
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier: igug8ms4ijG7gebgPymFr1RnUFHQ32K/ryAwptZgN0I=
Subject key identifier: CC:20:25:DF:10:AB:9C:09:00:C1:06:74:E1:06:65:27:C8:C4:E6:C8
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial: 751DACA8E5B2416423431FD4B0A7D0B5546F129E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number: 08CB
Signing time: Tue 28 Jul 2026 14:44:57 +0000
Manifest this update: Tue 28 Jul 2026 14:39:57 +0000
Manifest next update: Wed 29 Jul 2026 17:08:57 +0000
Files and hashes: 1: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
2: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
3: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
4: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
5: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
6: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
7: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
8: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
9: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
10: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
11: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
12: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
13: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: NRvzIQBr9kJmt3lXbM3oOvwc/CERgQ+2q0kK+a0AFEo=)
14: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
15: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
16: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
17: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
18: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
19: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
20: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
21: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1d:ac:a8:e5:b2:41:64:23:43:1f:d4:b0:a7:d0:b5:54:6f:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Validity
Not Before: Jul 28 14:39:57 2026 GMT
Not After : Jul 29 17:08:57 2026 GMT
Subject: CN=CC2025DF10AB9C0900C10674E1066527C8C4E6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:14:e3:52:62:06:0f:ab:41:e0:e8:d2:14:
5c:96:3e:e4:67:cf:cc:b8:cc:06:c3:9c:de:ce:2f:
fc:58:a3:7b:aa:68:ca:81:8e:a4:39:ad:36:08:fd:
3e:54:20:e7:23:04:98:1a:82:35:2c:58:ff:9a:42:
3d:22:86:7b:fb:5e:42:6a:c7:a3:ec:d3:02:1c:78:
f7:b7:cf:2a:c3:70:9b:48:ad:9d:a3:22:3a:6d:f4:
a2:a2:90:fb:06:fe:69:ae:eb:7a:43:dd:04:76:d5:
78:de:ef:95:3a:0f:ae:35:93:21:80:7a:da:8a:6a:
19:92:88:c6:0c:03:15:7a:dd:ce:46:02:3c:5d:06:
f9:5d:47:f0:45:d2:06:98:4c:99:7f:5d:8a:35:01:
f4:2b:1c:cb:55:a3:bc:db:1e:dc:fa:b0:a2:5a:6b:
bd:49:45:4d:6b:c3:a6:89:0d:14:ba:50:f8:e0:a3:
be:ca:bd:6c:64:78:0d:e8:6e:c6:14:8d:60:5a:7a:
db:3a:3f:9d:15:16:3a:6f:b7:01:db:ad:9b:8f:47:
72:89:b0:ee:18:2e:50:34:8d:2c:64:f2:b9:84:52:
3e:2f:e5:5f:78:7e:2d:2c:e7:7c:77:3d:49:25:04:
30:17:06:83:2f:c3:c6:c5:f9:73:22:fb:3e:a9:4d:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:25:DF:10:AB:9C:09:00:C1:06:74:E1:06:65:27:C8:C4:E6:C8
X509v3 Authority Key Identifier:
keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4f:41:50:49:0b:92:20:5b:84:7c:b5:89:c7:80:39:db:81:
c8:3f:0e:d0:44:a1:0b:ab:a8:94:d1:cf:8a:22:72:6a:58:52:
df:df:ef:bd:ed:14:88:68:75:37:7a:8e:b9:a2:37:46:1d:c6:
b9:69:f3:ba:fb:47:b2:bf:72:19:8c:21:02:10:96:7c:d1:c1:
03:61:e3:a2:d8:a4:fa:78:61:06:12:4c:be:87:3c:21:8b:6b:
ba:b7:9f:fd:5a:66:80:e0:26:93:9e:38:a1:5a:53:b3:04:11:
2c:10:d1:f1:85:99:1f:c1:55:30:05:c7:7d:c7:28:dc:ff:bd:
c0:22:c4:cf:d6:57:f8:79:b4:54:8e:cf:b7:e5:91:2c:d6:28:
22:51:dc:4b:73:30:d5:db:c5:bf:c2:83:ff:27:01:eb:dd:c9:
ca:50:fa:6f:33:3e:ff:ad:71:b3:72:5b:53:76:2d:3b:ae:48:
ba:69:c0:0a:01:8b:91:a6:c7:b0:58:ee:3e:34:9e:9e:48:47:
13:cc:54:1a:b8:28:48:15:90:a5:e6:23:a5:5e:1b:31:90:84:
3d:46:72:48:dd:e2:ca:a8:22:a0:22:a0:6b:e4:31:09:cc:64:
f8:2c:70:64:1a:87:6b:dd:9e:dc:34:4b:a6:51:ed:95:5a:14:
34:78:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:02:57 2026 by rpki-client