$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: Pk5KQuiVJ2+ebWy2ret7lPg5b36CESzRdSKL5Va1ZQQ= Subject key identifier: 4D:48:16:01:E1:7A:70:5F:C4:07:C0:EE:9E:34:F5:86:7F:BE:55:EB Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 6E38A5FB372DF5F3AA111209EBAE941DBA535B6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 08C1 Signing time: Tue 04 Nov 2025 15:18:34 +0000 Manifest this update: Tue 04 Nov 2025 15:13:34 +0000 Manifest next update: Wed 05 Nov 2025 19:06:34 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 3: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 4: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: S0YEHUH2gD7ZYMAzfogf7EmQKQdiFNQ8cFN5YSErbV0=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:38:a5:fb:37:2d:f5:f3:aa:11:12:09:eb:ae:94:1d:ba:53:5b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Nov 4 15:13:34 2025 GMT Not After : Nov 5 19:06:34 2025 GMT Subject: CN=4D481601E17A705FC407C0EE9E34F5867FBE55EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:bc:66:f9:7d:f0:09:72:72:95:3b:cd:e4: 5b:2d:e6:b7:c1:fb:8a:96:3b:46:81:d8:87:f9:14: 53:eb:64:10:4f:86:28:b2:15:89:31:2f:f2:18:06: 6b:a8:96:ca:37:6d:a6:3f:12:c5:f5:58:5a:12:46: f6:8e:79:50:8e:2d:20:5b:56:b2:ed:8e:f9:54:88: 65:1e:67:3b:b9:bd:c8:65:09:ad:1d:39:15:57:d8: 72:93:45:c3:7e:41:d3:d4:fc:4d:ec:f7:40:58:63: 25:91:1a:65:70:84:93:d2:cb:19:a6:27:bb:ee:20: 34:3d:cc:20:4b:67:4b:91:f2:5b:57:8e:8a:0f:fe: 9a:d3:27:f0:bd:59:80:a1:0f:c0:98:7e:a2:f2:6c: 8a:ad:31:95:87:a3:e8:24:1f:52:e7:26:eb:e9:8b: 95:67:28:c6:b4:8c:84:af:c8:cf:ca:26:1b:75:6b: 18:70:bb:17:e4:af:9f:29:fe:2c:6a:21:74:9f:9c: 00:3d:46:05:19:14:43:ae:e2:73:a2:fa:49:24:30: eb:0b:77:70:9a:e1:d7:2a:94:8a:e8:d8:84:99:23: 91:ed:e7:12:26:44:94:6e:ca:e2:2c:45:32:7a:7e: 9f:70:bb:b7:d6:04:18:7b:88:da:13:dd:27:23:e3: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:48:16:01:E1:7A:70:5F:C4:07:C0:EE:9E:34:F5:86:7F:BE:55:EB X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:66:d9:55:4e:35:32:23:78:4a:ef:2f:9a:3b:aa:03:2e:4b: ac:44:53:eb:f8:8d:1c:12:c6:2d:40:32:9a:a6:44:b7:c5:a1: 93:c3:1a:ee:77:e0:28:7a:0f:49:23:46:6b:bd:6d:b2:75:bd: 77:0a:fe:9c:10:f7:1c:02:37:3c:62:68:95:e3:28:18:08:ee: 18:29:41:b2:45:ba:fe:6d:9e:eb:e1:d2:d0:e5:09:38:b2:3a: 3d:9d:3a:27:aa:6c:ab:cd:29:97:17:e2:47:0d:c1:ca:ca:bb: 9d:0d:67:8d:b7:25:8b:04:89:52:46:e2:7a:17:f9:17:1d:c3: 18:57:72:b0:a1:ca:25:21:4c:0b:8d:a8:32:b4:03:82:1b:d3: 59:83:50:8f:17:b0:ff:e0:e3:71:98:ec:96:a4:83:5a:42:9f: 98:24:74:8f:00:55:16:a9:81:6d:08:ab:cb:7f:e2:06:a0:3d: 6f:13:81:80:b5:f6:c5:83:2d:44:af:79:79:2f:78:c9:5a:28: e2:f0:e4:ff:23:c8:de:f8:d6:56:75:93:63:3a:dc:65:fb:3d: 0a:2d:d1:ec:7b:77:47:0e:5d:34:b7:8b:11:d0:f3:e7:05:e4: 11:15:ef:5f:5f:12:87:29:4f:a0:98:02:a9:bb:aa:64:78:18: 10:d5:8b:25 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUbjil+zct9fOqERIJ666UHbpTW2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MTEwNDE1MTMzNFoX DTI1MTEwNTE5MDYzNFowMzExMC8GA1UEAxMoNEQ0ODE2MDFFMTdBNzA1RkM0MDdD MEVFOUUzNEY1ODY3RkJFNTVFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwqvGb5ffAJcnKVO83kWy3mt8H7ipY7RoHYh/kUU+tkEE+GKLIViTEv8hgG a6iWyjdtpj8SxfVYWhJG9o55UI4tIFtWsu2O+VSIZR5nO7m9yGUJrR05FVfYcpNF w35B09T8Tez3QFhjJZEaZXCEk9LLGaYnu+4gND3MIEtnS5HyW1eOig/+mtMn8L1Z gKEPwJh+ovJsiq0xlYej6CQfUucm6+mLlWcoxrSMhK/Iz8omG3VrGHC7F+Svnyn+ LGohdJ+cAD1GBRkUQ67ic6L6SSQw6wt3cJrh1yqUiujYhJkjke3nEiZElG7K4ixF Mnp+n3C7t9YEGHuI2hPdJyPjMq8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRNSBYB 4XpwX8QHwO6eNPWGf75V6zAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9m2VVONTIjeErvL5o7qgMuS6xEU+v4jRwS xi1AMpqmRLfFoZPDGu534Ch6D0kjRmu9bbJ1vXcK/pwQ9xwCNzxiaJXjKBgI7hgp QbJFuv5tnuvh0tDlCTiyOj2dOieqbKvNKZcX4kcNwcrKu50NZ423JYsEiVJG4noX +RcdwxhXcrChyiUhTAuNqDK0A4Ib01mDUI8XsP/g43GY7Jakg1pCn5gkdI8AVRap gW0Iq8t/4gagPW8TgYC19sWDLUSveXkveMlaKOLw5P8jyN741lZ1k2M63GX7PQot 0ex7d0cOXTS3ixHQ8+cF5BEV719fEocpT6CYAqm7qmR4GBDViyU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:54:29 2025 by rpki-client