
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier: E3ANUsOyYtu9ICTXWjUY8/w4ec8dVvIv8WawvOlbWdw=
Subject key identifier: E7:6F:26:F8:00:1B:C8:19:1F:7D:A7:3A:4A:EA:73:45:6E:2D:ED:9D
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial: 2E5ECE05954FBC743CDA4288C9A4EBC27072C660
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number: 08C1
Signing time: Tue 21 Jul 2026 19:19:57 +0000
Manifest this update: Tue 21 Jul 2026 19:14:57 +0000
Manifest next update: Wed 22 Jul 2026 19:47:57 +0000
Files and hashes: 1: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
2: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
3: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
4: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
5: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
6: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
7: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
8: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: p6Is2+0rNspoXhDThyNwhnDMGsEYpJZPXrWRzPHwk1M=)
9: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
10: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
11: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
12: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
13: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
14: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
15: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
16: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
17: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
18: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
19: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
20: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
21: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 19:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5e:ce:05:95:4f:bc:74:3c:da:42:88:c9:a4:eb:c2:70:72:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Validity
Not Before: Jul 21 19:14:57 2026 GMT
Not After : Jul 22 19:47:57 2026 GMT
Subject: CN=E76F26F8001BC8191F7DA73A4AEA73456E2DED9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:83:8e:e4:ed:3c:25:55:73:e4:9c:da:99:
f0:52:5a:38:20:aa:0b:48:13:4f:d9:dc:f8:8e:29:
4a:40:3e:8e:af:6b:5e:a3:b5:7c:fd:42:b0:11:72:
4a:98:3f:18:3a:18:6d:90:23:95:0d:82:f9:97:2e:
35:f2:d4:a1:da:75:6b:16:c6:aa:f8:c7:5c:cc:6b:
6b:c1:f9:8a:c3:7d:ac:72:57:c5:fb:14:d1:b8:86:
04:7a:43:77:35:f3:6a:80:3a:7d:2f:6f:53:34:b7:
f0:03:a1:23:da:6f:51:18:79:42:a3:ed:c2:d8:01:
9a:2f:66:0e:b1:34:a8:c8:55:d7:1d:ba:4d:86:61:
25:eb:3d:ad:68:92:fa:7e:9d:90:47:b3:45:bc:12:
c7:ba:ff:c3:f3:7e:93:e0:ee:ec:3f:58:17:c4:10:
b9:00:67:74:62:76:30:84:63:3d:da:cf:50:f1:13:
13:4f:bd:12:e2:f5:b0:a6:b3:58:ea:df:b9:da:b6:
50:0e:88:5a:e4:61:c8:7c:65:0a:ae:64:37:2e:90:
2d:3e:ad:33:c6:de:67:1b:62:ed:2e:df:cd:61:26:
85:e2:38:e4:a2:32:b7:22:77:41:c6:36:56:c1:f0:
56:a1:7d:38:90:e6:d9:b8:71:df:15:8a:3c:c4:f9:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6F:26:F8:00:1B:C8:19:1F:7D:A7:3A:4A:EA:73:45:6E:2D:ED:9D
X509v3 Authority Key Identifier:
keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f8:1f:89:54:d1:70:22:12:95:4a:8d:61:ec:3a:1a:8f:4d:
24:e5:e5:4f:85:f1:dc:10:68:50:a7:d8:64:84:0d:f0:3c:78:
a0:a3:0f:3f:3a:fb:69:3b:f9:ec:d5:24:bb:97:f5:7e:26:41:
ad:5f:61:de:2e:e1:92:67:4f:d6:ae:9c:c0:1d:98:f8:68:f2:
ec:ab:60:90:b5:ae:35:62:2a:ff:18:61:65:08:c8:f6:23:d0:
5f:c0:48:61:2b:5e:4f:61:60:e0:1b:73:54:e2:14:7e:6f:d7:
b0:00:da:2c:f4:34:80:a8:85:b7:f5:4c:e2:fc:7e:5e:4e:94:
cb:cb:4f:6e:3b:85:9d:9a:fa:9e:fc:c4:4a:35:6b:fc:81:19:
6a:5d:b3:82:5a:70:cf:84:fc:ab:e2:a4:5d:8f:d0:72:a2:83:
4c:c0:06:48:12:72:90:9f:09:63:37:74:08:20:b7:3c:35:95:
c7:e2:5e:a0:0a:32:91:b2:41:fa:67:98:d0:62:65:ff:0a:28:
ca:ea:e5:12:5e:b5:60:8d:aa:32:b6:c5:05:d9:d1:6f:4a:e3:
a1:ef:d9:6f:f3:90:13:2b:d7:a2:0b:69:b8:05:a3:b9:88:3d:
79:d9:1f:08:a0:1f:ba:d0:1d:6a:9c:fc:1e:47:17:dd:43:ce:
08:d1:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:20:24 2026 by rpki-client