
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: 69vLeW80WwbNTRJEnDT+yZCFJ4fPdhHFlymr5+Pci0E=
Subject key identifier: 3E:F5:82:B4:5C:45:D9:3B:34:9D:23:89:98:B0:D5:9C:50:32:94:75
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 7F6D2A9805E4AD56995B932C184F30D82D2064AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 09C4
Signing time: Sat 18 Apr 2026 23:46:32 +0000
Manifest this update: Sat 18 Apr 2026 23:41:32 +0000
Manifest next update: Mon 20 Apr 2026 02:23:32 +0000
Files and hashes: 1: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
2: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
3: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
4: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
5: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
6: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
7: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
8: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
9: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
10: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
11: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
12: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
13: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
14: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
15: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
16: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
17: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
18: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
19: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
20: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
21: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
22: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
23: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
24: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
25: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
26: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
27: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
28: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
29: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: QQUql1HBt1VWyuaTXRxeJUg3FRHs+CdvsF7TpsuCMVc=)
30: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
31: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
32: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
33: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 02:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6d:2a:98:05:e4:ad:56:99:5b:93:2c:18:4f:30:d8:2d:20:64:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Apr 18 23:41:32 2026 GMT
Not After : Apr 20 02:23:32 2026 GMT
Subject: CN=3EF582B45C45D93B349D238998B0D59C50329475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:28:8b:26:94:b2:ce:8f:92:6a:60:4e:6a:
c5:92:26:eb:99:57:7a:ea:84:52:5e:e4:d6:6f:47:
ed:06:58:ab:eb:71:a0:1b:99:fe:a8:2d:f8:ce:87:
16:9f:af:bb:f0:dd:69:a0:d2:7c:8e:89:f2:57:46:
be:1a:e1:8b:b7:11:12:42:45:19:3d:ba:33:e1:92:
3b:d3:9c:2f:39:70:1f:51:c8:87:d9:fb:ef:4a:49:
70:d1:29:f7:1e:ff:02:48:5b:33:8c:3e:d7:46:f0:
55:21:2a:9e:29:81:b7:26:53:ae:82:9e:bf:28:ff:
3e:04:32:da:d2:1a:1f:ea:12:e9:b4:e8:68:da:da:
93:5f:d1:a9:20:8e:42:e1:3e:ae:9e:0b:8f:e9:ae:
79:80:ab:db:ff:df:20:d8:d8:30:2a:fa:c8:58:6d:
90:9a:53:43:5b:f1:51:0a:01:a8:f7:a0:08:2d:2a:
ce:27:0c:b7:7b:30:40:14:95:8b:38:21:57:79:65:
ba:a6:fe:71:e8:58:cc:96:5f:f7:95:7d:01:1e:a1:
58:58:a0:98:be:8c:85:a0:00:12:fc:20:04:04:f4:
a7:e1:a3:6e:ae:7b:7c:1a:a7:fd:89:bc:53:6a:db:
27:51:6d:59:65:4c:fd:db:d2:31:61:aa:6a:df:25:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:82:B4:5C:45:D9:3B:34:9D:23:89:98:B0:D5:9C:50:32:94:75
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:51:28:9d:27:4f:4c:6b:35:79:cc:85:38:b6:18:6e:cf:48:
e8:2f:ff:ac:d7:48:1a:d9:e7:1d:b8:fd:cf:26:0e:02:f6:0a:
11:cb:9c:32:cd:87:31:e1:0d:b1:fd:22:eb:ee:de:1c:28:42:
88:36:ec:6d:80:18:38:36:c7:ec:53:36:b0:6d:7a:32:5f:48:
98:13:4f:0b:37:5a:1d:6d:51:04:05:c4:72:89:ab:cd:1b:4b:
ff:6f:4b:79:1c:ea:18:61:57:35:88:1f:cd:4a:9e:d1:94:d4:
17:9c:b4:95:95:b3:e7:1e:71:45:c9:74:81:e3:06:dd:e2:7e:
74:c1:94:38:d6:a5:b9:54:b7:95:1e:7e:d5:a6:14:bf:9a:3a:
73:02:fa:8b:1a:a9:a1:9d:f6:d6:78:b2:05:50:3a:7e:7e:59:
25:ac:c5:ec:9f:b2:4e:38:7b:17:87:39:41:81:1b:7d:ab:04:
f1:61:b5:53:c8:9c:7c:76:e7:24:39:3d:15:04:1c:e5:ef:42:
7b:60:43:34:f6:8b:5d:d2:48:b0:2e:e5:95:e2:3d:5d:44:05:
9a:73:6d:7d:0e:6a:31:05:c4:bf:48:86:39:84:64:b4:54:e9:
43:e4:be:29:b3:68:40:87:13:8f:f8:aa:55:94:31:09:cf:26:
7b:24:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:44:49 2026 by rpki-client