
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier: lmhQ+o4I2gvOUmUHw0cVwURDXHQM1NGF91SZIarnjqo=
Subject key identifier: DE:C7:7C:9D:54:DE:78:D2:23:0A:60:B8:30:6B:77:EC:97:1E:F2:87
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial: 0151EA6AC5F82A3983D5652737149922AA45F002
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number: 0916
Signing time: Mon 21 Sep 2026 04:59:58 +0000
Manifest this update: Mon 21 Sep 2026 04:54:58 +0000
Manifest next update: Tue 22 Sep 2026 05:38:58 +0000
Files and hashes: 1: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
2: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
3: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
4: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
5: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
6: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
7: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
8: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
9: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
10: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
11: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
12: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
13: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
14: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
15: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
16: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
17: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
18: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
19: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: dR2ZQC/PxLMZ1AvfjUkRD7QJ6bkwGzgCrWZcLDSC9u0=)
20: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
21: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:51:ea:6a:c5:f8:2a:39:83:d5:65:27:37:14:99:22:aa:45:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Validity
Not Before: Sep 21 04:54:58 2026 GMT
Not After : Sep 22 05:38:58 2026 GMT
Subject: CN=DEC77C9D54DE78D2230A60B8306B77EC971EF287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:83:19:c4:2b:93:c1:0b:67:20:64:45:2d:
4e:6a:57:ca:52:19:bf:07:fa:c0:36:88:aa:7f:d4:
1e:04:d2:0a:10:cb:23:f6:95:16:dd:ca:d1:94:f6:
b3:38:d9:09:4e:73:28:c2:c3:45:5a:b0:57:fb:29:
87:c1:bc:72:d7:1b:16:75:55:46:6d:bc:12:83:12:
ae:90:7d:95:e2:d6:15:58:21:aa:35:fe:38:07:e0:
12:4e:28:cc:d5:ee:9b:2b:a6:9e:f8:4a:f2:6a:12:
99:84:7e:d8:9e:eb:69:5c:78:56:9b:8d:48:cd:a7:
68:5b:bf:b4:ca:1a:c7:d0:2a:1d:c1:67:a7:06:5c:
94:51:3b:b8:04:5d:af:a7:36:9c:87:b7:1f:4b:8e:
e6:34:f4:ff:44:55:e9:58:10:f0:bc:08:b6:ed:a2:
64:db:a0:19:07:48:f0:aa:28:41:91:3f:f6:3b:8d:
19:74:ae:0b:00:7d:59:78:b4:1c:44:da:10:17:aa:
89:e6:17:ae:66:d0:f5:ed:0f:59:3e:5e:d0:2d:66:
bb:86:d1:80:54:97:05:f2:bc:20:d1:e7:86:d7:44:
57:08:15:89:fe:4e:e0:e5:fd:8f:60:92:d4:2d:39:
c3:0f:a9:64:cd:62:48:14:e5:3d:e3:df:84:f8:77:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:7C:9D:54:DE:78:D2:23:0A:60:B8:30:6B:77:EC:97:1E:F2:87
X509v3 Authority Key Identifier:
keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a1:3c:2c:e6:4f:a2:0c:85:c9:66:0e:06:2d:4d:6f:f5:12:
05:54:15:0b:c6:88:58:0b:6d:1c:5f:d3:b8:6c:a7:4e:5d:e1:
1e:d9:df:02:d6:7f:6e:c5:f4:61:67:30:48:d4:b8:74:42:30:
cc:7b:e1:c9:2b:60:ea:ec:87:c3:31:c6:4f:58:3b:9e:db:d9:
bb:04:96:66:63:b6:9b:91:26:9e:d0:5d:09:0c:b5:15:f6:7f:
b2:03:2b:1c:47:71:76:06:4a:2f:a6:98:1e:dd:18:29:35:41:
40:17:fa:59:ff:81:47:29:58:22:1a:7c:b6:79:09:70:9b:61:
a0:fd:0b:3b:f9:82:48:59:0a:83:b8:df:d1:8c:99:5f:11:52:
bb:8f:e9:e3:9d:1d:40:e0:ca:24:69:89:22:a2:1d:0f:52:8c:
bf:80:2b:08:7e:a4:7c:f3:fe:dc:72:4f:55:1b:09:f5:43:92:
67:03:ba:fc:01:31:4d:a0:93:ee:05:3e:16:d0:3e:3f:4c:0b:
ef:35:5f:3b:e0:e1:fc:90:22:53:ec:1b:f4:7d:08:ac:43:d4:
32:9d:e1:a7:0f:0a:47:d9:f4:3a:7d:01:29:49:af:5b:90:e7:
27:b6:49:e5:24:ab:ef:2e:02:44:fc:bd:9d:87:d9:1e:f0:b7:
92:50:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:08:32 2026 by rpki-client