$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft File: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft (raw, json) Hash identifier: jNdjsCXkI49A5hw3/sQ6Sil5PuDXwCuWWoLJkPsg6uE= Subject key identifier: F8:DD:FA:0B:C4:77:7F:73:38:B7:74:AA:34:09:33:D9:19:F3:B9:7E Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 3258FEADAB469B1DF44BFF19297A489EA5386ED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft Manifest number: 01CC Signing time: Thu 24 Sep 2026 13:56:17 +0000 Manifest this update: Thu 24 Sep 2026 13:51:17 +0000 Manifest next update: Fri 25 Sep 2026 15:39:17 +0000 Files and hashes: 1: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (hash: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo=) 2: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (hash: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI=) 3: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI=) 4: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (hash: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0=) 5: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: m8YqiID+Q725PKBIKrUauO2lTKAbZU016aARa/XfmOg=) 6: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl (hash: AMfFi9fzFlQv/ZOCSCNiO99luuidW4q+G7YPKIgg97Q=) 7: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (hash: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8=) 8: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (hash: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk=) 9: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (hash: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM=) 10: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: A+n33m7aMq8dWmlNODuImDbmHluR0nRCgY8pOPk9SGU=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 15:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:58:fe:ad:ab:46:9b:1d:f4:4b:ff:19:29:7a:48:9e:a5:38:6e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Sep 24 13:51:17 2026 GMT Not After : Sep 25 15:39:17 2026 GMT Subject: CN=F8DDFA0BC4777F7338B774AA340933D919F3B97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:45:79:5a:c7:3e:db:bb:9b:eb:78:56:62:13: 84:66:99:46:3b:93:31:83:bd:2e:06:59:67:64:fe: d8:21:72:83:bc:6e:9e:f6:af:55:53:bf:1a:14:19: 60:b2:a4:98:9e:9d:aa:0c:2f:6e:25:81:28:90:0d: 5c:f6:b8:26:32:6b:cb:a4:8f:5d:38:73:c1:d3:2f: a1:9d:0e:0b:f0:9d:2a:ed:fb:24:40:e7:e8:d0:df: 10:c4:b1:53:94:99:1a:3d:e3:56:6f:3b:cb:fa:a7: 3c:dc:fd:a4:7c:b2:80:a6:12:d2:12:39:d5:ef:1c: a0:83:e3:a1:75:af:9e:a0:32:22:22:3c:b1:9e:03: be:85:d8:9e:02:98:0e:92:12:6c:d1:1d:d9:0c:0e: d8:16:d7:58:10:d6:7d:a7:fb:1a:db:1a:e9:ff:c9: a4:10:bd:d6:a9:87:69:9c:5e:a4:ef:01:0f:6b:03: a0:80:81:81:41:69:ba:69:1a:25:05:4e:f1:b8:c8: 7c:e0:de:1a:1b:09:d2:49:c6:8b:29:02:f6:36:bb: 5b:1a:3e:db:c3:80:31:1e:7d:ab:14:d3:69:f3:3d: 78:3d:97:8b:44:50:3e:b8:ec:a0:54:21:d3:51:fb: 3d:54:64:a4:74:f7:dd:2f:42:f4:f6:1e:dc:6a:b4: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DD:FA:0B:C4:77:7F:73:38:B7:74:AA:34:09:33:D9:19:F3:B9:7E X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9f:d6:4b:e8:6d:af:51:72:53:ad:5f:d5:dd:18:d6:e3:87: 8e:a6:50:89:48:ea:de:5e:73:6f:9b:18:09:2b:ce:e8:cc:8d: 4f:6e:94:40:a5:c5:cf:1a:a4:0c:1b:5e:eb:a5:5b:56:f1:20: ec:94:07:af:b2:8c:d9:dd:21:64:b0:97:b1:80:95:a8:ac:bb: e3:db:62:4b:dd:ce:33:2b:66:f8:db:95:3a:ab:9c:65:8b:bd: cc:23:47:49:a5:a5:d7:58:4d:89:91:12:24:24:cc:87:0e:31: 69:ca:1e:45:10:23:b4:b7:09:a9:34:e8:40:d0:14:d7:35:0d: 3b:f9:b1:2d:89:15:b9:61:2d:e9:91:b5:d8:3e:d6:5f:3e:8d: 17:b9:6d:8c:e5:7f:fa:ff:08:d9:a8:23:36:66:a4:68:56:62: b9:67:9d:37:24:fc:36:ae:f1:72:78:97:a0:36:53:2b:59:06: 99:a4:55:ca:65:b6:9e:77:1b:89:48:f7:bc:38:34:6e:70:97: 50:26:48:06:1b:0a:ba:b7:04:9e:1f:56:64:53:10:5b:89:e8: 6b:36:c2:e1:ef:76:5a:27:91:b6:8e:31:36:37:97:a7:8c:b9: 20:0e:6b:96:dc:a9:a8:7b:7b:c8:dd:ca:76:4b:9e:5d:95:28: 12:ca:f3:da -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUMlj+ratGmx30S/8ZKXpInqU4btEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDkyNDEzNTExN1oX DTI2MDkyNTE1MzkxN1owMzExMC8GA1UEAxMoRjhEREZBMEJDNDc3N0Y3MzM4Qjc3 NEFBMzQwOTMzRDkxOUYzQjk3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxFeVrHPtu7m+t4VmIThGaZRjuTMYO9LgZZZ2T+2CFyg7xunvavVVO/GhQZ YLKkmJ6dqgwvbiWBKJANXPa4JjJry6SPXThzwdMvoZ0OC/CdKu37JEDn6NDfEMSx U5SZGj3jVm87y/qnPNz9pHyygKYS0hI51e8coIPjoXWvnqAyIiI8sZ4DvoXYngKY DpISbNEd2QwO2BbXWBDWfaf7Gtsa6f/JpBC91qmHaZxepO8BD2sDoICBgUFpumka JQVO8bjIfODeGhsJ0knGiykC9ja7Wxo+28OAMR59qxTTafM9eD2Xi0RQPrjsoFQh 01H7PVRkpHT33S9C9PYe3Gq0+20CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT43foL xHd/czi3dKo0CTPZGfO5fjAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvQTNDRTZFQjUzMUE4OTUxRDI0QTM3REYyN0EwMUVC Mzk2NTFEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKf1kvoba9RclOtX9XdGNbjh46mUIlI6t5e c2+bGAkrzujMjU9ulEClxc8apAwbXuulW1bxIOyUB6+yjNndIWSwl7GAlaisu+Pb YkvdzjMrZvjblTqrnGWLvcwjR0mlpddYTYmREiQkzIcOMWnKHkUQI7S3Cak06EDQ FNc1DTv5sS2JFblhLemRtdg+1l8+jRe5bYzlf/r/CNmoIzZmpGhWYrlnnTck/Dau 8XJ4l6A2UytZBpmkVcpltp53G4lI97w4NG5wl1AmSAYbCrq3BJ4fVmRTEFuJ6Gs2 wuHvdlonkbaOMTY3l6eMuSAOa5bcqah7e8jdynZLnl2VKBLK89o= -----END CERTIFICATE-----Generated at Thu Sep 24 17:10:17 2026 by rpki-client