$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: rNt95UABiRgJPfE1u8R8AhdqeSaBM75ZK3Z50XhRt/E= Subject key identifier: 49:29:85:11:48:28:57:38:08:36:FD:46:42:42:9F:B1:DD:81:7D:82 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 196103C87DC8FECA6FE4D45981B0B6BA2A54134E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 0AB1 Signing time: Wed 23 Sep 2026 08:49:58 +0000 Manifest this update: Wed 23 Sep 2026 08:44:58 +0000 Manifest next update: Thu 24 Sep 2026 11:25:58 +0000 Files and hashes: 1: 323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa (hash: E4Vla9mTVyy4cCQ80hyemXilIWR1XzkNFgiTj+0GXmo=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa (hash: PLRJaVF0Jd4MzsBLSWEvQcF65VlQI4URu4pK/WVh1RA=) 3: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: KBTRDdUTKb1wx3ijcyxXnaoRLt/cYEeLTCp4PHxHSRA=) 4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: KFvnslCPL4X/LQ69pCWBq5qDUjXjtppzmmhIraVeEMM=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: wp3ums3gGQiHSeOASzDuZJLMnB77wkX449JJWXCY9dk=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa (hash: N/0jPEvGNb25DvrH55KAo4wT1xlr30VbD4rmDHGaE0c=) 7: 323030313a6466343a646438303a3a2f34382d3438203d3e203433393539.roa (hash: 3FyF5WnHjiMki69QSaUUCnhgDmDcrHsssZtUDjCI8Xc=) 8: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 9: 323030313a6466343a646438303a3a2f34382d3438203d3e2036323333.roa (hash: P+DRN1x6WrCoJ1/bJW3ozMaF6OfEUO23SN1Y8pMwFHY=) 10: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: ynOny1uJUNDJNLQfaFn9KT+EKSkm3BPUARRqhnmeOW8=) 11: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa (hash: Sct428YozHYxwSzzijejfY4VQuK7q1QPuNYpBC2I2tk=) 12: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: uJpbUW4JrPXqpwkMTMWdVzPekrlj0XntAcL3muKs+sE=) 13: 323030313a6466343a646438303a3a2f34382d3438203d3e2039333132.roa (hash: sOqxixjklaWO40uc9Yh3uSerFS1KO2El68KsQLHv5XU=) 14: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:61:03:c8:7d:c8:fe:ca:6f:e4:d4:59:81:b0:b6:ba:2a:54:13:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Sep 23 08:44:58 2026 GMT Not After : Sep 24 11:25:58 2026 GMT Subject: CN=49298511482857380836FD4642429FB1DD817D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:fd:b1:36:e2:dd:f4:85:32:fd:d1:35:51: ae:13:5c:fb:f6:20:13:ba:ad:00:9d:79:42:98:f8: 94:3d:1b:45:fd:49:ef:3a:fa:6d:0a:1e:23:9e:33: 93:a4:1b:82:5f:53:5d:e2:22:37:9e:eb:cc:0d:a1: 45:51:36:0f:a0:3e:91:50:20:79:53:43:fa:81:7e: 78:32:43:f5:a5:89:0f:28:42:cf:d0:1d:50:da:89: 33:36:0e:6a:c6:3e:9a:da:46:64:bd:35:53:70:24: e9:89:e9:39:ea:a7:a7:68:95:ae:22:fe:01:85:91: 5f:f8:dc:83:17:75:90:d6:0b:c1:64:c4:a8:3f:4c: b1:ec:0f:ae:c8:b0:56:9e:e7:d2:c9:be:64:9a:d4: ed:76:bc:8d:c9:06:cb:5e:84:b9:65:90:19:4b:44: 2b:f9:4e:3e:48:81:71:37:b3:44:fd:79:d9:ca:40: d8:6d:1e:2d:c8:d0:46:59:57:e3:1b:fc:de:09:c0: 55:aa:0f:4d:1d:05:ca:d7:f0:5d:53:27:43:f0:a2: 8d:aa:ea:32:3c:ff:4c:4c:57:ab:b1:bb:46:6e:f9: 38:7b:42:b0:b7:ee:28:bf:45:93:87:0f:2e:22:59: bb:63:0f:65:24:92:24:43:f6:70:7c:a1:51:ba:2a: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:85:11:48:28:57:38:08:36:FD:46:42:42:9F:B1:DD:81:7D:82 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:32:13:cb:ce:d3:cb:25:d3:6c:fe:e6:30:80:65:8e:cd:61: 2c:5c:cc:0c:38:23:65:57:ef:79:9c:22:72:dd:97:10:d6:20: 6e:b7:2e:f8:fa:09:dc:5a:73:6f:8c:92:4a:9c:ca:31:17:5c: 35:71:e1:5b:a7:48:91:7d:13:77:c5:f7:cb:d7:94:99:f4:bd: b9:d9:7b:53:2e:c8:2b:0e:49:d8:ba:97:f0:d9:6c:46:43:06: 34:fd:88:c7:82:31:2b:ef:ef:c7:7f:08:d3:bb:43:1d:a0:de: 56:3a:22:86:65:9a:ed:16:b9:1e:7e:b6:cc:64:6d:db:b0:18: f2:42:9e:0f:69:b6:6f:9b:3f:75:8f:46:bb:e7:f3:31:f5:fa: ec:8c:84:7f:eb:bc:19:01:d1:3b:47:93:41:23:29:c9:24:19: 74:07:6d:3e:fa:cb:0d:f0:2a:ae:f3:86:2f:c1:23:23:7e:62: d6:3a:b8:db:99:50:80:84:69:c1:49:a6:38:ff:2d:7b:0c:54: d4:42:0c:a5:93:05:94:00:b8:9a:ef:e7:82:d2:59:2b:7e:bf: 97:30:c1:7e:7f:a3:85:9d:11:d6:1c:00:6d:72:f2:24:53:43: 9d:91:b4:5b:32:90:e1:37:b3:8e:a9:cf:6b:74:a8:e7:02:b1: f4:55:31:91 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUGWEDyH3I/spv5NRZgbC2uipUE04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDkyMzA4NDQ1OFoX DTI2MDkyNDExMjU1OFowMzExMC8GA1UEAxMoNDkyOTg1MTE0ODI4NTczODA4MzZG RDQ2NDI0MjlGQjFERDgxN0Q4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMW//bE24t30hTL90TVRrhNc+/YgE7qtAJ15Qpj4lD0bRf1J7zr6bQoeI54z k6Qbgl9TXeIiN57rzA2hRVE2D6A+kVAgeVND+oF+eDJD9aWJDyhCz9AdUNqJMzYO asY+mtpGZL01U3Ak6YnpOeqnp2iVriL+AYWRX/jcgxd1kNYLwWTEqD9MsewPrsiw Vp7n0sm+ZJrU7Xa8jckGy16EuWWQGUtEK/lOPkiBcTezRP152cpA2G0eLcjQRllX 4xv83gnAVaoPTR0FytfwXVMnQ/CijarqMjz/TExXq7G7Rm75OHtCsLfuKL9Fk4cP LiJZu2MPZSSSJEP2cHyhUboqQvsCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRJKYUR SChXOAg2/UZCQp+x3YF9gjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4yE8vO08sl02z+5jCAZY7NYSxczAw4I2VX 73mcInLdlxDWIG63Lvj6Cdxac2+MkkqcyjEXXDVx4VunSJF9E3fF98vXlJn0vbnZ e1MuyCsOSdi6l/DZbEZDBjT9iMeCMSvv78d/CNO7Qx2g3lY6IoZlmu0WuR5+tsxk bduwGPJCng9ptm+bP3WPRrvn8zH1+uyMhH/rvBkB0TtHk0EjKckkGXQHbT76yw3w Kq7zhi/BIyN+YtY6uNuZUICEacFJpjj/LXsMVNRCDKWTBZQAuJrv54LSWSt+v5cw wX5/o4WdEdYcAG1y8iRTQ52RtFsykOE3s46pz2t0qOcCsfRVMZE= -----END CERTIFICATE-----Generated at Wed Sep 23 13:09:20 2026 by rpki-client