$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: xWU4PEvaFR2nnTraR3SozZ20tvTKmSDJe7cS+4VMy50= Subject key identifier: B9:07:ED:71:15:B3:99:60:21:AF:F4:A6:03:AF:04:EA:15:FD:72:F5 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 5972169606D1DC18C99DA6D9C78B0E9BE14A9569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 08C2 Signing time: Wed 05 Nov 2025 11:08:34 +0000 Manifest this update: Wed 05 Nov 2025 11:03:34 +0000 Manifest next update: Thu 06 Nov 2025 12:53:34 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 2: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: HpopzTumOwX0b5/f2kBkN/SuUeNbW+pXVOmo1qLJONk=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:72:16:96:06:d1:dc:18:c9:9d:a6:d9:c7:8b:0e:9b:e1:4a:95:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Nov 5 11:03:34 2025 GMT Not After : Nov 6 12:53:34 2025 GMT Subject: CN=B907ED7115B3996021AFF4A603AF04EA15FD72F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:6a:4f:f5:75:49:a4:b7:65:5c:99:2f:f1: e9:f9:1c:de:d0:5b:1a:51:48:b9:a0:4e:29:c4:4b: 46:43:98:a4:08:58:f5:cf:d2:0c:84:12:ec:00:27: 37:02:58:e7:ef:59:11:a8:c0:1c:b1:81:31:6a:a6: 67:d7:23:7c:17:70:22:a1:9c:77:0a:ff:ba:dc:1d: f9:cc:c0:05:b2:3e:30:ea:82:5f:00:02:9a:0c:fd: 6b:0d:58:54:67:ab:05:c3:b9:6b:d2:72:3b:8c:ef: 9b:22:57:ee:0f:0f:62:52:d8:f4:79:9b:70:1d:83: e6:f0:ad:0b:ad:8d:4b:2b:78:6e:0a:b9:f9:cc:b8: bc:91:b1:2b:97:74:06:3d:48:27:38:79:fb:0f:28: f1:7d:28:ee:7f:d5:ea:ef:60:ca:f4:b9:ad:ac:c6: ec:ad:8c:31:d7:17:46:d1:f9:7d:08:05:26:8c:99: 0c:f0:ee:d7:27:6f:6a:4e:83:7a:4c:f6:e8:6e:be: b2:f9:ec:15:b2:ba:90:ae:7e:6c:c3:21:d6:56:b1: db:80:13:5f:42:d6:fb:3b:91:d6:13:1b:1c:cc:73: 17:cd:f8:5c:49:c2:0b:1c:04:53:1f:00:cb:51:3e: 1d:c0:86:c8:f6:26:92:82:69:3c:3d:b0:f9:e7:c5: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:07:ED:71:15:B3:99:60:21:AF:F4:A6:03:AF:04:EA:15:FD:72:F5 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:79:5e:73:b2:49:80:95:17:bb:ac:3f:d5:7a:28:57:11:22: 3f:45:6e:a7:83:02:87:50:81:01:bf:17:1e:75:c4:4f:65:ae: 70:89:55:16:90:98:75:81:6e:85:07:06:0b:c9:22:b2:5e:d6: b4:77:d9:35:8a:ee:11:84:0e:00:a1:be:66:1c:2a:09:ff:24: ac:4f:0a:c9:e9:9b:f7:61:ab:07:44:d5:19:32:b5:3a:9b:3c: 52:c1:13:b9:4b:d3:ba:3b:ba:21:7d:75:d6:2b:b4:34:b0:38: 00:8d:57:fc:ec:c6:b6:56:27:c4:9b:7a:15:45:e1:ce:e0:62: ec:36:81:4d:c7:a1:ba:89:ab:f5:cb:86:2c:24:73:25:f4:20: 39:49:51:4f:0d:a9:7e:00:37:1a:6b:69:4c:37:34:c5:e3:62: 5d:27:12:fd:ae:3c:09:ed:0e:0c:6b:a1:15:54:4b:d4:85:b5: 68:d5:fc:09:fc:64:1f:c7:51:77:82:62:ed:16:8b:f6:46:8f: ba:a2:e9:a3:55:f8:9b:30:27:40:be:0b:ba:cf:f3:97:5b:83: 80:09:44:1c:6f:10:8d:b5:8f:2c:f9:89:f0:5e:7a:48:b4:5f: 7b:49:0f:93:62:b8:f9:a1:8d:af:6e:30:f2:25:ba:38:7d:b5: 07:92:09:01 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUWXIWlgbR3BjJnabZx4sOm+FKlWkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MTEwNTExMDMzNFoX DTI1MTEwNjEyNTMzNFowMzExMC8GA1UEAxMoQjkwN0VENzExNUIzOTk2MDIxQUZG NEE2MDNBRjA0RUExNUZENzJGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEiak/1dUmkt2VcmS/x6fkc3tBbGlFIuaBOKcRLRkOYpAhY9c/SDIQS7AAn NwJY5+9ZEajAHLGBMWqmZ9cjfBdwIqGcdwr/utwd+czABbI+MOqCXwACmgz9aw1Y VGerBcO5a9JyO4zvmyJX7g8PYlLY9HmbcB2D5vCtC62NSyt4bgq5+cy4vJGxK5d0 Bj1IJzh5+w8o8X0o7n/V6u9gyvS5razG7K2MMdcXRtH5fQgFJoyZDPDu1ydvak6D ekz26G6+svnsFbK6kK5+bMMh1lax24ATX0LW+zuR1hMbHMxzF834XEnCCxwEUx8A y1E+HcCGyPYmkoJpPD2w+efFVVcCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBS5B+1x FbOZYCGv9KYDrwTqFf1y9TAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE15XnOySYCVF7usP9V6KFcRIj9FbqeDAodQ gQG/Fx51xE9lrnCJVRaQmHWBboUHBgvJIrJe1rR32TWK7hGEDgChvmYcKgn/JKxP Csnpm/dhqwdE1RkytTqbPFLBE7lL07o7uiF9ddYrtDSwOACNV/zsxrZWJ8SbehVF 4c7gYuw2gU3HobqJq/XLhiwkcyX0IDlJUU8NqX4ANxpraUw3NMXjYl0nEv2uPAnt DgxroRVUS9SFtWjV/An8ZB/HUXeCYu0Wi/ZGj7qi6aNV+JswJ0C+C7rP85dbg4AJ RBxvEI21jyz5ifBeeki0X3tJD5NiuPmhja9uMPIlujh9tQeSCQE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:33 2025 by rpki-client