
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File: 5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier: 7gGV3xMO75rOdyaQFUbu/q7NSiiIVICXFppNYtdnJiE=
Subject key identifier: 21:7F:2A:E4:F1:D9:6A:F1:EA:E6:AE:17:08:45:9E:E6:47:81:59:4F
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial: 01FBBC8FD6747B942D06A06D11EFDE9D8D6508AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number: 013A
Signing time: Wed 21 Oct 2026 11:56:19 +0000
Manifest this update: Wed 21 Oct 2026 11:51:19 +0000
Manifest next update: Thu 22 Oct 2026 13:27:19 +0000
Files and hashes: 1: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
2: 323430373a396534303a3a2f33322d3438203d3e2036323333.roa (hash: jMqB1nTZ1LKvgd5chAvocdwe/Wp2mFf6s/+r+y83VW8=)
3: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (hash: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM=)
4: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (hash: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY=)
5: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: QkRGtTnN1haBuoctKcMgQQSMUa9sSYuLpfsF+N9rc88=)
6: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (hash: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4=)
7: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
8: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (hash: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM=)
9: 323430373a396534303a3a2f33322d3438203d3e2039333132.roa (hash: YMJWO7/JGHkml3YyFWU4umkjg98j7BoveCFvevYNLfA=)
10: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
11: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (hash: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 13:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fb:bc:8f:d6:74:7b:94:2d:06:a0:6d:11:ef:de:9d:8d:65:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Validity
Not Before: Oct 21 11:51:19 2026 GMT
Not After : Oct 22 13:27:19 2026 GMT
Subject: CN=217F2AE4F1D96AF1EAE6AE1708459EE64781594F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:5f:62:6d:c8:69:3f:20:65:fb:7d:99:0c:
93:95:a3:76:c2:10:67:84:bf:b7:8f:70:64:35:30:
d5:de:24:f2:05:c6:f1:d6:58:84:ef:25:6c:77:68:
a4:7b:3c:0a:20:ac:db:eb:f6:ef:8f:cd:12:6e:d0:
3b:31:1b:5f:db:7e:9c:4e:c7:30:29:05:33:f3:3c:
30:63:e1:74:71:85:45:e8:58:72:48:97:2d:eb:29:
f3:91:9f:b9:94:bf:f6:c1:52:2c:73:0d:b8:8f:3f:
ed:57:77:9a:31:bd:10:ca:3c:64:dd:4b:3c:f6:0b:
eb:2e:05:7a:f1:47:3b:30:65:d0:b7:9a:a7:1e:80:
19:97:b0:90:ff:bf:77:ac:32:95:32:d1:f8:cb:56:
2a:76:51:fe:ed:1d:5e:f8:d0:82:40:9c:da:bb:ff:
a5:6a:af:d5:d8:2d:bb:c2:dd:70:99:82:25:4b:ef:
b6:49:54:5e:5c:14:d1:78:00:7b:88:16:7d:46:5f:
0f:10:6a:35:8b:76:c2:f3:d1:23:45:3e:38:2c:0f:
9d:53:f1:1e:bb:89:cf:9b:3a:da:1c:9d:0a:41:62:
b8:c1:0d:42:a5:f2:c3:3f:f5:f6:82:87:d7:d2:73:
09:f1:60:42:23:09:5f:79:c3:6e:14:01:56:3d:44:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:2A:E4:F1:D9:6A:F1:EA:E6:AE:17:08:45:9E:E6:47:81:59:4F
X509v3 Authority Key Identifier:
keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ab:43:0b:67:42:6b:aa:8e:e5:cc:86:e5:01:03:cd:db:b3:
2b:21:ac:a6:fc:74:87:7b:66:c0:0f:c0:07:c0:d5:76:99:62:
08:a6:80:91:b0:04:d9:b2:3c:e1:62:87:83:94:b0:fe:20:e9:
c3:4b:ed:ca:73:50:19:e9:00:6f:90:73:fa:52:b5:4c:98:24:
bd:18:9a:ca:92:fb:b5:c2:32:a1:9d:2d:e7:f0:f5:51:7b:6b:
65:d4:6f:25:95:14:ac:aa:b2:b8:49:e4:f1:6b:31:02:68:54:
c8:c1:2c:81:ee:a9:75:d3:99:3d:0d:ce:38:ed:f4:1d:88:28:
77:5a:54:f7:8e:b3:35:6b:63:27:9a:80:64:63:94:6b:2d:42:
29:c5:73:71:26:7c:83:db:8f:1c:58:0a:01:41:ba:fd:e7:f3:
2d:22:e4:8f:e6:7c:15:82:fe:64:13:ce:27:7f:96:76:4e:90:
6e:31:6d:e7:2e:6a:4d:c0:f9:b1:c9:ee:40:ec:d7:15:a4:b5:
61:1e:0e:0c:0e:70:b7:06:3d:92:dc:00:5e:a3:c4:d4:84:15:
ba:00:48:cd:ad:08:2a:f2:57:b2:bd:5b:6e:52:99:1c:86:a8:
90:42:e1:34:98:c8:f6:92:05:70:a7:63:3d:d7:c9:f2:5f:5d:
cf:ef:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:49:57 2026 by rpki-client