$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: WVcLXfKkUZb5rAb+CyR0N/M/QH7HpsrTh5Kbw0uXHUU= Subject key identifier: 84:7A:7A:52:F2:33:94:F9:AD:E9:86:54:B7:98:55:49:6F:57:29:5A Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 1FD033F22383D63076DEAA724DDA444C2C0BDC5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0AF6 Signing time: Tue 10 Nov 2026 10:13:46 +0000 Manifest this update: Tue 10 Nov 2026 10:08:46 +0000 Manifest next update: Wed 11 Nov 2026 10:16:46 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e203433393539.roa (hash: 3FyF5WnHjiMki69QSaUUCnhgDmDcrHsssZtUDjCI8Xc=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa (hash: Sct428YozHYxwSzzijejfY4VQuK7q1QPuNYpBC2I2tk=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa (hash: E4Vla9mTVyy4cCQ80hyemXilIWR1XzkNFgiTj+0GXmo=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: KFvnslCPL4X/LQ69pCWBq5qDUjXjtppzmmhIraVeEMM=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa (hash: PLRJaVF0Jd4MzsBLSWEvQcF65VlQI4URu4pK/WVh1RA=) 6: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: cz6C1JpI9iQ1bY4wGspASzqdgCSbrcbOU6tXfLreKLQ=) 7: 323030313a6466343a646438303a3a2f34382d3438203d3e2039333132.roa (hash: sOqxixjklaWO40uc9Yh3uSerFS1KO2El68KsQLHv5XU=) 8: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa (hash: N/0jPEvGNb25DvrH55KAo4wT1xlr30VbD4rmDHGaE0c=) 9: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 10: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: ynOny1uJUNDJNLQfaFn9KT+EKSkm3BPUARRqhnmeOW8=) 11: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=) 12: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: wp3ums3gGQiHSeOASzDuZJLMnB77wkX449JJWXCY9dk=) 13: 323030313a6466343a646438303a3a2f34382d3438203d3e2036323333.roa (hash: P+DRN1x6WrCoJ1/bJW3ozMaF6OfEUO23SN1Y8pMwFHY=) 14: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: uJpbUW4JrPXqpwkMTMWdVzPekrlj0XntAcL3muKs+sE=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 10:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d0:33:f2:23:83:d6:30:76:de:aa:72:4d:da:44:4c:2c:0b:dc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Nov 10 10:08:46 2026 GMT Not After : Nov 11 10:16:46 2026 GMT Subject: CN=847A7A52F23394F9ADE98654B79855496F57295A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:ac:35:de:42:27:0b:e4:74:c8:07:18:68: 97:43:d8:f0:f9:71:38:bd:f4:50:b6:09:1e:37:2a: 91:4e:6b:ea:37:0b:b7:ba:7f:c2:23:cb:54:33:57: 4d:a9:6c:70:91:1f:b1:78:bc:87:15:91:2d:c5:d6: e4:74:64:cd:da:72:79:80:cf:e1:30:28:3a:88:71: c3:da:c3:b0:81:66:98:16:8d:47:39:a4:68:90:5e: bd:02:a7:f8:c2:f1:47:c3:91:9f:0f:51:cf:e8:a6: a9:90:85:3c:df:01:a4:f6:19:0d:f7:85:88:5d:61: 94:e9:75:bf:31:69:4f:cc:28:09:24:ee:0a:f2:bb: 1d:b5:9e:62:0e:de:29:18:e1:e3:27:38:95:b5:87: 1d:d5:b5:f7:6b:7d:a9:b5:29:9d:64:52:2d:c8:18: fd:3a:3b:4d:47:30:4d:79:cc:74:dc:56:75:d1:e1: f0:cd:a9:44:c7:0b:36:8d:04:fd:4e:57:b0:b8:15: c4:17:0d:af:3b:c9:8d:e5:f7:62:ba:c0:ac:65:74: 11:77:f0:62:45:5c:7f:aa:06:ae:91:87:31:30:a2: b0:85:9e:e1:00:9a:4f:d3:5d:e3:44:8e:90:c4:9f: a9:0e:9a:ee:3c:ba:19:4d:c9:d4:16:02:11:6e:9e: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:7A:52:F2:33:94:F9:AD:E9:86:54:B7:98:55:49:6F:57:29:5A X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:80:1e:80:b3:41:22:63:9c:73:05:14:7b:70:c2:3e:2d:ef: f0:06:d0:17:d2:8a:0e:4a:73:65:f1:88:f3:4d:48:ff:d4:41: 24:ed:a2:ed:7c:d6:41:f5:b9:fb:4c:d4:43:ed:c8:14:49:5d: a4:af:5f:ef:94:fe:5e:ce:d6:1c:28:f3:ee:42:68:e0:aa:0b: b1:96:db:51:f1:db:14:cb:16:30:aa:48:60:99:2d:46:11:7f: 0f:61:a6:81:2c:b4:13:7f:f6:54:3a:60:c0:12:94:da:6b:97: e7:98:5b:0f:19:2b:9a:7d:94:0a:5b:22:f7:61:b9:81:73:2c: ca:3b:2f:75:1f:a4:c7:5d:2c:ef:d7:e2:71:c4:d8:cd:4f:96: e7:37:91:fb:78:44:36:8c:4f:92:82:85:71:71:79:26:ad:63: 96:db:0d:c9:fb:ef:f6:2e:1f:d2:db:8d:39:6a:dc:19:de:8b: c6:3c:54:d0:0b:7b:09:18:f0:fa:29:63:72:52:02:85:d6:a2: a7:de:6c:bc:03:46:85:ec:e8:14:7a:0b:68:74:1c:62:60:ce: 48:6c:0d:6e:1c:17:b6:17:aa:f3:f6:ea:f0:de:b5:74:4c:4e: 92:ac:26:d7:d8:44:5d:d4:4a:1f:06:47:02:df:04:9c:25:cf: e2:f6:72:b9 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUH9Az8iOD1jB23qpyTdpETCwL3FowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MTExMDEwMDg0NloX DTI2MTExMTEwMTY0NlowMzExMC8GA1UEAxMoODQ3QTdBNTJGMjMzOTRGOUFERTk4 NjU0Qjc5ODU1NDk2RjU3Mjk1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGTrDXeQicL5HTIBxhol0PY8PlxOL30ULYJHjcqkU5r6jcLt7p/wiPLVDNX TalscJEfsXi8hxWRLcXW5HRkzdpyeYDP4TAoOohxw9rDsIFmmBaNRzmkaJBevQKn +MLxR8ORnw9Rz+imqZCFPN8BpPYZDfeFiF1hlOl1vzFpT8woCSTuCvK7HbWeYg7e KRjh4yc4lbWHHdW192t9qbUpnWRSLcgY/To7TUcwTXnMdNxWddHh8M2pRMcLNo0E /U5XsLgVxBcNrzvJjeX3YrrArGV0EXfwYkVcf6oGrpGHMTCisIWe4QCaT9Nd40SO kMSfqQ6a7jy6GU3J1BYCEW6eaa8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSEenpS 8jOU+a3phlS3mFVJb1cpWjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmAHoCzQSJjnHMFFHtwwj4t7/AG0BfSig5K c2XxiPNNSP/UQSTtou181kH1uftM1EPtyBRJXaSvX++U/l7O1hwo8+5CaOCqC7GW 21Hx2xTLFjCqSGCZLUYRfw9hpoEstBN/9lQ6YMASlNprl+eYWw8ZK5p9lApbIvdh uYFzLMo7L3UfpMddLO/X4nHE2M1Pluc3kft4RDaMT5KChXFxeSatY5bbDcn77/Yu H9LbjTlq3Bnei8Y8VNALewkY8PopY3JSAoXWoqfebLwDRoXs6BR6C2h0HGJgzkhs DW4cF7YXqvP26vDetXRMTpKsJtfYRF3USh8GRwLfBJwlz+L2crk= -----END CERTIFICATE-----Generated at Tue Nov 10 23:04:41 2026 by rpki-client