$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft File: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft (raw, json) Hash identifier: hEmxM5WXdkvgxLOgGAp1KujIcHdaRqnVLeZ7hfadrk4= Subject key identifier: 97:F2:E6:A5:EE:88:C1:3E:D8:F1:F9:49:89:07:22:10:D8:9A:15:42 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 0BE3A86BDD44E3627C1988D6B215C9246F4BF93F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft Manifest number: 018A Signing time: Sat 08 Aug 2026 08:19:57 +0000 Manifest this update: Sat 08 Aug 2026 08:14:57 +0000 Manifest next update: Sun 09 Aug 2026 11:40:57 +0000 Files and hashes: 1: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (hash: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo=) 2: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (hash: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0=) 3: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (hash: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI=) 4: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: A+n33m7aMq8dWmlNODuImDbmHluR0nRCgY8pOPk9SGU=) 5: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI=) 6: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl (hash: oBY9wnL64QMpS1QZ7YOIg4xKEXRJ23JenwmTQsLuPGo=) 7: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (hash: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM=) 8: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: m8YqiID+Q725PKBIKrUauO2lTKAbZU016aARa/XfmOg=) 9: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (hash: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk=) 10: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (hash: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 11:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e3:a8:6b:dd:44:e3:62:7c:19:88:d6:b2:15:c9:24:6f:4b:f9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Aug 8 08:14:57 2026 GMT Not After : Aug 9 11:40:57 2026 GMT Subject: CN=97F2E6A5EE88C13ED8F1F94989072210D89A1542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:b8:3a:c5:cd:4d:eb:28:46:6a:ad:b4:e1: bb:fc:40:0d:62:bd:9c:4e:5a:22:38:08:43:e0:f6: a7:4d:8e:ad:43:66:03:74:82:f7:25:95:10:7d:e4: 5f:16:4f:c0:a3:be:ff:da:fb:20:6f:d8:25:9e:91: 99:b0:e6:2d:eb:76:0f:4b:33:01:a6:ef:6a:b4:db: 8c:ec:8c:00:e2:36:11:e9:18:ca:62:8f:75:1c:e4: c4:28:ef:e9:88:17:c0:eb:57:5d:8a:08:3e:a4:ef: 2b:9b:be:6e:fe:d9:87:41:d1:ad:8b:66:3c:8c:d2: a2:d0:02:42:f9:64:20:e9:80:d3:3e:b6:27:a4:fe: 40:0a:5c:8a:a6:09:71:6e:23:c5:07:50:bc:3f:1b: 2c:10:62:99:cd:69:e9:76:90:22:d5:b4:f7:18:e8: 57:bd:8a:88:ed:bf:9e:8d:a9:11:e2:6c:99:5e:45: 86:57:0e:a5:3c:20:73:6a:ce:93:95:18:0a:3f:f6: 8c:30:f6:bf:92:55:95:66:83:c2:97:2a:ad:57:8c: c2:6d:fd:eb:ba:cf:4c:e9:37:f9:fa:3e:b1:d7:7f: 48:fc:59:fa:02:67:b8:44:bc:26:38:49:1c:10:43: 89:58:35:bd:39:dd:43:23:64:27:69:85:69:0c:c9: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:E6:A5:EE:88:C1:3E:D8:F1:F9:49:89:07:22:10:D8:9A:15:42 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7d:36:62:d3:0d:73:42:a7:fb:9a:51:9d:b1:4f:c8:0e:61: 23:d9:6a:4a:42:a7:42:a7:58:77:5e:22:72:f3:f3:ff:b9:8f: 77:db:27:6e:52:1d:2c:a0:20:b5:c3:99:ea:ce:34:3e:ea:73: 25:73:b5:20:7d:6b:46:9b:52:b8:94:69:94:dd:cf:46:57:15: 67:47:0f:2c:9e:d8:df:ca:b1:5a:d3:6f:e5:31:e6:7b:6a:30: 27:74:a3:ce:8c:94:82:c0:b6:6b:b5:3b:0b:b7:5d:9e:e9:ab: 31:51:1f:ea:c8:82:60:7a:46:0a:00:2d:74:10:f9:ca:d6:84: 4d:74:36:ed:54:17:b2:70:0f:6c:73:d6:95:af:25:73:c3:2f: 9f:b8:d9:ff:c7:fd:06:76:00:5c:73:9b:45:bf:24:94:bf:ee: e0:ae:53:36:c1:14:64:47:4c:ea:36:1b:58:ed:5a:5f:b6:7b: 42:0f:b8:75:15:86:7a:0c:ff:fc:b9:d5:92:c6:97:fa:9b:ab: 07:a0:c9:60:b4:29:5d:ca:2c:af:c7:53:77:a2:1c:79:57:59: 97:aa:2d:ca:4c:22:1f:bb:b8:28:d1:9c:5e:51:ee:bb:e3:e9: 5a:ad:8f:f5:d4:a3:be:7a:38:72:8c:56:fa:bb:8b:20:90:2e: 85:b2:14:80 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUC+Ooa91E42J8GYjWshXJJG9L+T8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDgwODA4MTQ1N1oX DTI2MDgwOTExNDA1N1owMzExMC8GA1UEAxMoOTdGMkU2QTVFRTg4QzEzRUQ4RjFG OTQ5ODkwNzIyMTBEODlBMTU0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQxuDrFzU3rKEZqrbThu/xADWK9nE5aIjgIQ+D2p02OrUNmA3SC9yWVEH3k XxZPwKO+/9r7IG/YJZ6RmbDmLet2D0szAabvarTbjOyMAOI2EekYymKPdRzkxCjv 6YgXwOtXXYoIPqTvK5u+bv7Zh0HRrYtmPIzSotACQvlkIOmA0z62J6T+QApciqYJ cW4jxQdQvD8bLBBimc1p6XaQItW09xjoV72KiO2/no2pEeJsmV5FhlcOpTwgc2rO k5UYCj/2jDD2v5JVlWaDwpcqrVeMwm3967rPTOk3+fo+sdd/SPxZ+gJnuES8JjhJ HBBDiVg1vTndQyNkJ2mFaQzJNxsCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSX8ual 7ojBPtjx+UmJByIQ2JoVQjAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvQTNDRTZFQjUzMUE4OTUxRDI0QTM3REYyN0EwMUVC Mzk2NTFEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAd9NmLTDXNCp/uaUZ2xT8gOYSPZakpCp0Kn WHdeInLz8/+5j3fbJ25SHSygILXDmerOND7qcyVztSB9a0abUriUaZTdz0ZXFWdH Dyye2N/KsVrTb+Ux5ntqMCd0o86MlILAtmu1Owu3XZ7pqzFRH+rIgmB6RgoALXQQ +crWhE10Nu1UF7JwD2xz1pWvJXPDL5+42f/H/QZ2AFxzm0W/JJS/7uCuUzbBFGRH TOo2G1jtWl+2e0IPuHUVhnoM//y51ZLGl/qbqwegyWC0KV3KLK/HU3eiHHlXWZeq LcpMIh+7uCjRnF5R7rvj6Vqtj/XUo756OHKMVvq7iyCQLoWyFIA= -----END CERTIFICATE-----Generated at Sat Aug 8 10:33:44 2026 by rpki-client