
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: wR8RUHb5NkGMj9jgMnuYwu6x9gDRKRM5E7HstDA42tY=
Subject key identifier: 4F:D1:51:56:00:06:CC:ED:74:D8:C8:8E:17:5B:86:2D:71:D9:66:8C
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 53B0FD27492DCBEAB8D6D5355BD35DC05CAAF0BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 099E
Signing time: Wed 25 Mar 2026 12:56:13 +0000
Manifest this update: Wed 25 Mar 2026 12:51:13 +0000
Manifest next update: Thu 26 Mar 2026 15:13:13 +0000
Files and hashes: 1: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
2: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
3: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
4: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
5: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
6: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
7: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
8: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
9: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
10: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
11: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
12: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
13: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
14: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: eEEFnPrw6kNE9owzohAfJSrzQfDeTLXC/snOs0KKTlo=)
15: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
16: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
17: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
18: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
19: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
20: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
21: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
22: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
23: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
24: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
25: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
26: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
27: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
28: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
29: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
30: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
31: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
32: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
33: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 15:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b0:fd:27:49:2d:cb:ea:b8:d6:d5:35:5b:d3:5d:c0:5c:aa:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Mar 25 12:51:13 2026 GMT
Not After : Mar 26 15:13:13 2026 GMT
Subject: CN=4FD151560006CCED74D8C88E175B862D71D9668C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:de:b3:e2:ee:cd:e8:cf:02:84:58:59:77:
aa:a8:50:59:ae:96:98:ef:1e:6b:c4:78:2a:a8:f9:
91:af:3f:f1:9c:9c:5c:9e:f4:b0:2b:61:00:b9:90:
0c:38:a4:93:d6:c7:04:37:ff:c3:15:2d:9b:ca:84:
82:46:2b:48:ae:32:a6:58:a0:1d:fd:40:c5:e3:f3:
54:4a:51:3d:1e:74:e7:b2:70:d9:12:20:ad:3f:ea:
23:cc:c7:0d:91:b3:75:d2:b8:2a:65:6b:a3:2d:f9:
f2:9c:39:76:a0:22:e0:32:4b:68:6c:42:bb:1c:95:
26:92:53:b4:93:fb:33:fd:ed:6b:03:ea:01:25:c5:
a3:d3:63:b4:7b:8f:86:ab:af:72:4b:55:04:6e:05:
6c:e2:36:d7:31:5e:e9:25:53:5d:3d:5e:45:8b:99:
82:1e:61:18:e5:7e:e3:c7:97:99:d2:17:65:ed:53:
f2:10:84:bc:38:3c:b8:b0:8e:75:e6:38:61:31:8d:
28:7c:c7:c7:6f:6b:5e:c5:b8:04:7c:1a:4d:cf:4d:
b1:ce:a0:22:76:23:0e:ea:9a:80:e9:88:9b:a4:53:
2c:61:f2:e7:bc:49:31:59:ab:3f:af:ee:74:4a:a0:
6f:b2:8f:9d:18:b1:b7:f1:6b:88:72:c0:d4:04:46:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:51:56:00:06:CC:ED:74:D8:C8:8E:17:5B:86:2D:71:D9:66:8C
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:2c:10:45:2d:17:1c:9e:a3:f8:49:1a:6e:14:4f:86:fc:
ef:5b:e3:45:fa:89:50:7f:0a:18:f1:7c:91:38:57:7f:f9:2e:
0d:c9:e7:c7:f7:90:18:73:65:d3:11:c2:22:90:68:a8:f2:7b:
a8:ed:d5:0d:3b:f6:d6:a8:07:6e:06:7b:9d:6b:16:ea:c1:19:
33:ff:07:a8:dc:76:7f:1c:38:24:b7:51:e7:0a:b6:d1:c9:4d:
e8:35:40:8d:d5:c7:5a:08:f6:3d:f3:95:1c:9e:8b:b7:5b:98:
e0:30:3a:b7:76:7e:3d:6a:10:9d:c8:ad:09:23:a0:02:55:3c:
40:92:8d:6a:5f:2f:2e:6d:98:95:10:3c:11:52:2e:4e:44:f4:
7c:8a:dd:c8:20:34:52:bc:03:f0:51:7e:24:9f:78:41:89:94:
54:a2:ac:83:d1:c9:d2:45:a9:b0:42:60:7e:b2:3c:c9:72:26:
4c:8d:fb:48:3e:ec:55:24:fc:19:44:2c:17:e6:9f:9f:2d:60:
ec:69:d9:c4:eb:67:cc:5b:b7:23:ab:60:bd:80:19:5c:f7:5c:
42:8f:5e:78:ae:41:20:f9:99:f4:a2:ad:31:8a:80:98:09:53:
02:90:3d:a1:09:a3:89:17:56:08:07:e6:10:5b:d6:5d:89:3c:
9c:72:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:11:53 2026 by rpki-client