
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier: AOvnr1L1sr/1r600DqVr+oF+WlRZ6/3fpAPMy37m9vQ=
Subject key identifier: A2:82:D6:F5:AB:F2:B6:F8:97:11:95:BE:7B:23:9F:A9:37:21:3F:F5
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 63E130859E85DF8FFADCA990055E9F2244D86849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number: 0835
Signing time: Sun 01 Mar 2026 21:11:30 +0000
Manifest this update: Sun 01 Mar 2026 21:06:30 +0000
Manifest next update: Mon 02 Mar 2026 21:36:30 +0000
Files and hashes: 1: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
2: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
3: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
4: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
5: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
6: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
7: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
8: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
9: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
10: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
11: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
12: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
13: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: HfM4LRwKlv+zft9bWcy5qR65mFr3oBHcnKtC19j4xDQ=)
14: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
15: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
16: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
17: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 21:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e1:30:85:9e:85:df:8f:fa:dc:a9:90:05:5e:9f:22:44:d8:68:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Mar 1 21:06:30 2026 GMT
Not After : Mar 2 21:36:30 2026 GMT
Subject: CN=A282D6F5ABF2B6F8971195BE7B239FA937213FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:f0:02:65:c1:05:fb:3d:00:5f:c3:f2:31:
c1:51:50:0e:83:c2:e9:18:61:76:0e:05:11:81:12:
a7:2b:3d:ca:d7:91:a4:75:06:98:2f:d2:74:65:d1:
f6:ea:1b:7e:86:5e:e3:69:af:4d:fe:4e:d6:e1:17:
9b:87:60:32:f7:5a:9a:13:fd:a3:0d:20:83:c7:e1:
37:9f:ce:5d:f7:32:c1:00:a6:6d:6b:9f:c1:b4:98:
6d:a9:8b:6f:d2:94:06:0d:a4:03:46:55:a3:7f:e9:
8f:e7:e3:40:3e:c0:dc:37:12:49:b2:a5:bc:46:54:
c8:7a:b5:a4:e3:ac:3e:02:ba:c4:14:25:00:41:94:
2e:33:75:04:72:b0:32:22:27:50:a5:5e:16:d2:3f:
24:98:45:d5:45:57:56:aa:5d:61:4d:21:75:d0:ac:
9c:9d:cf:ce:dd:54:91:ae:88:f0:ee:54:5b:7d:5f:
83:50:2e:46:8f:d7:cc:8e:12:28:1d:6a:48:30:13:
63:33:0f:dc:69:5d:46:ff:2b:2f:ba:16:fb:f9:0e:
2b:4f:18:cf:0c:0f:4f:28:f4:98:56:df:6f:07:ef:
6d:3a:46:16:3d:53:c6:c6:78:7b:b5:3b:d2:a9:82:
f7:d5:31:db:16:62:6a:19:02:a3:82:f6:b0:04:de:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:D6:F5:AB:F2:B6:F8:97:11:95:BE:7B:23:9F:A9:37:21:3F:F5
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:6f:81:61:55:48:62:c0:84:df:c7:a9:38:b5:8b:9d:b7:
66:33:e1:67:79:5b:e6:c1:cd:38:5c:5e:33:6e:90:02:e4:4b:
41:f5:9f:dc:08:ba:de:be:a6:4e:af:29:30:87:60:db:b6:97:
d3:fb:d4:80:c0:a4:b6:2a:d7:fd:f0:2d:b2:68:7c:16:28:05:
94:2b:fa:42:b1:94:a4:7d:a2:2b:0e:d9:a3:9a:93:df:61:05:
0c:b6:f8:9a:45:15:18:3c:02:78:5b:dd:1f:42:14:38:cf:23:
5d:aa:e9:7b:b0:cb:89:f8:aa:f8:d8:86:f0:ef:3c:e5:92:70:
92:9d:83:a5:8b:46:71:0e:d0:8b:e5:ea:23:35:b5:f2:55:01:
c3:2b:61:8b:a9:33:b6:0a:e6:f8:78:fb:cc:20:92:9d:6b:7c:
a1:b7:28:28:fc:24:d8:df:62:6b:41:4c:f6:fa:44:54:86:5d:
db:7b:27:6f:ab:57:0e:0b:af:9a:6e:d7:60:b0:85:28:d5:5c:
91:51:4a:d7:3a:02:c7:38:21:09:e2:11:59:7a:37:54:de:45:
af:4a:9f:5e:08:d2:9b:73:61:65:2a:cd:a1:7d:3b:3a:77:49:
e4:30:ac:70:8a:db:d9:63:02:a5:d6:50:31:35:92:1a:87:18:
96:d8:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:32:26 2026 by rpki-client