$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: 2kgu+QroqMsMxHCKPVpmN3/1AgsOL09WZjxakgAwYwc= Subject key identifier: 68:91:98:E6:50:E4:5B:B6:56:5B:A2:4A:CC:96:EC:A1:46:2C:FE:E2 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 7F70A6C0B8C51973A55C4F5069DF24F2A7E5EEE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0AAD Signing time: Sun 20 Sep 2026 08:49:58 +0000 Manifest this update: Sun 20 Sep 2026 08:44:58 +0000 Manifest next update: Mon 21 Sep 2026 10:32:58 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: wp3ums3gGQiHSeOASzDuZJLMnB77wkX449JJWXCY9dk=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa (hash: PLRJaVF0Jd4MzsBLSWEvQcF65VlQI4URu4pK/WVh1RA=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e203433393539.roa (hash: 3FyF5WnHjiMki69QSaUUCnhgDmDcrHsssZtUDjCI8Xc=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa (hash: E4Vla9mTVyy4cCQ80hyemXilIWR1XzkNFgiTj+0GXmo=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa (hash: N/0jPEvGNb25DvrH55KAo4wT1xlr30VbD4rmDHGaE0c=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa (hash: Sct428YozHYxwSzzijejfY4VQuK7q1QPuNYpBC2I2tk=) 7: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: uJpbUW4JrPXqpwkMTMWdVzPekrlj0XntAcL3muKs+sE=) 8: 323030313a6466343a646438303a3a2f34382d3438203d3e2036323333.roa (hash: P+DRN1x6WrCoJ1/bJW3ozMaF6OfEUO23SN1Y8pMwFHY=) 9: 323030313a6466343a646438303a3a2f34382d3438203d3e2039333132.roa (hash: sOqxixjklaWO40uc9Yh3uSerFS1KO2El68KsQLHv5XU=) 10: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 11: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: ynOny1uJUNDJNLQfaFn9KT+EKSkm3BPUARRqhnmeOW8=) 12: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: qoW1YH05/gVd3gk4L+N3NVvDdsjhbLVv/Q6axhjuF0M=) 13: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=) 14: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: KFvnslCPL4X/LQ69pCWBq5qDUjXjtppzmmhIraVeEMM=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:70:a6:c0:b8:c5:19:73:a5:5c:4f:50:69:df:24:f2:a7:e5:ee:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Sep 20 08:44:58 2026 GMT Not After : Sep 21 10:32:58 2026 GMT Subject: CN=689198E650E45BB6565BA24ACC96ECA1462CFEE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:7f:96:62:40:c4:fe:09:0b:32:e9:9e:0f: 7e:a3:b3:01:bf:12:66:d1:4b:85:68:c6:26:ec:4b: 1b:17:d6:1c:6e:93:2e:6c:fc:12:c9:a4:ab:84:df: 9e:d2:0b:8a:01:8e:2b:75:b9:3a:ce:b2:87:db:4b: d0:12:ef:d3:8c:5b:3a:12:ff:f0:a3:ce:36:61:07: 39:aa:43:cf:9f:c4:33:25:59:f2:8e:32:c3:67:31: b4:96:25:b0:86:21:58:6f:4e:78:78:ee:0e:70:25: f9:5a:1b:2d:3d:4b:dd:bf:5e:c5:49:64:b8:c0:26: 80:25:26:ef:1d:0f:07:a2:7f:2e:86:ec:fd:f0:90: f0:c6:62:69:be:00:40:24:14:0c:0a:74:2a:08:ee: 89:32:66:e5:da:95:56:38:18:0c:49:a6:84:b3:77: 4c:cb:96:f3:2b:96:e9:7a:4c:70:3a:7d:bb:ca:84: 26:d7:da:1d:71:d8:9b:e5:97:81:a3:8f:1c:3c:f7: 2c:21:25:1c:d4:d1:5f:07:9d:57:cf:26:68:36:99: 75:00:c4:ee:66:50:51:4f:8f:82:cd:16:2d:3c:24: cf:5c:a6:4e:ca:7e:20:d8:10:7b:8f:40:b5:e4:87: 30:18:90:fa:f3:e6:41:81:a3:40:99:3d:ad:b6:f7: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:98:E6:50:E4:5B:B6:56:5B:A2:4A:CC:96:EC:A1:46:2C:FE:E2 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b8:4e:92:bf:3e:8d:89:6f:11:4a:61:78:e1:8b:14:98:84: 4f:d7:a9:4c:8f:26:bd:93:27:d2:d9:e9:78:c1:5a:63:8f:34: 23:8b:26:f0:70:bd:d6:3b:70:ba:ce:11:6e:6c:a0:fe:58:92: 42:ae:54:51:2e:ef:2d:6f:40:bd:54:d2:f7:8c:5b:c1:00:c5: 4b:1c:d3:ae:fb:97:49:20:83:cd:50:ce:92:f5:2f:ee:0a:58: 8a:0a:9e:6f:73:4c:07:59:8a:19:ec:60:59:25:a8:b2:12:76: 4e:64:3c:e5:49:d3:33:25:b7:f3:51:c0:46:b8:e1:27:6e:65: 62:76:d8:15:16:f3:39:8b:fa:9a:f3:2f:a4:4d:52:9c:1c:0d: 7b:1e:50:8d:28:4a:72:42:ff:70:09:1b:80:50:fe:55:5f:0b: 32:5d:c3:69:49:10:93:36:94:65:f2:6e:7c:c6:64:d6:c7:a7: 47:70:d4:fd:14:c4:ac:c8:08:f1:27:b3:53:7d:d7:09:18:64: ef:ac:c1:cf:ed:4e:29:b4:fb:ec:00:84:1b:c0:b8:84:41:21: de:97:ea:d0:28:c2:bd:9d:1d:96:e1:07:5a:11:97:80:39:6c: 58:de:d0:0d:d3:d3:97:59:30:b5:ea:1c:fa:fd:5b:90:e0:ad: 64:1e:08:18 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUf3CmwLjFGXOlXE9Qad8k8qfl7uMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDkyMDA4NDQ1OFoX DTI2MDkyMTEwMzI1OFowMzExMC8GA1UEAxMoNjg5MTk4RTY1MEU0NUJCNjU2NUJB MjRBQ0M5NkVDQTE0NjJDRkVFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgLf5ZiQMT+CQsy6Z4PfqOzAb8SZtFLhWjGJuxLGxfWHG6TLmz8Esmkq4Tf ntILigGOK3W5Os6yh9tL0BLv04xbOhL/8KPONmEHOapDz5/EMyVZ8o4yw2cxtJYl sIYhWG9OeHjuDnAl+VobLT1L3b9exUlkuMAmgCUm7x0PB6J/Lobs/fCQ8MZiab4A QCQUDAp0KgjuiTJm5dqVVjgYDEmmhLN3TMuW8yuW6XpMcDp9u8qEJtfaHXHYm+WX gaOPHDz3LCElHNTRXwedV88maDaZdQDE7mZQUU+Pgs0WLTwkz1ymTsp+INgQe49A teSHMBiQ+vPmQYGjQJk9rbb34VUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRokZjm UORbtlZbokrMluyhRiz+4jAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADq4TpK/Po2JbxFKYXjhixSYhE/XqUyPJr2T J9LZ6XjBWmOPNCOLJvBwvdY7cLrOEW5soP5YkkKuVFEu7y1vQL1U0veMW8EAxUsc 0677l0kgg81QzpL1L+4KWIoKnm9zTAdZihnsYFklqLISdk5kPOVJ0zMlt/NRwEa4 4SduZWJ22BUW8zmL+przL6RNUpwcDXseUI0oSnJC/3AJG4BQ/lVfCzJdw2lJEJM2 lGXybnzGZNbHp0dw1P0UxKzICPEns1N91wkYZO+swc/tTim0++wAhBvAuIRBId6X 6tAowr2dHZbhB1oRl4A5bFje0A3T05dZMLXqHPr9W5DgrWQeCBg= -----END CERTIFICATE-----Generated at Sun Sep 20 23:47:10 2026 by rpki-client