This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          J6Ib2fp/eWo2k3cQgsnodDNGORYTub15CfHatVF5Xyg=
Subject key identifier:   4A:09:77:29:21:56:AB:31:A3:93:41:23:AA:2E:6F:29:D0:A8:19:78
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       2352AFB3D4207F00DEF100BA752B5F8545C7E51F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          07D3
Signing time:             Fri 19 Dec 2025 05:15:25 +0000
Manifest this update:     Fri 19 Dec 2025 05:10:25 +0000
Manifest next update:     Sat 20 Dec 2025 08:48:25 +0000
Files and hashes:         1: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
                          2: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
                          3: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
                          4: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
                          5: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
                          6: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
                          7: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
                          8: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
                          9: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
                          10: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
                          11: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
                          12: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
                          13: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
                          14: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
                          15: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: wuyLbn7fVEvksaW+GcUpQ9sPN0176eRDeigaJRU2Xn4=)
                          16: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
                          17: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 08:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:52:af:b3:d4:20:7f:00:de:f1:00:ba:75:2b:5f:85:45:c7:e5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Dec 19 05:10:25 2025 GMT
            Not After : Dec 20 08:48:25 2025 GMT
        Subject: CN=4A0977292156AB31A3934123AA2E6F29D0A81978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:04:77:eb:51:25:46:4b:a6:12:c9:b1:9d:
                    74:48:1c:9a:5e:46:21:10:a3:25:c8:22:96:c0:c9:
                    95:82:70:2b:a2:6c:6e:18:ff:67:94:02:8d:c2:82:
                    28:33:61:ac:3a:2a:fd:a6:71:db:87:0a:f3:74:2f:
                    06:b4:3d:47:76:3f:d8:9c:9b:ef:eb:91:45:00:a6:
                    64:e0:94:05:76:3e:bd:98:85:1b:0f:cb:56:ca:cb:
                    b1:93:ff:af:87:15:3e:30:c5:a6:6e:03:a4:c2:0e:
                    5b:2e:a2:13:6c:b5:b6:63:19:42:3b:a3:c3:9e:95:
                    f2:17:48:a7:f5:72:a4:e9:f2:30:76:67:b2:26:d1:
                    44:70:41:5b:8b:32:46:e6:47:ba:3a:38:1f:4e:09:
                    55:8f:98:d6:8d:dc:14:e4:21:a7:89:73:7c:16:05:
                    f0:7a:9b:b2:a2:8a:9e:9b:a7:ad:35:c4:1c:07:00:
                    4f:bb:5e:3e:69:7d:d7:e7:47:f1:5e:53:ce:24:ad:
                    97:27:9b:30:4b:9f:cc:11:a7:07:32:03:d1:77:33:
                    1c:30:51:41:9c:f2:54:e9:36:3f:e2:fd:ae:9b:94:
                    82:bc:1a:ce:b8:9b:70:47:58:cb:07:0f:11:0f:78:
                    5f:43:6f:64:ca:10:4d:48:2c:d3:6d:51:17:1c:f8:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:09:77:29:21:56:AB:31:A3:93:41:23:AA:2E:6F:29:D0:A8:19:78
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a2:2c:5e:26:31:5f:09:ab:74:26:ca:76:b3:55:50:70:59:
         74:5b:f7:1f:f9:f9:e2:80:e7:12:6e:c0:87:a9:8a:d2:77:b4:
         c4:83:bb:45:d1:36:6d:1d:25:16:5f:63:ea:35:e6:17:d1:dd:
         40:40:7b:20:5b:8a:ae:b5:bc:11:51:9b:1c:4b:53:aa:ce:0c:
         4b:6d:10:c9:c3:34:75:b8:45:20:81:7f:c3:97:58:8a:9d:d9:
         10:cd:d5:ae:bc:0d:4d:44:f6:dc:b0:50:d9:05:8b:dc:53:9c:
         22:9b:28:7a:3d:68:8e:21:99:ea:5b:30:b3:75:e2:ec:18:79:
         de:e6:e7:33:34:09:09:8a:67:94:1e:c5:b4:22:60:dd:d2:86:
         c5:dc:3a:ae:9f:c5:bf:2b:f1:7d:05:f0:51:7a:44:2c:75:a0:
         96:93:1f:6a:e9:c8:55:27:03:56:bd:61:47:5d:69:61:f7:01:
         51:6e:9f:da:d9:31:c8:92:5b:1c:eb:3a:15:c5:41:8f:cb:38:
         ba:9c:b5:13:9e:86:3d:50:1c:9c:dc:9a:40:2c:86:f3:85:f0:
         15:ba:47:1a:63:7f:15:27:47:55:e0:ed:95:de:ea:ae:9c:1a:
         a9:c0:01:cc:fa:61:88:a3:77:f6:cf:a1:63:e2:00:2f:7d:71:
         cb:7d:70:8a
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUI1Kvs9QgfwDe8QC6dStfhUXH5R8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy
MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MTIxOTA1MTAyNVoX
DTI1MTIyMDA4NDgyNVowMzExMC8GA1UEAxMoNEEwOTc3MjkyMTU2QUIzMUEzOTM0
MTIzQUEyRTZGMjlEMEE4MTk3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK12BHfrUSVGS6YSybGddEgcml5GIRCjJcgilsDJlYJwK6Jsbhj/Z5QCjcKC
KDNhrDoq/aZx24cK83QvBrQ9R3Y/2Jyb7+uRRQCmZOCUBXY+vZiFGw/LVsrLsZP/
r4cVPjDFpm4DpMIOWy6iE2y1tmMZQjujw56V8hdIp/VypOnyMHZnsibRRHBBW4sy
RuZHujo4H04JVY+Y1o3cFOQhp4lzfBYF8HqbsqKKnpunrTXEHAcAT7tePml91+dH
8V5TziStlyebMEufzBGnBzID0XczHDBRQZzyVOk2P+L9rpuUgrwazribcEdYywcP
EQ94X0NvZMoQTUgs021RFxz4U5UCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRKCXcp
IVarMaOTQSOqLm8p0KgZeDAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H
KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz
MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB
MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADCiLF4mMV8Jq3QmynazVVBwWXRb9x/5+eKA
5xJuwIepitJ3tMSDu0XRNm0dJRZfY+o15hfR3UBAeyBbiq61vBFRmxxLU6rODEtt
EMnDNHW4RSCBf8OXWIqd2RDN1a68DU1E9tywUNkFi9xTnCKbKHo9aI4hmepbMLN1
4uwYed7m5zM0CQmKZ5QexbQiYN3ShsXcOq6fxb8r8X0F8FF6RCx1oJaTH2rpyFUn
A1a9YUddaWH3AVFun9rZMciSWxzrOhXFQY/LOLqctROehj1QHJzcmkAshvOF8BW6
RxpjfxUnR1Xg7ZXe6q6cGqnAAcz6YYijd/bPoWPiAC99cct9cIo=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:10 2025 by rpki-client