$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: D5+4S7Ovt5Tecnvyrcxssn360MWyLULEvWm53oLiF7E= Subject key identifier: 69:0D:C6:C2:65:0C:5B:3A:B6:E2:36:B9:03:E3:00:D8:F3:38:6B:04 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 385533BE4F39F9EA37FC96920F7B81F3AA99918F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 08AB Signing time: Sun 19 Oct 2025 08:43:56 +0000 Manifest this update: Sun 19 Oct 2025 08:38:56 +0000 Manifest next update: Mon 20 Oct 2025 09:13:56 +0000 Files and hashes: 1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: 5aKVEqF4CQ0sEJpSq0LpERs02xrta8fAyt1be/qMC+4=) 3: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: 6RckggK+pEaxAkW3TXPKdsKrEDG19gLAKUj+LhzgyGY=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 5: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 6: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:55:33:be:4f:39:f9:ea:37:fc:96:92:0f:7b:81:f3:aa:99:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Oct 19 08:38:56 2025 GMT Not After : Oct 20 09:13:56 2025 GMT Subject: CN=690DC6C2650C5B3AB6E236B903E300D8F3386B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:fb:c0:79:04:91:32:ee:db:e1:92:e0:7a: d7:d7:b7:39:3f:e7:70:75:86:ca:31:d4:c5:14:e3: 5e:39:80:1f:1e:85:4e:9c:a1:9c:03:92:72:d7:e8: 83:f0:b7:41:c7:b6:64:34:c7:ea:a8:47:16:72:44: 5c:bf:d1:82:00:6c:82:be:f8:44:af:5a:cc:c2:82: 93:e7:b5:c1:bb:8e:34:af:9e:bb:1e:b6:98:9b:d7: c2:e0:79:4f:af:66:99:39:20:f4:ac:a2:71:5c:d2: df:7b:c1:57:47:45:c1:9f:f0:96:f3:c1:09:61:5a: a1:aa:de:cb:14:fb:c2:fe:d5:5d:7e:a5:d4:ef:b3: 9c:82:b8:5f:fa:02:56:28:64:70:0b:83:a8:08:87: 1c:fb:c7:55:63:6b:45:7f:1e:f5:a1:15:5a:03:67: b8:e3:55:3f:fc:db:e6:64:c8:e7:40:06:a0:a6:3b: 93:cc:2d:97:ed:76:a1:06:a9:3f:df:4c:c3:a5:3d: 20:55:74:52:ae:4a:38:a7:59:39:38:26:80:36:b0: 5d:35:17:76:4d:ab:53:fe:cc:f2:4f:b0:13:b9:6f: ed:86:15:7d:f8:38:c0:7f:b6:a5:28:5d:a6:4a:b9: 1c:31:e8:f8:3e:69:2a:12:73:ef:58:1e:3c:e9:5c: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0D:C6:C2:65:0C:5B:3A:B6:E2:36:B9:03:E3:00:D8:F3:38:6B:04 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:15:4b:19:d7:6e:09:49:c4:dc:ad:b5:bd:22:b0:bc:b7:2d: b7:22:0c:87:58:b0:5f:af:1c:b8:d5:ea:ac:2d:ed:c5:0a:0f: 31:95:cd:3f:bd:4b:60:30:05:7c:ff:4b:e0:1a:a8:9b:10:8f: cc:7c:99:c1:f2:fc:53:38:58:be:6a:ae:e6:51:8c:44:76:8d: 87:3d:ed:ea:f9:6a:95:41:c7:fb:df:18:7f:4b:d7:5b:dd:ed: ff:ca:d3:80:a5:fb:05:2f:b8:21:2f:9f:5c:06:00:06:65:44: be:b8:df:f5:ba:85:69:1e:74:69:e6:85:a4:04:27:0f:31:65: 6d:87:db:46:c6:87:e3:b7:22:1e:aa:11:a2:40:48:4e:8a:29: 18:7f:85:87:57:2d:69:58:fc:7e:68:f4:4c:4b:6e:66:4a:58: eb:32:4b:8e:54:e1:68:a6:37:12:cd:be:6d:e8:84:f5:91:e0: 43:4f:f6:5d:a0:06:1b:6c:18:fa:ab:96:70:e4:de:7a:23:bc: d3:3f:aa:d4:3a:05:bf:cb:32:4e:66:93:89:a9:03:21:a5:66: c6:99:69:4e:da:ba:4b:e3:4a:c7:59:57:33:f5:b6:ac:69:30: 39:07:70:b9:39:99:34:85:25:6d:f8:70:de:5c:27:92:2a:b1: 2a:4b:96:6b -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUOFUzvk85+eo3/JaSD3uB86qZkY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI1MTAxOTA4Mzg1NloX DTI1MTAyMDA5MTM1NlowMzExMC8GA1UEAxMoNjkwREM2QzI2NTBDNUIzQUI2RTIz NkI5MDNFMzAwRDhGMzM4NkIwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmm+8B5BJEy7tvhkuB619e3OT/ncHWGyjHUxRTjXjmAHx6FTpyhnAOSctfo g/C3Qce2ZDTH6qhHFnJEXL/RggBsgr74RK9azMKCk+e1wbuONK+eux62mJvXwuB5 T69mmTkg9KyicVzS33vBV0dFwZ/wlvPBCWFaoareyxT7wv7VXX6l1O+znIK4X/oC VihkcAuDqAiHHPvHVWNrRX8e9aEVWgNnuONVP/zb5mTI50AGoKY7k8wtl+12oQap P99Mw6U9IFV0Uq5KOKdZOTgmgDawXTUXdk2rU/7M8k+wE7lv7YYVffg4wH+2pShd pkq5HDHo+D5pKhJz71gePOlctOUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRpDcbC ZQxbOrbiNrkD4wDY8zhrBDAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsVSxnXbglJxNyttb0isLy3LbciDIdYsF+v HLjV6qwt7cUKDzGVzT+9S2AwBXz/S+AaqJsQj8x8mcHy/FM4WL5qruZRjER2jYc9 7er5apVBx/vfGH9L11vd7f/K04Cl+wUvuCEvn1wGAAZlRL643/W6hWkedGnmhaQE Jw8xZW2H20bGh+O3Ih6qEaJASE6KKRh/hYdXLWlY/H5o9ExLbmZKWOsyS45U4Wim NxLNvm3ohPWR4ENP9l2gBhtsGPqrlnDk3nojvNM/qtQ6Bb/LMk5mk4mpAyGlZsaZ aU7aukvjSsdZVzP1tqxpMDkHcLk5mTSFJW34cN5cJ5IqsSpLlms= -----END CERTIFICATE-----Generated at Sun Oct 19 23:17:20 2025 by rpki-client