
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json)
Hash identifier: 6kuYWGUdzio0SmV4fGEqnyx5Y031A0W0D3vtBAJYxHM=
Subject key identifier: 82:D5:44:8E:30:08:45:05:B6:D8:49:A3:15:C3:E4:72:88:F0:4E:C3
Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90
Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
Certificate serial: 2EC275803BFF99C62B7358411F1B54BA2BA9D322
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
Manifest number: 0A11
Signing time: Wed 17 Jun 2026 03:03:59 +0000
Manifest this update: Wed 17 Jun 2026 02:58:59 +0000
Manifest next update: Thu 18 Jun 2026 05:11:59 +0000
Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=)
2: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=)
3: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=)
4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=)
5: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: 5Zcv8dsVj8+aglsqLf1U4loturxfixziY7UkqctRskM=)
6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=)
7: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl
rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 05:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c2:75:80:3b:ff:99:c6:2b:73:58:41:1f:1b:54:ba:2b:a9:d3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
Validity
Not Before: Jun 17 02:58:59 2026 GMT
Not After : Jun 18 05:11:59 2026 GMT
Subject: CN=82D5448E30084505B6D849A315C3E47288F04EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:a2:24:b3:12:b1:78:19:22:ed:df:b3:20:
76:ea:b4:47:f3:f7:30:37:97:f3:72:4f:fe:22:9c:
06:a4:fc:54:64:b5:bf:7f:ea:4c:0e:06:e1:61:f5:
dd:7d:10:48:88:c1:d2:23:51:67:25:e5:8b:a0:5a:
11:2d:e0:82:d3:e3:f4:b7:3a:d3:bc:04:19:43:75:
28:29:66:3c:32:4c:a4:3b:1e:a2:59:d6:3f:8b:3c:
29:6b:25:87:f9:dc:96:df:4c:b7:b9:9c:eb:d1:72:
14:3c:78:f6:f8:d2:27:27:22:0f:2d:41:e0:58:77:
69:2e:01:47:32:89:45:9a:05:7d:d1:e8:41:b7:47:
5c:fc:39:00:ea:1b:8b:90:21:9b:0a:64:ce:96:e4:
b5:85:9e:82:93:d9:53:c3:fe:cd:66:42:6d:84:6d:
77:4b:a9:1d:96:38:17:37:30:43:85:94:17:0c:dc:
ef:9d:d1:90:03:b7:58:8e:f2:5b:41:03:0d:fc:37:
96:3e:bf:04:b2:fd:85:01:a4:28:28:08:7e:2e:1b:
e4:cd:0f:39:8e:4f:ad:60:fd:e7:0a:7b:26:23:4a:
53:12:9e:3a:f2:5b:70:40:6e:41:95:24:bc:fc:5e:
2f:9d:e8:aa:dd:7d:50:32:6b:1c:59:8b:78:56:8e:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:44:8E:30:08:45:05:B6:D8:49:A3:15:C3:E4:72:88:F0:4E:C3
X509v3 Authority Key Identifier:
keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:e5:2e:9d:69:15:70:13:28:28:4c:73:3e:c9:7c:a8:0f:
44:67:47:7f:35:03:a0:72:b4:68:80:a8:37:22:dd:06:9b:7f:
de:48:f2:85:da:47:02:76:e5:c5:72:27:4e:3b:6b:b7:ad:e0:
50:25:e7:84:a4:42:26:69:fc:96:f6:cc:fa:b1:6d:4b:2f:bd:
f5:4c:f8:25:83:40:5c:d2:cf:ed:64:f5:7d:a8:ac:b9:91:49:
e7:4d:04:f5:76:2a:da:da:ed:32:bd:26:45:8e:03:8d:9c:89:
3b:a5:25:84:43:07:f3:f6:ab:10:36:43:6f:0e:c2:f0:4b:f5:
c3:81:ab:ac:31:56:75:11:22:7c:e8:4b:89:07:0d:81:b9:f6:
fc:84:ed:2b:89:a6:d4:e3:09:c0:c0:f6:5c:55:3e:44:50:2c:
1f:ab:61:58:ad:5f:f9:1d:56:10:24:e5:54:95:35:25:c8:80:
22:5c:f3:fd:69:1a:f5:ec:70:7a:61:ad:57:25:00:2f:5e:13:
ee:51:7d:4a:31:09:bf:f1:33:bc:a5:5f:d7:ac:a4:c2:9f:24:
e4:18:88:c3:69:78:22:19:9d:7a:5e:df:7c:70:94:10:41:af:
4c:ba:4e:06:d6:1c:ff:f9:1f:e3:47:8b:23:9d:19:ef:a4:4d:
8b:f2:67:0e
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIULsJ1gDv/mcYrc1hBHxtUuiup0yIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC
ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDYxNzAyNTg1OVoX
DTI2MDYxODA1MTE1OVowMzExMC8GA1UEAxMoODJENTQ0OEUzMDA4NDUwNUI2RDg0
OUEzMTVDM0U0NzI4OEYwNEVDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALM/oiSzErF4GSLt37Mgduq0R/P3MDeX83JP/iKcBqT8VGS1v3/qTA4G4WH1
3X0QSIjB0iNRZyXli6BaES3ggtPj9Lc607wEGUN1KClmPDJMpDseolnWP4s8KWsl
h/nclt9Mt7mc69FyFDx49vjSJyciDy1B4Fh3aS4BRzKJRZoFfdHoQbdHXPw5AOob
i5AhmwpkzpbktYWegpPZU8P+zWZCbYRtd0upHZY4FzcwQ4WUFwzc753RkAO3WI7y
W0EDDfw3lj6/BLL9hQGkKCgIfi4b5M0POY5PrWD95wp7JiNKUxKeOvJbcEBuQZUk
vPxeL53oqt19UDJrHFmLeFaOsA8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSC1USO
MAhFBbbYSaMVw+RyiPBOwzAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB
kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC
MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx
NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAX45S6daRVwEygoTHM+yXyoD0RnR381A6By
tGiAqDci3Qabf95I8oXaRwJ25cVyJ047a7et4FAl54SkQiZp/Jb2zPqxbUsvvfVM
+CWDQFzSz+1k9X2orLmRSedNBPV2Ktra7TK9JkWOA42ciTulJYRDB/P2qxA2Q28O
wvBL9cOBq6wxVnURInzoS4kHDYG59vyE7SuJptTjCcDA9lxVPkRQLB+rYVitX/kd
VhAk5VSVNSXIgCJc8/1pGvXscHphrVclAC9eE+5RfUoxCb/xM7ylX9espMKfJOQY
iMNpeCIZnXpe33xwlBBBr0y6TgbWHP/5H+NHiyOdGe+kTYvyZw4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:59:07 2026 by rpki-client