$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json) Hash identifier: kiZGZ1sKECSIUOFxOJHANhdVYrooVxECDP17BEbJJto= Subject key identifier: 09:15:6D:9E:F7:C6:D6:06:2E:E0:8E:31:3A:C6:27:54:6B:24:95:C6 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 35DE0D6762C78B6D1F211C711867A5400C831B69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft Manifest number: 08D5 Signing time: Wed 05 Nov 2025 11:58:34 +0000 Manifest this update: Wed 05 Nov 2025 11:53:34 +0000 Manifest next update: Thu 06 Nov 2025 15:10:34 +0000 Files and hashes: 1: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=) 2: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: A9sFlyjLP9OdQUwupv6DkRwTIS6heZn+veQq8RzWIyU=) 3: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=) 4: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=) 5: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=) 6: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=) 7: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=) 8: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=) 9: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=) 10: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=) 11: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=) 12: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=) 13: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=) 14: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=) 15: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=) 16: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=) 17: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=) 18: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=) 19: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=) 20: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=) 21: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=) 22: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=) 23: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=) 24: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=) 25: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=) 26: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=) 27: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=) 28: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=) 29: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=) 30: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=) 31: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=) 32: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=) 33: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:de:0d:67:62:c7:8b:6d:1f:21:1c:71:18:67:a5:40:0c:83:1b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Nov 5 11:53:34 2025 GMT Not After : Nov 6 15:10:34 2025 GMT Subject: CN=09156D9EF7C6D6062EE08E313AC627546B2495C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:4f:22:16:a8:40:be:8e:6d:60:03:2c:89: 85:a3:8e:f3:cf:2a:03:86:7a:19:e2:37:24:2a:e9: 40:a8:d4:90:e3:12:84:2f:de:bc:f4:ff:45:b0:56: d8:8a:1b:08:6a:04:4d:d0:b4:d4:77:5a:ca:89:3a: 09:36:77:66:ce:72:3b:ab:d2:13:39:82:1f:a5:c2: 77:79:7f:08:db:bb:24:a9:a8:81:02:25:ba:20:2e: 38:a1:85:d0:13:7d:7f:53:c0:90:ad:fd:d5:4b:98: c9:2b:61:d5:90:e1:b9:77:46:95:7b:8e:d3:bd:d7: 74:ef:9b:66:f6:58:fb:fc:db:ca:c8:36:27:54:c9: c3:6d:99:07:22:1c:dc:a3:1c:74:27:40:91:89:53: 5f:b8:05:5b:03:93:a5:e8:ec:7e:45:a6:b4:14:c3: 5f:4b:a4:f9:1c:e8:c1:e7:16:4b:e2:0c:82:b3:43: 01:37:e6:88:f5:cf:3d:f1:37:b6:eb:b0:af:b1:e0: 14:9f:29:23:6e:c0:ac:30:2f:46:50:81:76:55:79: 96:2b:e1:49:53:ab:83:2f:28:3d:2c:c3:3e:88:5d: e3:54:88:5d:ed:4b:73:56:0a:37:4d:ee:86:c3:c9: 72:ee:04:ef:22:31:f0:39:ad:ff:fb:22:9c:29:43: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:6D:9E:F7:C6:D6:06:2E:E0:8E:31:3A:C6:27:54:6B:24:95:C6 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bd:99:0d:0a:c0:5f:8a:cf:4f:c6:fa:90:ef:15:86:89:e6: b4:7a:83:c8:85:ae:ac:ec:be:53:83:c0:03:f2:3c:7f:c0:50: 3e:04:9f:d7:ef:0b:ce:bf:fe:18:bd:b3:69:bf:d6:dd:96:4e: 50:1b:75:34:64:42:e4:6d:2e:ef:6c:6e:38:49:a1:0a:d4:85: a6:11:0d:00:04:f6:bf:c3:39:25:eb:99:3d:7e:2c:4f:30:35: 0c:f8:77:fd:e8:27:20:97:ef:93:42:45:12:22:76:de:cc:ab: e7:c6:45:6b:66:af:0b:39:b2:a8:58:70:d8:8b:e4:39:0c:26: 3a:dc:ca:a1:bd:29:d2:d4:17:a2:a7:64:cf:63:97:e6:ee:cf: 5f:f6:8b:b0:10:fa:f4:4d:f3:4a:94:ef:7a:c5:79:be:de:69: ac:88:d0:f2:fd:f7:8e:ca:11:95:fd:15:a4:12:e0:bb:77:78: c8:15:fd:2b:76:ef:30:25:52:b3:d6:ca:ec:c0:17:18:c6:3a: d6:3b:45:36:2f:7b:de:9f:bc:26:c5:96:21:72:38:96:2f:f7: 06:f9:19:6e:60:bd:d8:36:c8:77:37:b4:65:56:c6:95:ee:11: 6a:60:42:b5:c0:00:9c:8d:7f:c2:ad:85:94:87:b7:7a:11:df: 54:25:98:e5 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUNd4NZ2LHi20fIRxxGGelQAyDG2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MTEwNTExNTMzNFoX DTI1MTEwNjE1MTAzNFowMzExMC8GA1UEAxMoMDkxNTZEOUVGN0M2RDYwNjJFRTA4 RTMxM0FDNjI3NTQ2QjI0OTVDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2nTyIWqEC+jm1gAyyJhaOO888qA4Z6GeI3JCrpQKjUkOMShC/evPT/RbBW 2IobCGoETdC01Hdayok6CTZ3Zs5yO6vSEzmCH6XCd3l/CNu7JKmogQIluiAuOKGF 0BN9f1PAkK391UuYySth1ZDhuXdGlXuO073XdO+bZvZY+/zbysg2J1TJw22ZByIc 3KMcdCdAkYlTX7gFWwOTpejsfkWmtBTDX0uk+RzowecWS+IMgrNDATfmiPXPPfE3 tuuwr7HgFJ8pI27ArDAvRlCBdlV5livhSVOrgy8oPSzDPohd41SIXe1Lc1YKN03u hsPJcu4E7yIx8Dmt//sinClD890CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQJFW2e 98bWBi7gjjE6xidUaySVxjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5 QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy9mQ0KwF+Kz0/G+pDvFYaJ5rR6g8iFrqzs vlODwAPyPH/AUD4En9fvC86//hi9s2m/1t2WTlAbdTRkQuRtLu9sbjhJoQrUhaYR DQAE9r/DOSXrmT1+LE8wNQz4d/3oJyCX75NCRRIidt7Mq+fGRWtmrws5sqhYcNiL 5DkMJjrcyqG9KdLUF6KnZM9jl+buz1/2i7AQ+vRN80qU73rFeb7eaayI0PL9947K EZX9FaQS4Lt3eMgV/St27zAlUrPWyuzAFxjGOtY7RTYve96fvCbFliFyOJYv9wb5 GW5gvdg2yHc3tGVWxpXuEWpgQrXAAJyNf8KthZSHt3oR31QlmOU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:12 2025 by rpki-client