
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File: 5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier: aW7W7yZam78EWxvqa1YBf7y+IKzn2JGuTF1oWjo8BZw=
Subject key identifier: 84:C8:70:4E:FA:98:D3:76:F1:03:76:70:67:D7:66:D0:5E:0D:7E:0E
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer: /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial: 24888BA28E879CCC30A5BA8C81C044710F137825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number: 010E
Signing time: Sun 20 Sep 2026 08:19:58 +0000
Manifest this update: Sun 20 Sep 2026 08:14:58 +0000
Manifest next update: Mon 21 Sep 2026 10:17:58 +0000
Files and hashes: 1: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: Nsg1Qt/CB5zpWTylSeuaoy5xoZ4twWN7mnCMMvks2dE=)
2: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (hash: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4=)
3: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (hash: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY=)
4: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
5: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
6: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (hash: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM=)
7: 323430373a396534303a3a2f33322d3438203d3e2039333132.roa (hash: YMJWO7/JGHkml3YyFWU4umkjg98j7BoveCFvevYNLfA=)
8: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (hash: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM=)
9: 323430373a396534303a3a2f33322d3438203d3e2036323333.roa (hash: jMqB1nTZ1LKvgd5chAvocdwe/Wp2mFf6s/+r+y83VW8=)
10: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (hash: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY=)
11: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 10:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:88:8b:a2:8e:87:9c:cc:30:a5:ba:8c:81:c0:44:71:0f:13:78:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Validity
Not Before: Sep 20 08:14:58 2026 GMT
Not After : Sep 21 10:17:58 2026 GMT
Subject: CN=84C8704EFA98D376F103767067D766D05E0D7E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:e8:8f:59:81:93:c6:15:31:ab:c9:92:3c:
07:7d:c6:da:d7:b4:1e:fb:70:7f:fc:84:51:61:2c:
97:1a:24:72:3c:2d:fa:e5:86:e6:13:91:a6:bc:79:
63:9b:52:28:0a:bb:29:4c:3a:56:08:dd:6d:d2:17:
54:bc:df:7b:5c:3f:9b:29:03:fe:24:18:93:03:58:
3a:ed:a9:ff:46:cb:1f:be:ec:2d:95:b4:33:1b:07:
89:ed:4f:ea:21:18:6b:6a:c1:4b:5b:8d:7d:ac:82:
05:69:1c:35:bf:94:02:21:78:c4:3a:e6:f3:c8:e7:
dd:5a:bb:86:49:87:30:1c:16:da:1a:65:70:88:37:
19:bc:b4:4b:62:ef:43:e0:a2:c7:57:99:b1:cd:3a:
71:99:16:81:46:ec:af:a8:64:b2:4c:60:46:ac:5a:
9d:ba:f2:54:eb:32:82:c1:0b:70:4e:5e:7b:35:2b:
3e:95:16:0a:37:63:10:69:61:b6:c0:dc:e5:da:94:
2e:6a:ed:42:6c:ab:88:42:06:86:f9:1f:60:03:12:
17:a7:76:84:5f:4a:6a:df:99:c3:74:cf:15:f2:4d:
ef:c9:8e:0f:9f:a1:c2:dc:51:76:ab:4c:cd:05:28:
b2:8f:77:ec:7e:ef:08:9f:c1:af:3b:b5:c3:5a:aa:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:70:4E:FA:98:D3:76:F1:03:76:70:67:D7:66:D0:5E:0D:7E:0E
X509v3 Authority Key Identifier:
keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:93:38:52:d6:86:6a:ba:54:38:5e:ca:34:d4:c4:73:aa:76:
2e:71:09:39:af:66:32:48:1e:ef:c0:f9:98:fc:a0:5b:7e:7f:
95:66:4d:4f:88:5f:29:3a:d3:a5:77:45:42:c5:3e:81:a4:e6:
bb:fa:78:5d:ba:2e:cf:a5:c9:a7:43:3d:69:cc:12:86:42:87:
69:d4:05:e5:c1:db:5f:d5:49:41:12:87:2d:89:2c:45:b6:33:
0d:a8:46:f9:52:ea:5b:87:0e:41:a5:51:bc:07:46:bf:62:e5:
a5:07:a0:88:2f:63:c9:7d:f6:da:6c:38:bd:7c:0b:fe:1e:fb:
c2:b1:09:89:c3:97:6e:e9:39:db:51:22:20:10:86:a8:2d:65:
7e:8c:9d:67:02:5a:91:06:c1:4c:69:68:73:2b:b5:44:8e:49:
8d:4a:a4:a9:9a:f9:02:2a:46:d0:80:25:12:9e:fb:b5:8f:6c:
8a:e7:46:f1:1b:c0:a6:f7:7a:c8:30:2b:e2:ce:96:bb:a8:d0:
47:9d:da:1c:e5:b6:23:cf:ef:54:1f:48:54:5d:7c:aa:24:2a:
65:24:0c:b8:31:80:a2:9d:ba:c3:46:2a:ca:32:c0:1b:07:3e:
5d:ba:5d:a2:45:61:d9:af:c3:1e:be:9f:d0:fb:67:fb:33:70:
cc:15:ae:88
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUJIiLoo6HnMwwpbqMgcBEcQ8TeCUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz
Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDkyMDA4MTQ1OFoX
DTI2MDkyMTEwMTc1OFowMzExMC8GA1UEAxMoODRDODcwNEVGQTk4RDM3NkYxMDM3
NjcwNjdENzY2RDA1RTBEN0UwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALm06I9ZgZPGFTGryZI8B33G2te0Hvtwf/yEUWEslxokcjwt+uWG5hORprx5
Y5tSKAq7KUw6VgjdbdIXVLzfe1w/mykD/iQYkwNYOu2p/0bLH77sLZW0MxsHie1P
6iEYa2rBS1uNfayCBWkcNb+UAiF4xDrm88jn3Vq7hkmHMBwW2hplcIg3Gby0S2Lv
Q+Cix1eZsc06cZkWgUbsr6hkskxgRqxanbryVOsygsELcE5eezUrPpUWCjdjEGlh
tsDc5dqULmrtQmyriEIGhvkfYAMSF6d2hF9Kat+Zw3TPFfJN78mOD5+hwtxRdqtM
zQUoso937H7vCJ/Brzu1w1qqQMMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSEyHBO
+pjTdvEDdnBn12bQXg1+DjAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN
UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2
MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNjMvNUM2Q0UzODczMzc4ODY5ODlGQjNDM0Q0RTYxODZB
MzcwQjcyOEQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI6TOFLWhmq6VDheyjTUxHOqdi5xCTmvZjJI
Hu/A+Zj8oFt+f5VmTU+IXyk606V3RULFPoGk5rv6eF26Ls+lyadDPWnMEoZCh2nU
BeXB21/VSUEShy2JLEW2Mw2oRvlS6luHDkGlUbwHRr9i5aUHoIgvY8l99tpsOL18
C/4e+8KxCYnDl27pOdtRIiAQhqgtZX6MnWcCWpEGwUxpaHMrtUSOSY1KpKma+QIq
RtCAJRKe+7WPbIrnRvEbwKb3esgwK+LOlruo0Eed2hzltiPP71QfSFRdfKokKmUk
DLgxgKKdusNGKsoywBsHPl26XaJFYdmvwx6+n9D7Z/szcMwVrog=
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:21:25 2026 by rpki-client