$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: klSeROun7jG+o8x0Jewi/UKjVAQ+d9lbER9HxeKZpb8= Subject key identifier: 64:8F:87:F8:17:DE:B2:51:F7:57:36:FD:F9:EA:C0:46:9C:03:A1:94 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 142A70BB169D6DC5BC38E6E6778FC04C3819D3F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0969 Signing time: Sun 01 Mar 2026 16:11:30 +0000 Manifest this update: Sun 01 Mar 2026 16:06:30 +0000 Manifest next update: Mon 02 Mar 2026 19:07:30 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 5: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: Bf2REnnAMgd2iaUt2xN801arOwbDL1aSjRjvkU7mQIw=) 6: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 19:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2a:70:bb:16:9d:6d:c5:bc:38:e6:e6:77:8f:c0:4c:38:19:d3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Mar 1 16:06:30 2026 GMT Not After : Mar 2 19:07:30 2026 GMT Subject: CN=648F87F817DEB251F75736FDF9EAC0469C03A194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:2c:29:0f:61:ba:24:52:f0:da:ac:4a:66: 4c:5f:90:0b:4e:34:66:9b:7a:48:c5:77:76:c4:fe: c4:87:b9:18:10:44:ff:98:10:0a:d3:39:8f:11:db: 9e:08:ab:0f:8f:97:71:00:8e:8f:01:22:89:0e:22: 8f:ce:56:7a:e2:e3:6e:6f:fc:4e:ec:77:f4:29:e3: 9a:02:d6:1c:82:c9:31:bc:95:c9:09:78:88:15:d1: cf:91:77:2a:73:3d:da:78:22:73:62:82:6a:3b:04: 82:04:b3:7d:1a:ec:56:f7:94:58:29:d1:aa:5f:cb: d6:c1:7b:e7:c1:3b:03:38:39:d1:06:93:89:0d:cf: f3:c3:54:82:7f:f4:25:1e:5e:1c:a4:46:86:f0:2f: 7e:9a:b7:76:07:d5:2b:dd:14:d3:02:6e:3c:52:3c: 17:fa:56:c0:be:0e:43:6b:fb:da:e9:b8:82:f3:07: bb:52:8e:ab:a0:f5:ce:64:bf:07:2e:f5:07:d1:4e: 65:ee:b1:7e:8d:c6:87:6d:1f:b9:a6:a5:79:69:fe: 7a:14:04:da:fd:75:bf:fd:0d:13:8d:b5:34:f3:dc: ac:d2:82:33:31:57:3b:e8:38:d8:93:ef:20:12:1d: 66:72:3f:61:e3:e9:60:5b:a4:ff:67:c4:e9:0c:1b: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8F:87:F8:17:DE:B2:51:F7:57:36:FD:F9:EA:C0:46:9C:03:A1:94 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:35:44:bf:92:fa:c1:6a:57:de:ec:58:e0:d9:f6:86:51:12: 9e:96:7e:0b:91:cf:3d:50:08:74:38:38:fe:f9:8f:f0:79:a9: 1e:69:1a:3a:26:c7:6b:2f:35:e4:99:5d:0b:92:ea:e7:28:6f: e8:6c:17:29:07:31:cf:cb:86:b8:3e:2b:d3:96:ff:4b:f1:f2: 23:2a:4c:05:48:45:d6:ca:c2:b7:c0:a6:64:d8:0d:7f:52:43: c8:db:3e:7f:d1:5b:98:2b:76:97:91:19:02:0c:c3:04:cf:66: 57:90:3e:a6:f8:7f:89:28:d8:00:6a:01:ef:d9:30:ea:c4:fb: f2:86:62:7c:b5:68:97:f6:6c:04:7c:4a:57:15:87:3b:77:53: a8:3b:aa:02:f8:ce:da:92:1f:23:a8:0e:50:b4:ed:b9:6f:00: 34:a5:da:76:d0:23:fc:f0:2d:57:e5:b9:77:65:d6:07:f4:51: 5f:44:f8:7c:94:08:98:15:2b:92:f1:a4:4d:48:50:ab:e2:30: d5:96:f0:f7:30:23:1e:84:28:0c:e3:ad:78:68:3d:5f:03:64: 88:6e:94:ae:33:eb:24:48:f5:c1:8f:36:44:ee:e5:69:f2:44: 38:e6:0c:6b:2e:19:8f:57:a0:bc:77:ee:d3:ac:e7:19:77:c5: bc:13:c7:3d -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUFCpwuxadbcW8OObmd4/ATDgZ0/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDMwMTE2MDYzMFoX DTI2MDMwMjE5MDczMFowMzExMC8GA1UEAxMoNjQ4Rjg3RjgxN0RFQjI1MUY3NTcz NkZERjlFQUMwNDY5QzAzQTE5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL02LCkPYbokUvDarEpmTF+QC040Zpt6SMV3dsT+xIe5GBBE/5gQCtM5jxHb ngirD4+XcQCOjwEiiQ4ij85WeuLjbm/8Tux39CnjmgLWHILJMbyVyQl4iBXRz5F3 KnM92ngic2KCajsEggSzfRrsVveUWCnRql/L1sF758E7Azg50QaTiQ3P88NUgn/0 JR5eHKRGhvAvfpq3dgfVK90U0wJuPFI8F/pWwL4OQ2v72um4gvMHu1KOq6D1zmS/ By71B9FOZe6xfo3Gh20fuaaleWn+ehQE2v11v/0NE421NPPcrNKCMzFXO+g42JPv IBIdZnI/YePpYFuk/2fE6QwbclkCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRkj4f4 F96yUfdXNv356sBGnAOhlDAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE1RL+S+sFqV97sWODZ9oZREp6WfguRzz1Q CHQ4OP75j/B5qR5pGjomx2svNeSZXQuS6ucob+hsFykHMc/Lhrg+K9OW/0vx8iMq TAVIRdbKwrfApmTYDX9SQ8jbPn/RW5grdpeRGQIMwwTPZleQPqb4f4ko2ABqAe/Z MOrE+/KGYny1aJf2bAR8SlcVhzt3U6g7qgL4ztqSHyOoDlC07blvADSl2nbQI/zw LVfluXdl1gf0UV9E+HyUCJgVK5LxpE1IUKviMNWW8PcwIx6EKAzjrXhoPV8DZIhu lK4z6yRI9cGPNkTu5WnyRDjmDGsuGY9XoLx37tOs5xl3xbwTxz0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:03:12 2026 by rpki-client