$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft File: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft (raw, json) Hash identifier: 2YwTbrWiZlbGTk3xV+mPkNe9orzrRho1PB5zqRWyOmc= Subject key identifier: 5A:80:B7:49:A4:7F:88:A2:B1:E3:8E:23:0A:70:A3:F6:AE:7A:8C:6A Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 2678DCB7055BB7B5766CBF751F95721C269F3DE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft Manifest number: 017A Signing time: Tue 28 Jul 2026 02:09:57 +0000 Manifest this update: Tue 28 Jul 2026 02:04:57 +0000 Manifest next update: Wed 29 Jul 2026 04:45:57 +0000 Files and hashes: 1: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (hash: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk=) 2: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (hash: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8=) 3: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: A+n33m7aMq8dWmlNODuImDbmHluR0nRCgY8pOPk9SGU=) 4: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI=) 5: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (hash: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI=) 6: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (hash: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo=) 7: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl (hash: esDlVy9D/uhDUrdtJm9wyj7aYfWV6NhehL5CYmg9D4I=) 8: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: m8YqiID+Q725PKBIKrUauO2lTKAbZU016aARa/XfmOg=) 9: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (hash: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0=) 10: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (hash: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:78:dc:b7:05:5b:b7:b5:76:6c:bf:75:1f:95:72:1c:26:9f:3d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Jul 28 02:04:57 2026 GMT Not After : Jul 29 04:45:57 2026 GMT Subject: CN=5A80B749A47F88A2B1E38E230A70A3F6AE7A8C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:5c:2c:36:09:33:83:2c:d9:4b:62:5c:9c: ae:eb:f6:b4:21:6f:d3:8d:b8:52:e7:d5:36:63:04: 65:d9:72:8a:17:5c:13:9e:92:73:d5:f2:8b:c6:85: 05:c3:f7:a5:2c:61:9a:05:25:53:8f:f0:7f:08:00: f6:42:05:e2:2b:96:e0:c9:18:74:67:27:01:88:6f: d8:5e:42:9c:98:27:b8:5b:51:3f:89:3c:ff:0a:93: da:f2:37:4a:ad:16:1b:a2:81:ff:83:03:c0:e7:51: 63:7d:2d:08:e3:9b:3a:f3:5f:a7:0f:e8:38:a9:ac: 70:17:ea:76:a6:a8:3d:8e:74:da:12:16:a9:44:17: 38:fd:59:6d:58:e9:7a:7a:69:15:ef:7b:70:ea:64: e4:fc:0d:ae:2f:ff:b8:76:a3:c5:34:70:9e:b1:00: e1:6d:f3:96:9b:c8:89:84:71:6e:f0:ca:a3:c1:15: d3:78:b1:98:08:5f:0b:78:60:f3:b7:f6:0c:3e:62: df:fc:e4:37:1b:16:25:c6:e3:84:12:b9:e7:eb:1f: d7:3e:35:98:1c:4f:7c:45:bc:87:47:1e:00:c9:bc: 7d:ba:99:11:90:0e:25:20:61:70:6f:f8:90:75:96: 23:3f:cf:77:4d:14:d6:c1:64:7a:d4:24:84:51:4a: 60:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:80:B7:49:A4:7F:88:A2:B1:E3:8E:23:0A:70:A3:F6:AE:7A:8C:6A X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:da:d0:29:da:f8:e5:06:26:db:36:4e:e3:7f:0e:8d:ec:61: 63:04:cc:e7:9c:94:52:87:f0:0e:6f:0d:0b:1b:c3:14:7a:53: 8f:f3:e4:8c:e6:5d:81:c6:ae:88:ba:ba:59:b6:95:1f:14:0f: 53:36:ca:ea:3c:37:d1:50:b4:38:a6:cb:3e:8c:55:cf:56:f7: 8b:47:f0:4f:20:7e:4e:f4:c2:48:a6:07:ef:df:02:d7:45:84: d3:cf:1d:d6:61:ca:75:f3:96:91:4a:73:20:56:92:b4:31:0b: 7c:8f:17:12:32:3a:51:a8:4d:75:8c:6a:a1:8a:f0:51:ad:e4: 70:38:59:19:56:43:76:8e:41:f2:39:ea:f0:8b:bd:2b:4c:94: 75:53:53:b5:b0:fa:92:b4:73:82:0f:bc:5e:b7:7d:27:ce:df: ed:90:a4:4f:01:c9:7f:a7:8c:04:cc:52:6d:ce:bb:1a:b6:bd: a0:75:77:a4:42:fe:12:2d:e5:61:72:65:71:fc:9a:bc:5f:aa: 1b:57:38:6b:f6:4f:fc:74:d3:cd:23:1a:2e:e9:87:9d:f2:15: 81:fa:c0:ff:7c:0e:4f:e2:20:b4:53:f7:fc:54:a4:07:f2:28: 8e:c5:e3:02:ce:6c:89:9f:fd:00:12:21:e5:fb:1f:d2:fa:db: 38:ee:a7:39 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUJnjctwVbt7V2bL91H5VyHCafPeUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDcyODAyMDQ1N1oX DTI2MDcyOTA0NDU1N1owMzExMC8GA1UEAxMoNUE4MEI3NDlBNDdGODhBMkIxRTM4 RTIzMEE3MEEzRjZBRTdBOEM2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOw9XCw2CTODLNlLYlycruv2tCFv0424UufVNmMEZdlyihdcE56Sc9Xyi8aF BcP3pSxhmgUlU4/wfwgA9kIF4iuW4MkYdGcnAYhv2F5CnJgnuFtRP4k8/wqT2vI3 Sq0WG6KB/4MDwOdRY30tCOObOvNfpw/oOKmscBfqdqaoPY502hIWqUQXOP1ZbVjp enppFe97cOpk5PwNri//uHajxTRwnrEA4W3zlpvIiYRxbvDKo8EV03ixmAhfC3hg 87f2DD5i3/zkNxsWJcbjhBK55+sf1z41mBxPfEW8h0ceAMm8fbqZEZAOJSBhcG/4 kHWWIz/Pd00U1sFketQkhFFKYEECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRagLdJ pH+IorHjjiMKcKP2rnqMajAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvQTNDRTZFQjUzMUE4OTUxRDI0QTM3REYyN0EwMUVC Mzk2NTFEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDa0Cna+OUGJts2TuN/Do3sYWMEzOeclFKH 8A5vDQsbwxR6U4/z5IzmXYHGroi6ulm2lR8UD1M2yuo8N9FQtDimyz6MVc9W94tH 8E8gfk70wkimB+/fAtdFhNPPHdZhynXzlpFKcyBWkrQxC3yPFxIyOlGoTXWMaqGK 8FGt5HA4WRlWQ3aOQfI56vCLvStMlHVTU7Ww+pK0c4IPvF63fSfO3+2QpE8ByX+n jATMUm3Ouxq2vaB1d6RC/hIt5WFyZXH8mrxfqhtXOGv2T/x0080jGi7ph53yFYH6 wP98Dk/iILRT9/xUpAfyKI7F4wLObImf/QASIeX7H9L62zjupzk= -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:18 2026 by rpki-client