$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json) Hash identifier: 9kYFGDtt/35qfUltye8rzMxrXxFuN13qIB3tegbFn/M= Subject key identifier: 84:3E:3A:4E:F4:FE:72:7D:B9:2A:C9:99:FA:22:46:97:38:EC:3D:77 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 7C199080A1E59A549F945FABCD077A552E09D36A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft Manifest number: 097C Signing time: Sun 01 Mar 2026 09:06:30 +0000 Manifest this update: Sun 01 Mar 2026 09:01:30 +0000 Manifest next update: Mon 02 Mar 2026 12:28:30 +0000 Files and hashes: 1: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=) 2: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=) 3: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=) 4: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=) 5: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=) 6: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=) 7: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=) 8: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=) 9: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=) 10: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=) 11: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=) 12: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=) 13: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=) 14: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=) 15: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=) 16: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=) 17: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=) 18: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=) 19: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=) 20: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=) 21: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=) 22: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=) 23: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=) 24: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: qUluVoDY2d2iu31yHF0iu6yZC25kHcmiMLczwaLM8ks=) 25: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=) 26: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=) 27: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=) 28: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=) 29: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=) 30: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=) 31: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=) 32: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=) 33: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 12:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:19:90:80:a1:e5:9a:54:9f:94:5f:ab:cd:07:7a:55:2e:09:d3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Mar 1 09:01:30 2026 GMT Not After : Mar 2 12:28:30 2026 GMT Subject: CN=843E3A4EF4FE727DB92AC999FA22469738EC3D77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:74:f4:21:6c:af:65:ae:bf:af:cc:22:e5: de:4a:77:47:8f:df:70:0a:c4:b2:64:83:ef:2b:8f: 62:1b:e7:9a:7d:4d:dc:38:fc:a3:51:e8:2f:45:aa: a8:40:33:ff:03:c2:70:c4:fc:03:94:34:d2:23:34: ba:d5:25:67:55:28:49:b0:22:dc:58:0b:2e:9d:38: 51:07:97:d7:79:ea:ec:83:83:f7:4f:a6:c3:27:d6: 60:66:2f:d7:4e:60:bd:ac:d8:f1:2c:18:67:4a:a1: 97:40:3c:32:68:00:83:5a:7c:91:45:60:50:2c:47: 99:d9:1d:48:d8:7e:99:17:02:5f:11:9c:17:0d:e6: f6:26:37:25:b0:12:83:c2:41:33:83:bc:1f:00:fd: 58:39:20:8a:80:cf:64:89:6a:f9:32:c9:b4:7a:f0: e5:69:97:72:1c:6c:dd:c8:4b:77:27:3b:16:ba:b5: 0c:3e:2e:8e:aa:82:ff:52:fb:eb:8f:8a:9c:d1:7c: 11:3a:66:ce:15:47:23:9c:84:40:c4:b9:ab:ca:3e: 2a:ef:0c:8e:72:24:3a:7c:6f:09:ea:d6:3d:33:07: 5c:81:43:4c:e1:5f:c3:c1:93:01:05:ff:49:e3:d7: 7a:64:5c:8f:a7:4f:fd:70:70:3d:8d:09:fd:cc:bf: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3E:3A:4E:F4:FE:72:7D:B9:2A:C9:99:FA:22:46:97:38:EC:3D:77 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:11:f0:d9:85:52:18:b6:ef:41:26:d5:e6:a1:e8:90:cc:de: 0f:23:c2:5b:66:8e:a9:53:ee:29:4d:57:66:a4:9d:df:84:df: 38:3f:f2:60:49:fe:13:d0:e4:d0:b4:49:9e:d7:61:81:f0:c4: a5:c3:22:fc:65:95:3f:d3:77:17:e8:14:45:67:5e:22:fc:41: b6:34:fb:72:16:70:14:9f:45:a3:a8:eb:cf:50:90:4e:9d:c3: 3f:71:3f:50:09:dd:74:28:90:35:51:c7:76:56:52:75:13:d9: fa:fc:0d:be:04:f0:11:41:e3:64:59:3d:d8:e9:80:fe:76:52: 98:80:4b:e7:6d:19:53:c1:0a:1a:76:2c:0a:b4:f6:3b:6a:7f: 50:15:83:d7:1d:ab:9e:01:af:31:54:3f:51:4b:93:d3:55:e6: b1:37:53:bd:b6:29:a5:37:a2:88:6f:5a:4e:3d:30:58:7a:0d: 52:bf:8a:88:da:05:21:a3:9a:02:2b:b0:a0:9f:a1:63:3f:02: 98:8c:ad:ed:9e:27:e5:9c:26:09:23:4c:ae:97:67:0a:f6:9e: 5f:c8:29:5d:ce:0f:5c:59:95:a9:f6:d9:e0:d1:8a:23:5d:2b: e7:54:6e:b7:30:72:a4:ee:a3:a3:26:66:ca:97:73:1b:7e:b5: 33:25:d4:93 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUfBmQgKHlmlSflF+rzQd6VS4J02owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDMwMTA5MDEzMFoX DTI2MDMwMjEyMjgzMFowMzExMC8GA1UEAxMoODQzRTNBNEVGNEZFNzI3REI5MkFD OTk5RkEyMjQ2OTczOEVDM0Q3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALifdPQhbK9lrr+vzCLl3kp3R4/fcArEsmSD7yuPYhvnmn1N3Dj8o1HoL0Wq qEAz/wPCcMT8A5Q00iM0utUlZ1UoSbAi3FgLLp04UQeX13nq7IOD90+mwyfWYGYv 105gvazY8SwYZ0qhl0A8MmgAg1p8kUVgUCxHmdkdSNh+mRcCXxGcFw3m9iY3JbAS g8JBM4O8HwD9WDkgioDPZIlq+TLJtHrw5WmXchxs3chLdyc7Frq1DD4ujqqC/1L7 64+KnNF8ETpmzhVHI5yEQMS5q8o+Ku8MjnIkOnxvCerWPTMHXIFDTOFfw8GTAQX/ SePXemRcj6dP/XBwPY0J/cy/brsCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSEPjpO 9P5yfbkqyZn6IkaXOOw9dzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5 QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4R8NmFUhi270Em1eah6JDM3g8jwltmjqlT 7ilNV2aknd+E3zg/8mBJ/hPQ5NC0SZ7XYYHwxKXDIvxllT/TdxfoFEVnXiL8QbY0 +3IWcBSfRaOo689QkE6dwz9xP1AJ3XQokDVRx3ZWUnUT2fr8Db4E8BFB42RZPdjp gP52UpiAS+dtGVPBChp2LAq09jtqf1AVg9cdq54BrzFUP1FLk9NV5rE3U722KaU3 oohvWk49MFh6DVK/iojaBSGjmgIrsKCfoWM/ApiMre2eJ+WcJgkjTK6XZwr2nl/I KV3OD1xZlan22eDRiiNdK+dUbrcwcqTuo6MmZsqXcxt+tTMl1JM= -----END CERTIFICATE-----Generated at Sun Mar 1 20:38:02 2026 by rpki-client