$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft File: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft (raw, json) Hash identifier: n/Wcxd3prJLbpAipysgC1FnHqZ2cLSIKCoot+Pd6dA0= Subject key identifier: 35:62:63:29:A4:E1:41:10:20:89:6D:29:09:D6:87:45:3C:81:1A:EC Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 30370B64BC1249A235CF211F16E2A08C8A3742AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft Manifest number: 01C7 Signing time: Mon 21 Sep 2026 03:49:58 +0000 Manifest this update: Mon 21 Sep 2026 03:44:58 +0000 Manifest next update: Tue 22 Sep 2026 07:47:58 +0000 Files and hashes: 1: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: m8YqiID+Q725PKBIKrUauO2lTKAbZU016aARa/XfmOg=) 2: 323430333a373163303a3a2f33322d3438203d3e2033323134.roa (hash: GPjevhm5U7P82T4Rm3eggeWbeu9sYRveU8eNiHIiLvk=) 3: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: a0JhfPH4aG3NII9D55rgPWmuhoPeN2QSJqivEgW7FCI=) 4: 323430333a373163303a3a2f33322d3438203d3e20393439.roa (hash: 6LK6+WlqOLP5gpbUxL0ECja4JoSqlBGfEem+UXN0Qgo=) 5: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: A+n33m7aMq8dWmlNODuImDbmHluR0nRCgY8pOPk9SGU=) 6: 323430333a373163303a3a2f33322d3438203d3e2033323034.roa (hash: eSvbvGPDcUr+ocwGSkgW9nnZf/SqEGxqG96V9bajhp8=) 7: 323430333a373163303a3a2f33322d3438203d3e2039333132.roa (hash: eLasv+9UqopVRClEyZ0ZODLYg5nL2ZOLFSNarmYNCpM=) 8: 323430333a373163303a3a2f33322d3438203d3e2036323333.roa (hash: r7IJNk5W36NlyT5xwrrIyQhZ/n1hIPRKnWb9XkAPbU0=) 9: 323430333a373163303a3a2f33322d3438203d3e2038383838.roa (hash: JLHggQxC+9iTt6z6UnsD8zhFr26juOuaWBaGNU+9kHI=) 10: A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl (hash: rARXVF091SBd59m31UFVvzwJz9aSmKwYzzrmIisv0fs=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:37:0b:64:bc:12:49:a2:35:cf:21:1f:16:e2:a0:8c:8a:37:42:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Sep 21 03:44:58 2026 GMT Not After : Sep 22 07:47:58 2026 GMT Subject: CN=35626329A4E1411020896D2909D687453C811AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:6a:0b:72:cf:d7:5a:ee:b4:9e:96:e6:0d: e2:ee:00:f1:6f:6a:4b:83:3e:fc:e2:77:38:a2:6a: f2:cf:f6:5c:7b:08:09:dd:7e:b8:29:47:27:6b:00: 00:78:91:a0:a8:15:05:e5:57:82:da:a1:56:62:b9: 17:64:a8:ef:2a:e4:8c:c5:3a:22:67:8e:18:cd:08: 29:e9:8c:2e:7c:1c:3f:93:b0:e5:0c:6a:5f:63:36: ca:f0:4f:ea:f9:d6:1e:19:29:9f:de:e3:24:8d:69: 06:fd:1f:e1:70:6a:33:29:4a:a8:b0:71:43:d4:7c: 31:af:27:a0:16:49:09:e9:fe:62:51:7b:ce:27:5c: b8:72:8c:d9:6b:78:22:cf:dc:b3:d2:d5:88:75:92: a2:b5:e8:8f:1a:47:ca:68:a5:ca:b7:b2:fe:e8:e3: 6a:59:06:89:8e:ce:e2:03:09:e6:43:33:2d:bd:99: 35:8a:c8:88:94:a2:ef:44:63:84:54:4b:ac:f6:97: 80:7f:b9:42:f3:bd:f6:7d:da:65:f6:5c:a0:98:35: b3:b0:79:c3:ad:9b:98:e1:89:07:0a:82:90:02:5c: 53:12:a2:f3:8e:2e:75:50:51:e5:bf:e3:b8:7e:68: 83:e4:e3:cd:95:d0:a6:2b:c5:cc:ad:4b:84:ea:94: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:63:29:A4:E1:41:10:20:89:6D:29:09:D6:87:45:3C:81:1A:EC X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2a:90:76:2e:4a:22:42:d2:9c:cc:74:21:88:e0:3c:c8:1c: 18:d7:ec:9a:9e:b8:93:0e:21:3f:ec:a6:9d:28:96:9c:ee:af: b5:b1:ba:69:1f:d0:71:b2:1c:97:d8:c5:f2:c8:f6:0f:84:0a: 7a:f7:37:6e:c1:d8:74:4d:41:9f:c2:fa:49:86:69:76:77:10: 8f:4b:a2:8d:cf:b5:a5:24:c8:45:be:59:2b:76:d3:2a:eb:c0: 2a:c3:7c:28:39:ec:94:e1:e2:5d:fc:93:66:9d:e8:88:ad:ad: 57:28:10:6d:30:15:ea:dc:4c:bf:f9:0a:72:a6:77:d1:e2:4e: ed:9e:d1:4b:4a:be:4b:34:07:d7:f9:f5:67:10:e8:8d:66:0c: 98:e1:04:a7:60:36:50:69:ef:4b:c7:3e:13:fb:56:ef:af:5e: 75:9d:a6:0b:ce:85:0a:15:c1:6a:b8:f6:68:85:6b:80:e1:de: b8:04:dd:3e:70:3d:b8:78:52:22:5a:b9:83:ad:03:5c:7b:4a: 8a:ac:eb:92:cc:23:77:f8:3c:36:30:27:75:11:6c:5b:09:c9: f7:41:0d:5f:e0:75:cd:46:e7:cc:1a:c7:b3:e2:f4:56:33:af: 24:a6:57:57:01:5c:52:88:e9:f9:48:a9:2e:cb:62:7e:4e:14: 49:2d:f4:ae -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUMDcLZLwSSaI1zyEfFuKgjIo3QqwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI2MDkyMTAzNDQ1OFoX DTI2MDkyMjA3NDc1OFowMzExMC8GA1UEAxMoMzU2MjYzMjlBNEUxNDExMDIwODk2 RDI5MDlENjg3NDUzQzgxMUFFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIXpagtyz9da7rSeluYN4u4A8W9qS4M+/OJ3OKJq8s/2XHsICd1+uClHJ2sA AHiRoKgVBeVXgtqhVmK5F2So7yrkjMU6ImeOGM0IKemMLnwcP5Ow5QxqX2M2yvBP 6vnWHhkpn97jJI1pBv0f4XBqMylKqLBxQ9R8Ma8noBZJCen+YlF7zidcuHKM2Wt4 Is/cs9LViHWSorXojxpHymilyrey/ujjalkGiY7O4gMJ5kMzLb2ZNYrIiJSi70Rj hFRLrPaXgH+5QvO99n3aZfZcoJg1s7B5w62bmOGJBwqCkAJcUxKi844udVBR5b/j uH5og+TjzZXQpivFzK1LhOqUyukCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQ1YmMp pOFBECCJbSkJ1odFPIEa7DAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvQTNDRTZFQjUzMUE4OTUxRDI0QTM3REYyN0EwMUVC Mzk2NTFEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEqkHYuSiJC0pzMdCGI4DzIHBjX7JqeuJMO IT/spp0olpzur7Wxumkf0HGyHJfYxfLI9g+ECnr3N27B2HRNQZ/C+kmGaXZ3EI9L oo3PtaUkyEW+WSt20yrrwCrDfCg57JTh4l38k2ad6IitrVcoEG0wFercTL/5CnKm d9HiTu2e0UtKvks0B9f59WcQ6I1mDJjhBKdgNlBp70vHPhP7Vu+vXnWdpgvOhQoV wWq49miFa4Dh3rgE3T5wPbh4UiJauYOtA1x7Soqs65LMI3f4PDYwJ3URbFsJyfdB DV/gdc1G58wax7Pi9FYzrySmV1cBXFKI6flIqS7LYn5OFEkt9K4= -----END CERTIFICATE-----Generated at Mon Sep 21 11:59:09 2026 by rpki-client