$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json) Hash identifier: 3t1XisEMGpsd4ylYGTg5nBmKoQ4qbXlhGI7DN6BTc9Q= Subject key identifier: D3:90:33:32:18:C5:FB:DB:29:F8:76:C9:87:1F:D3:EF:03:D5:E7:C1 Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Certificate serial: 7D978D5A6534435527E49B9255A84CC9BCEF5DB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft Manifest number: 0881 Signing time: Tue 21 Apr 2026 13:21:32 +0000 Manifest this update: Tue 21 Apr 2026 13:16:32 +0000 Manifest next update: Wed 22 Apr 2026 14:54:32 +0000 Files and hashes: 1: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=) 2: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=) 3: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=) 4: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=) 5: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=) 6: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=) 7: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: UHBpg3C6WXmf8mSymT3DhfMWQq9tMGvcnbRYIfK6c3g=) 8: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=) 9: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=) 10: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=) 11: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=) 12: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=) 13: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=) 14: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=) 15: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=) 16: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=) 17: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:97:8d:5a:65:34:43:55:27:e4:9b:92:55:a8:4c:c9:bc:ef:5d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729 Validity Not Before: Apr 21 13:16:32 2026 GMT Not After : Apr 22 14:54:32 2026 GMT Subject: CN=D390333218C5FBDB29F876C9871FD3EF03D5E7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:8c:19:fb:1f:3f:d4:25:d6:00:9f:0a:48: ac:ae:6d:09:e8:3a:5b:7e:d0:e0:dc:b3:8d:ea:75: a2:65:00:c0:80:eb:98:7e:11:9b:fd:84:9b:c4:26: 4a:4d:da:df:8a:7d:54:e8:da:cd:90:0a:fd:cc:5d: bd:be:d2:48:c3:ed:e2:bb:44:83:d1:8d:fa:70:01: 52:13:17:6d:12:8f:5f:0a:07:33:15:e6:b4:bc:03: e6:20:00:3e:d5:57:81:cd:8d:e3:c0:87:98:6a:81: 3f:78:43:b9:de:ce:cf:ad:45:5e:57:90:b2:d9:87: 2b:ca:5f:d4:3c:a9:3e:57:f8:51:64:8c:24:50:3d: 90:a4:ce:62:4c:3f:c8:b2:db:d7:bd:19:3d:58:83: 5c:7f:56:48:7e:47:3c:cc:ad:12:7c:7f:ff:55:a9: f3:a9:15:9a:95:5c:69:52:12:a8:b7:8c:67:38:3c: 85:04:f1:10:d7:07:5d:7c:4c:72:eb:49:05:7a:3c: ce:fc:a8:df:91:df:a8:e5:4a:29:70:cb:1c:56:c0: 1a:fd:96:d7:fd:d5:86:06:6d:60:e9:37:8e:e8:43: a8:5b:25:f9:bf:3d:d3:1f:3b:01:30:78:f3:7e:28: dc:c5:78:0e:47:81:f3:ac:af:b6:dc:75:d7:0c:33: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:90:33:32:18:C5:FB:DB:29:F8:76:C9:87:1F:D3:EF:03:D5:E7:C1 X509v3 Authority Key Identifier: keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1f:0c:b5:c5:25:a6:45:1a:6f:b6:3f:35:e5:60:d6:df:71: 12:76:02:67:99:62:73:fc:2e:b0:e0:24:55:84:54:26:69:92: 4d:6e:40:5f:d3:44:07:ad:1d:05:37:36:52:85:31:8a:ad:26: 8e:ff:bd:dd:ff:4f:50:cd:0a:a0:ef:71:2a:76:d1:b6:ca:59: a1:01:7f:57:65:b0:65:27:9a:89:90:2e:d2:6a:2e:eb:40:d9: dd:87:35:16:34:f1:5f:05:b8:f0:59:bb:9f:4f:20:ad:b9:e5: c6:06:bf:67:2e:55:1a:fe:da:44:cd:ef:4e:97:e6:e9:34:0a: 48:7c:fa:14:f8:33:32:88:ff:37:86:3f:5f:49:14:68:0b:6c: e6:81:4e:da:c5:62:cc:b6:93:64:30:37:58:f2:e3:8c:ba:09: bc:73:ed:4c:17:63:fa:e1:02:02:16:8e:84:38:c2:39:35:de: ae:3a:d8:81:71:74:ca:0c:a4:28:d6:17:65:4c:d0:70:b7:1b: 01:c8:36:0a:96:e2:63:38:1c:2f:c8:7e:02:b1:e6:95:53:65: 2d:2d:f1:70:56:e0:2b:71:95:56:c0:6e:f2:fe:33:f3:bd:79: 80:2b:86:4a:ae:8c:60:55:a5:d1:68:cf:e2:77:ab:27:1c:10: 75:2a:8d:41 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUfZeNWmU0Q1Un5JuSVahMybzvXbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDQyMTEzMTYzMloX DTI2MDQyMjE0NTQzMlowMzExMC8GA1UEAxMoRDM5MDMzMzIxOEM1RkJEQjI5Rjg3 NkM5ODcxRkQzRUYwM0Q1RTdDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALW5jBn7Hz/UJdYAnwpIrK5tCeg6W37Q4Nyzjep1omUAwIDrmH4Rm/2Em8Qm Sk3a34p9VOjazZAK/cxdvb7SSMPt4rtEg9GN+nABUhMXbRKPXwoHMxXmtLwD5iAA PtVXgc2N48CHmGqBP3hDud7Oz61FXleQstmHK8pf1DypPlf4UWSMJFA9kKTOYkw/ yLLb170ZPViDXH9WSH5HPMytEnx//1Wp86kVmpVcaVISqLeMZzg8hQTxENcHXXxM cutJBXo8zvyo35HfqOVKKXDLHFbAGv2W1/3VhgZtYOk3juhDqFsl+b890x87ATB4 834o3MV4DkeB86yvttx11wwzGg0CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTTkDMy GMX72yn4dsmHH9PvA9XnwTAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkfDLXFJaZFGm+2PzXlYNbfcRJ2AmeZYnP8 LrDgJFWEVCZpkk1uQF/TRAetHQU3NlKFMYqtJo7/vd3/T1DNCqDvcSp20bbKWaEB f1dlsGUnmomQLtJqLutA2d2HNRY08V8FuPBZu59PIK255cYGv2cuVRr+2kTN706X 5uk0Ckh8+hT4MzKI/zeGP19JFGgLbOaBTtrFYsy2k2QwN1jy44y6Cbxz7UwXY/rh AgIWjoQ4wjk13q462IFxdMoMpCjWF2VM0HC3GwHINgqW4mM4HC/IfgKx5pVTZS0t 8XBW4CtxlVbAbvL+M/O9eYArhkqujGBVpdFoz+J3qyccEHUqjUE= -----END CERTIFICATE-----Generated at Wed Apr 22 05:36:28 2026 by rpki-client