
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File: 5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier: KPHRj/bSqGNx10aeKyo49xMZb2p7jUv82RCiaFGWl0E=
Subject key identifier: DB:D1:88:A7:C3:F4:A1:1A:88:D6:54:47:FE:13:B0:E7:9F:C6:79:5F
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial: 716BC03FC24A5E554C6E62E67B94800EBFABA6D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number: C1
Signing time: Tue 28 Jul 2026 03:59:57 +0000
Manifest this update: Tue 28 Jul 2026 03:54:57 +0000
Manifest next update: Wed 29 Jul 2026 06:11:57 +0000
Files and hashes: 1: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
2: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: Nh9Tw1Ohvei6O7UaOJFtmhxrXlDI8MQuAuyU315nYjI=)
3: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (hash: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM=)
4: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
5: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (hash: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM=)
6: 323430373a396534303a3a2f33322d3438203d3e2039333132.roa (hash: YMJWO7/JGHkml3YyFWU4umkjg98j7BoveCFvevYNLfA=)
7: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (hash: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY=)
8: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (hash: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4=)
9: 323430373a396534303a3a2f33322d3438203d3e2036323333.roa (hash: jMqB1nTZ1LKvgd5chAvocdwe/Wp2mFf6s/+r+y83VW8=)
10: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (hash: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY=)
11: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 06:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6b:c0:3f:c2:4a:5e:55:4c:6e:62:e6:7b:94:80:0e:bf:ab:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Validity
Not Before: Jul 28 03:54:57 2026 GMT
Not After : Jul 29 06:11:57 2026 GMT
Subject: CN=DBD188A7C3F4A11A88D65447FE13B0E79FC6795F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:43:b2:d8:6a:83:7d:40:52:ec:6f:7e:98:e9:
8f:cf:f0:c1:c9:61:3b:ac:f6:73:38:9b:d7:3d:6e:
da:8f:35:93:bc:fd:79:a4:b3:46:41:13:86:d2:b7:
7b:be:0e:8f:82:c5:70:5d:b1:cf:5d:c0:91:ed:12:
e3:63:86:87:e1:64:6b:5a:b0:ca:c2:70:6f:73:b0:
54:72:21:89:c5:33:f8:ff:fd:16:e8:69:38:6c:c8:
11:02:2c:f4:10:2d:da:56:88:0a:99:f4:3f:9b:6f:
64:b7:a4:65:f1:e4:1b:bf:02:a7:0b:c6:2f:d0:8a:
56:6f:ec:12:9c:0e:e7:a5:8f:31:eb:0b:01:c3:89:
22:86:e8:8b:ce:d3:30:71:72:a1:f7:29:fd:c9:4e:
7e:cc:8a:19:28:ad:a8:0a:5b:28:7d:e9:65:31:0f:
24:65:11:5a:5c:b0:fb:8d:b0:04:82:c8:6d:02:87:
8c:99:93:84:1e:00:60:37:b0:b4:a7:25:6b:fd:c9:
15:1f:37:88:ef:22:23:50:d1:29:77:31:d9:38:96:
f2:45:65:e4:cb:d2:2b:bb:9a:0e:1c:a3:c9:d7:b5:
12:3e:3c:a7:ea:5f:41:92:f6:44:dd:1d:e9:97:29:
b9:19:f1:56:ba:af:6b:d7:03:c2:f4:98:24:58:1f:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:88:A7:C3:F4:A1:1A:88:D6:54:47:FE:13:B0:E7:9F:C6:79:5F
X509v3 Authority Key Identifier:
keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:2b:e0:6e:74:96:d8:8b:c6:08:dc:9b:30:10:60:c4:f3:6d:
e0:52:31:1b:a9:90:7f:4a:2c:e5:c6:18:61:c2:c4:d8:0b:b6:
7f:28:5e:36:08:5e:1f:48:1d:0f:1a:ea:58:79:49:e1:23:16:
c6:c5:c1:b2:8c:53:e5:a8:3d:34:9a:22:92:bd:b5:c5:28:e7:
9b:db:a4:df:b0:3a:34:a8:88:04:e0:81:fd:7d:8b:df:4c:5f:
7f:1d:c9:37:39:b2:2f:10:01:05:9d:26:b2:c3:d3:dc:cd:e1:
bb:07:21:f1:1a:b1:62:67:d3:0e:23:50:87:6a:0e:33:cd:17:
68:64:7f:9d:e6:77:f4:cc:a1:70:6e:c4:52:50:32:d1:9d:7c:
44:99:c8:1f:e7:b9:b5:06:6d:a9:aa:2a:0a:6b:2f:15:0a:07:
be:1d:00:51:80:3f:c9:a7:9b:c1:e1:ff:55:17:0f:8d:64:47:
af:b2:2a:f7:7e:07:6a:21:79:84:bd:80:4c:07:85:41:e0:a8:
e2:5e:36:75:7b:47:c6:e2:cb:35:0f:02:1b:18:60:a0:fd:66:
47:a7:1d:92:9f:96:3f:10:fd:dc:19:76:0e:d2:09:d3:ba:c0:
ba:68:6a:7c:68:46:4e:b3:68:b8:c7:2e:fb:28:9a:5a:a7:6c:
2d:e0:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:50 2026 by rpki-client