:ec:f6:60:5d: 5d:11:80:5b:05:3d:14:53:49:cf:fb:71:12:de:ac:5a:06:35: c7:49:44:68:fd:2b:09:ca:05:0e:3b:6f:07:1e:c3:39:5c:5b: b9:6c:c2:88:f0:ea:68:d9:2f:f8:09:27:63:d3:10:1a:06:af: b0:e5:44:5d:c9:c8:ad:21:de:2c:6c:d8:18:fb:4b:10:d2:02: fe:6d:71:9f:f3:7d:72:bd:76:21:6b:df:5f:99:de:c7:a6:3a: 23:2c:35:e9:f6:9d:33:83:71:d1:9f:42:91:85:9f:a7:61:25: ea:fe:a0:9f -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUe7N7KsZTqDujXnAhjAQ29Cs7lwEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDgwODA1NTQ1N1oX DTI2MDgwOTA5MzE1N1owMzExMC8GA1UEAxMoNTZGRjI5RUJGNzA3RjkzMTBDMEMz RkZFMTJDQTkxMzdCRkE1Rjc5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/770AN349ErI4yRiKsZYCVnNIUFsF2XaMEp0XHJyEZJCGtEL57D9YepFzA pGlfJJj66DXcjSEhibfYXoD4HPG0xZPc7j+/xgg8C1UXea8guS/YktcjjUPAtT/M OmHgJIpcnk0afB583dsi0CQ4TV+XS6HWPtWdc192hWTWeeSxJu02FgE3FHA2f96d 8WkDxpVH517JYqSi0MvwZ1rikDcMsTJLRl408bCtSM8Bq4hI/slsHUHOzK+w/EFR wXPuvZO0O5vlFtiGjXtayRa/BBqIxS4LiFKSRTW4bCmVxEjqEWHu2xwLsrPAkmf+ /BlOrLjEi2/0Nu2kOHfdrgDTm08CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRW/ynr 9wf5MQwMP/4SypE3v6X3mzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcxKN1a6aLPbqrmzPlqoiGmohmyiwAeeY6h TJGaxDsxC+bL6NglfArsBo+W5ZLTXZrozW/cCQ+jMJcCdoTl+kwu5E9hHYSDlKBc +Fqz93KceVbgAem0Bd+6/Z3mQjhCw7NW25rfC6MdZf+C3z5zWDjydVSZkCmHk8Dz ctML2YcZg0lplnjLXQMFJrHv7PZgXV0RgFsFPRRTSc/7cRLerFoGNcdJRGj9KwnK BQ47bwcewzlcW7lswojw6mjZL/gJJ2PTEBoGr7DlRF3JyK0h3ixs2Bj7SxDSAv5t cZ/zfXK9diFr31+Z3semOiMsNen2nTODcdGfQpGFn6dhJer+oJ8= -----END CERTIFICATE-----Generated at Sat Aug 8 10:35:03 2026 by rpki-client