$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: OYFY2YfLzGOKNIfBgTMW4EeueoRA5qkmTcNkmHsaiq0= Subject key identifier: 1D:DE:B7:D0:00:1F:9D:09:54:65:36:14:75:23:5F:24:BA:7A:B3:DC Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 777955E07FEF3B5B3A6DA23C6112258E3756932F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 09AE Signing time: Thu 16 Apr 2026 19:51:32 +0000 Manifest this update: Thu 16 Apr 2026 19:46:32 +0000 Manifest next update: Fri 17 Apr 2026 23:37:32 +0000 Files and hashes: 1: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: s2MXbSCp8ZCFOSfQTEthSdtEkST0gJN+DkQWiP4NHGA=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 3: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 23:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:79:55:e0:7f:ef:3b:5b:3a:6d:a2:3c:61:12:25:8e:37:56:93:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Apr 16 19:46:32 2026 GMT Not After : Apr 17 23:37:32 2026 GMT Subject: CN=1DDEB7D0001F9D095465361475235F24BA7AB3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:16:0b:9d:9b:09:8e:bf:b5:7d:6c:8d:19:57: 34:5b:eb:97:91:18:c2:b2:06:e5:ab:50:20:95:71: 4a:f0:f5:db:c5:27:8d:d9:08:ea:65:95:0c:35:ba: 89:33:cf:5b:50:71:7f:40:ac:3b:15:83:47:7a:04: 98:bd:91:15:98:bc:4f:17:33:6c:6c:08:58:ff:c2: da:53:cd:7d:5f:0b:21:af:ce:ef:91:96:fd:64:5c: 47:c0:04:33:1b:f4:40:18:2c:ef:68:1e:69:dc:1a: d4:6e:13:fc:cc:0f:7c:c1:51:ad:0a:98:f1:1f:f2: 2f:06:a3:78:5f:5e:a6:d3:5e:9b:40:18:85:5c:5e: f3:96:88:f8:59:83:1c:04:36:46:46:15:4d:6f:ce: fa:52:ac:9b:d1:e6:80:16:02:87:93:c1:47:be:e4: 7a:9a:d7:75:ca:64:ea:e9:eb:87:cc:96:b7:5d:71: af:50:05:8c:f1:3f:ae:2e:fb:bb:2d:5b:c5:49:24: 76:d8:5a:f6:d5:62:16:ab:3c:33:a6:a8:a8:aa:51: 96:2c:b8:0b:23:2d:22:83:15:f6:20:a6:fc:8f:96: 45:83:33:16:d9:fe:2f:61:4b:c6:0d:2a:43:da:f5: 72:46:10:4f:ae:9d:b7:ec:02:69:1d:c6:32:91:f6: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:B7:D0:00:1F:9D:09:54:65:36:14:75:23:5F:24:BA:7A:B3:DC X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:fd:99:ca:48:85:30:06:8f:fd:33:95:96:66:f6:89:0b: b7:b5:b1:35:80:eb:4f:b0:38:87:08:20:d8:ff:3b:76:bc:a3: 10:0b:19:43:15:a7:c1:73:b3:28:a9:fe:05:92:90:ef:74:1f: 64:4d:0e:c8:2c:1d:e1:7f:60:d3:a9:33:bb:f1:cf:73:c8:47: a6:bd:d3:5c:13:53:02:7f:85:5b:d4:37:d0:47:ec:99:c1:76: 15:65:7d:92:d8:3e:38:65:48:e7:21:33:d1:52:59:86:45:81: ec:43:19:e3:cb:18:71:4b:a2:e6:dd:69:84:d8:04:96:96:c0: a1:4f:53:27:97:c8:42:15:9b:56:b3:e4:d1:23:2f:f8:b0:23: ca:2c:86:e8:4e:04:ab:35:de:de:55:3d:d9:56:d7:0a:d5:72: 73:38:5d:31:6e:25:5f:b6:c9:5c:76:ac:94:04:70:11:7f:82: 00:91:00:50:6f:42:29:07:7c:70:fe:55:94:c0:e4:87:61:25: dd:fa:85:95:f5:1a:68:b9:c2:c0:7c:a7:56:0f:63:65:e4:5b: a4:08:c4:2a:f5:ae:c0:9e:7b:91:48:59:7a:a5:49:62:91:13: 05:5b:40:fa:55:4c:01:15:15:8c:28:e5:a4:03:e4:96:fe:10: 9d:68:91:55 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUd3lV4H/vO1s6baI8YRIljjdWky8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDQxNjE5NDYzMloX DTI2MDQxNzIzMzczMlowMzExMC8GA1UEAxMoMURERUI3RDAwMDFGOUQwOTU0NjUz NjE0NzUyMzVGMjRCQTdBQjNEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMWC52bCY6/tX1sjRlXNFvrl5EYwrIG5atQIJVxSvD128UnjdkI6mWVDDW6 iTPPW1Bxf0CsOxWDR3oEmL2RFZi8TxczbGwIWP/C2lPNfV8LIa/O75GW/WRcR8AE Mxv0QBgs72geadwa1G4T/MwPfMFRrQqY8R/yLwajeF9eptNem0AYhVxe85aI+FmD HAQ2RkYVTW/O+lKsm9HmgBYCh5PBR77keprXdcpk6unrh8yWt11xr1AFjPE/ri77 uy1bxUkkdtha9tViFqs8M6aoqKpRliy4CyMtIoMV9iCm/I+WRYMzFtn+L2FLxg0q Q9r1ckYQT66dt+wCaR3GMpH2ZHUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQd3rfQ AB+dCVRlNhR1I18kunqz3DAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZx/ZnKSIUwBo/9M5WWZvaJC7e1sTWA60+w OIcIINj/O3a8oxALGUMVp8Fzsyip/gWSkO90H2RNDsgsHeF/YNOpM7vxz3PIR6a9 01wTUwJ/hVvUN9BH7JnBdhVlfZLYPjhlSOchM9FSWYZFgexDGePLGHFLoubdaYTY BJaWwKFPUyeXyEIVm1az5NEjL/iwI8oshuhOBKs13t5VPdlW1wrVcnM4XTFuJV+2 yVx2rJQEcBF/ggCRAFBvQikHfHD+VZTA5IdhJd36hZX1Gmi5wsB8p1YPY2XkW6QI xCr1rsCee5FIWXqlSWKREwVbQPpVTAEVFYwo5aQD5Jb+EJ1okVU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:47:53 2026 by rpki-client