This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier: J6Ib2fp/eWo2k3cQgsnodDNGORYTub15CfHatVF5Xyg=
Subject key identifier: 4A:09:77:29:21:56:AB:31:A3:93:41:23:AA:2E:6F:29:D0:A8:19:78
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 2352AFB3D4207F00DEF100BA752B5F8545C7E51F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number: 07D3
Signing time: Fri 19 Dec 2025 05:15:25 +0000
Manifest this update: Fri 19 Dec 2025 05:10:25 +0000
Manifest next update: Sat 20 Dec 2025 08:48:25 +0000
Files and hashes: 1: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
2: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
3: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
4: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
5: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
6: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
7: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
8: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
9: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
10: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
11: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
12: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
13: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
14: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
15: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: wuyLbn7fVEvksaW+GcUpQ9sPN0176eRDeigaJRU2Xn4=)
16: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
17: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 08:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:52:af:b3:d4:20:7f:00:de:f1:00:ba:75:2b:5f:85:45:c7:e5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Dec 19 05:10:25 2025 GMT
Not After : Dec 20 08:48:25 2025 GMT
Subject: CN=4A0977292156AB31A3934123AA2E6F29D0A81978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:04:77:eb:51:25:46:4b:a6:12:c9:b1:9d:
74:48:1c:9a:5e:46:21:10:a3:25:c8:22:96:c0:c9:
95:82:70:2b:a2:6c:6e:18:ff:67:94:02:8d:c2:82:
28:33:61:ac:3a:2a:fd:a6:71:db:87:0a:f3:74:2f:
06:b4:3d:47:76:3f:d8:9c:9b:ef:eb:91:45:00:a6:
64:e0:94:05:76:3e:bd:98:85:1b:0f:cb:56:ca:cb:
b1:93:ff:af:87:15:3e:30:c5:a6:6e:03:a4:c2:0e:
5b:2e:a2:13:6c:b5:b6:63:19:42:3b:a3:c3:9e:95:
f2:17:48:a7:f5:72:a4:e9:f2:30:76:67:b2:26:d1:
44:70:41:5b:8b:32:46:e6:47:ba:3a:38:1f:4e:09:
55:8f:98:d6:8d:dc:14:e4:21:a7:89:73:7c:16:05:
f0:7a:9b:b2:a2:8a:9e:9b:a7:ad:35:c4:1c:07:00:
4f:bb:5e:3e:69:7d:d7:e7:47:f1:5e:53:ce:24:ad:
97:27:9b:30:4b:9f:cc:11:a7:07:32:03:d1:77:33:
1c:30:51:41:9c:f2:54:e9:36:3f:e2:fd:ae:9b:94:
82:bc:1a:ce:b8:9b:70:47:58:cb:07:0f:11:0f:78:
5f:43:6f:64:ca:10:4d:48:2c:d3:6d:51:17:1c:f8:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:77:29:21:56:AB:31:A3:93:41:23:AA:2E:6F:29:D0:A8:19:78
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a2:2c:5e:26:31:5f:09:ab:74:26:ca:76:b3:55:50:70:59:
74:5b:f7:1f:f9:f9:e2:80:e7:12:6e:c0:87:a9:8a:d2:77:b4:
c4:83:bb:45:d1:36:6d:1d:25:16:5f:63:ea:35:e6:17:d1:dd:
40:40:7b:20:5b:8a:ae:b5:bc:11:51:9b:1c:4b:53:aa:ce:0c:
4b:6d:10:c9:c3:34:75:b8:45:20:81:7f:c3:97:58:8a:9d:d9:
10:cd:d5:ae:bc:0d:4d:44:f6:dc:b0:50:d9:05:8b:dc:53:9c:
22:9b:28:7a:3d:68:8e:21:99:ea:5b:30:b3:75:e2:ec:18:79:
de:e6:e7:33:34:09:09:8a:67:94:1e:c5:b4:22:60:dd:d2:86:
c5:dc:3a:ae:9f:c5:bf:2b:f1:7d:05:f0:51:7a:44:2c:75:a0:
96:93:1f:6a:e9:c8:55:27:03:56:bd:61:47:5d:69:61:f7:01:
51:6e:9f:da:d9:31:c8:92:5b:1c:eb:3a:15:c5:41:8f:cb:38:
ba:9c:b5:13:9e:86:3d:50:1c:9c:dc:9a:40:2c:86:f3:85:f0:
15:ba:47:1a:63:7f:15:27:47:55:e0:ed:95:de:ea:ae:9c:1a:
a9:c0:01:cc:fa:61:88:a3:77:f6:cf:a1:63:e2:00:2f:7d:71:
cb:7d:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:10 2025 by rpki-client