$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: 0k1F/FfzHFt6wtrTZNdp+eJcYR+TyGkc3PNcXFv7ZpY= Subject key identifier: BA:0B:48:62:25:6B:48:0D:1E:46:A5:68:70:FF:4D:A8:34:4C:62:B5 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 1052E8605813ECB7951B07EAF13015D04880D07F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 09E1 Signing time: Tue 12 May 2026 11:51:33 +0000 Manifest this update: Tue 12 May 2026 11:46:33 +0000 Manifest next update: Wed 13 May 2026 14:13:33 +0000 Files and hashes: 1: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: R0bk2aOdbHFyd/7IF3BuYyB1BsZUjT7A/I9sb49zAmY=) 2: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 4: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=) 5: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 6: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) 7: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:52:e8:60:58:13:ec:b7:95:1b:07:ea:f1:30:15:d0:48:80:d0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: May 12 11:46:33 2026 GMT Not After : May 13 14:13:33 2026 GMT Subject: CN=BA0B4862256B480D1E46A56870FF4DA8344C62B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:7c:e3:d3:9c:4a:0e:bb:2e:3e:ec:c2:21: cc:35:2d:3a:22:38:f3:e3:f9:94:52:b2:94:05:5e: 3c:a4:59:73:37:f8:a1:63:7e:71:d8:ad:f7:aa:a9: ad:67:e0:a3:0f:f6:13:1b:1f:9c:01:54:eb:f4:4b: 13:1d:c8:0b:aa:0e:00:94:f5:19:16:15:8b:f8:4d: af:38:25:85:d3:75:cf:8d:6c:fe:f4:70:f4:9f:ba: 77:8c:e0:7b:00:e6:8e:61:63:3c:b3:85:9f:c8:88: 3b:ba:1a:7b:88:80:1e:58:d0:be:d1:4d:24:a1:d0: bc:65:ee:44:78:fc:2d:f7:44:26:dd:4f:e6:0e:ab: c2:20:cd:56:10:7e:d8:ad:77:71:01:0d:f7:63:d0: c4:8d:d0:d8:b9:40:48:63:d1:8c:4b:c2:3b:88:4a: ad:6e:54:4f:e9:f8:20:b6:71:5b:a3:11:e1:78:50: 54:21:cf:8d:8e:27:6f:e1:54:e0:98:fe:0f:5b:ff: 18:dc:93:ab:f7:e0:7d:df:e6:e5:37:e4:ee:73:32: 78:5d:99:b1:4e:3c:f4:bb:e0:ac:e9:01:df:66:48: fe:b7:b7:5a:13:b9:29:cb:ec:fe:dc:d0:27:6f:b3: dd:a6:99:ba:0e:b2:74:dc:eb:f0:72:53:42:e3:5b: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0B:48:62:25:6B:48:0D:1E:46:A5:68:70:FF:4D:A8:34:4C:62:B5 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:87:10:22:b1:9a:b4:67:c5:27:b0:a2:ee:7a:9e:5f:ea:1f: 8c:29:31:9b:b6:60:3e:ce:73:f1:40:51:12:1c:e2:d3:da:1f: 08:f5:8c:99:cc:74:fa:05:30:ba:7f:4c:1d:5f:94:ef:d9:cf: 6f:e3:d0:77:ec:d4:85:62:9d:6b:2c:b6:cd:c8:bd:11:08:83: 73:21:13:c8:ca:1f:40:55:8a:2a:b2:79:ee:9f:a5:88:50:ce: 3c:81:d1:2c:6c:2b:41:cc:11:97:d3:03:86:47:5e:79:42:10: 18:4f:14:4e:0e:c3:45:cd:01:93:f1:c5:e6:50:04:f2:80:e8: 94:5f:73:01:85:95:d4:f4:39:e6:2f:c5:03:31:29:d1:1b:84: 62:c9:27:cb:3a:a7:cf:25:a2:bd:46:69:dd:6d:f1:fb:71:0a: c1:35:91:ba:ed:65:c4:08:73:20:f2:ee:09:41:ac:4d:87:58: 0f:73:03:74:7d:41:07:7b:80:ca:51:7f:a3:d8:0e:5f:74:75: 19:2c:7d:2c:99:ef:a8:71:a3:98:f5:77:93:eb:ef:c3:55:9f: 15:f7:51:b3:02:fe:dc:9d:e7:aa:3e:5d:27:ad:d9:0c:ec:f9: 68:bf:a3:5d:87:65:3f:1d:16:d5:76:2a:34:aa:65:9e:f7:f1: a5:5d:4a:ab -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUEFLoYFgT7LeVGwfq8TAV0EiA0H8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDUxMjExNDYzM1oX DTI2MDUxMzE0MTMzM1owMzExMC8GA1UEAxMoQkEwQjQ4NjIyNTZCNDgwRDFFNDZB NTY4NzBGRjREQTgzNDRDNjJCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIvZfOPTnEoOuy4+7MIhzDUtOiI48+P5lFKylAVePKRZczf4oWN+cdit96qp rWfgow/2ExsfnAFU6/RLEx3IC6oOAJT1GRYVi/hNrzglhdN1z41s/vRw9J+6d4zg ewDmjmFjPLOFn8iIO7oae4iAHljQvtFNJKHQvGXuRHj8LfdEJt1P5g6rwiDNVhB+ 2K13cQEN92PQxI3Q2LlASGPRjEvCO4hKrW5UT+n4ILZxW6MR4XhQVCHPjY4nb+FU 4Jj+D1v/GNyTq/fgfd/m5Tfk7nMyeF2ZsU489LvgrOkB32ZI/re3WhO5Kcvs/tzQ J2+z3aaZug6ydNzr8HJTQuNbXHkCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBS6C0hi JWtIDR5GpWhw/02oNExitTAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuHECKxmrRnxSewou56nl/qH4wpMZu2YD7O c/FAURIc4tPaHwj1jJnMdPoFMLp/TB1flO/Zz2/j0Hfs1IVinWssts3IvREIg3Mh E8jKH0BViiqyee6fpYhQzjyB0SxsK0HMEZfTA4ZHXnlCEBhPFE4Ow0XNAZPxxeZQ BPKA6JRfcwGFldT0OeYvxQMxKdEbhGLJJ8s6p88lor1Gad1t8ftxCsE1kbrtZcQI cyDy7glBrE2HWA9zA3R9QQd7gMpRf6PYDl90dRksfSyZ76hxo5j1d5Pr78NVnxX3 UbMC/tyd56o+XSet2Qzs+Wi/o12HZT8dFtV2KjSqZZ738aVdSqs= -----END CERTIFICATE-----Generated at Wed May 13 02:28:11 2026 by rpki-client