$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft File: E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json) Hash identifier: HFz4Wy2VSOsxyRG2V57fd3JIFaIPr486O0lT1nLp5po= Subject key identifier: 69:34:9B:91:BC:08:C4:8A:8D:0A:30:33:34:5C:22:23:74:56:FA:32 Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 Certificate issuer: /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Certificate serial: 13ECF46AA6FC63A14586488AD3038D523BEEF578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft Manifest number: 098E Signing time: Fri 27 Mar 2026 18:51:31 +0000 Manifest this update: Fri 27 Mar 2026 18:46:31 +0000 Manifest next update: Sat 28 Mar 2026 20:47:31 +0000 Files and hashes: 1: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: xUy5cFON807sFTQb875/AN8+p+EeNdHQ6S4E7/qLImA=) 2: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=) 3: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=) 4: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=) 5: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=) 6: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ec:f4:6a:a6:fc:63:a1:45:86:48:8a:d3:03:8d:52:3b:ee:f5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190 Validity Not Before: Mar 27 18:46:31 2026 GMT Not After : Mar 28 20:47:31 2026 GMT Subject: CN=69349B91BC08C48A8D0A3033345C22237456FA32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:e3:83:95:97:c4:f0:81:e2:3b:63:cc:ba: 94:e3:ca:e1:c1:8c:e6:b8:2b:c6:17:a0:82:23:c2: 1a:a3:db:c2:ce:2d:0a:4e:58:36:a8:58:27:0f:36: 57:67:cb:01:35:3f:84:68:17:dd:02:83:06:d9:27: 64:95:6e:95:08:41:53:54:e1:85:e8:db:72:15:9c: 79:a3:00:46:92:9b:70:02:c1:0a:dd:6e:91:32:4d: a0:c1:91:6b:94:36:b0:ee:3b:41:f2:6d:bd:de:d3: 21:1d:ae:95:9c:e2:c9:89:46:05:6d:4c:f3:b6:ae: 76:0c:88:14:f1:92:2c:03:3c:20:f9:a6:d7:6d:44: be:77:d1:cb:19:fb:7b:c2:57:28:82:a1:e6:96:7f: d7:a8:62:00:a1:65:d3:97:c2:e8:82:9d:1d:a0:42: 07:79:3d:39:ec:2a:b5:50:c4:97:a7:44:12:ba:d9: 81:d7:3f:21:a1:e2:ba:08:7b:36:ca:74:bd:23:ac: 8f:c4:39:48:6f:b7:47:e8:c5:44:c3:9d:3d:a9:9b: 94:16:d2:69:98:13:49:a8:2a:c2:40:f1:76:8f:0d: 33:6c:8d:b5:11:d2:32:30:fb:74:b5:9e:6e:42:8d: 9b:bd:21:0d:51:06:9d:ab:1e:84:cf:ac:9d:da:b6: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:9B:91:BC:08:C4:8A:8D:0A:30:33:34:5C:22:23:74:56:FA:32 X509v3 Authority Key Identifier: keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a9:86:29:30:03:8e:e8:ba:d1:29:56:0a:e2:25:7b:e0:9a: 7b:64:d6:6d:b0:cb:82:cd:40:ad:b2:41:d6:7c:9b:e9:23:db: d1:d0:07:f8:e5:3f:34:c2:12:ab:38:05:c8:7c:02:9c:ab:24: 96:65:3f:02:70:b4:85:a2:44:70:47:e2:77:02:42:d5:28:73: b1:45:37:9e:ef:40:62:86:bb:b9:9a:a7:4b:72:60:02:7c:40: 76:07:64:9a:69:62:ef:06:fa:ba:88:8d:55:92:5f:07:1d:b3: 62:76:3b:01:47:01:19:45:1d:e9:b0:a2:6f:1c:79:e7:62:21: a0:c9:7a:9d:0d:47:5d:86:18:8c:87:83:3f:1f:1f:d7:d7:80: ee:e0:06:81:38:96:b3:60:76:c2:be:b5:21:82:14:d2:16:a3: 01:9c:9f:91:32:ab:dd:43:aa:ea:9d:9a:3f:b9:6e:dc:c1:28: 55:b5:ee:ed:f8:33:fb:6b:2c:39:a7:47:06:6a:8d:70:97:8b: ee:10:40:59:61:b4:ab:ee:06:02:83:13:83:16:38:26:17:98: 4d:71:21:cc:f3:1b:b8:d1:6e:eb:da:04:1d:54:c2:85:03:40: 0c:fb:0a:af:1d:50:45:2d:7c:69:77:ea:2a:2c:58:e9:1f:9b: c7:f2:01:7d -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUE+z0aqb8Y6FFhkiK0wONUjvu9XgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxM0ZGRTkwMDAwMTEwLwYDVQQFEyhFOUJGRTAyMTVC ODRGNDQ5RDBCQjU1RjM3QjJENjE2MEQ0NjRDMTkwMB4XDTI2MDMyNzE4NDYzMVoX DTI2MDMyODIwNDczMVowMzExMC8GA1UEAxMoNjkzNDlCOTFCQzA4QzQ4QThEMEEz MDMzMzQ1QzIyMjM3NDU2RkEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhi44OVl8TwgeI7Y8y6lOPK4cGM5rgrxheggiPCGqPbws4tCk5YNqhYJw82 V2fLATU/hGgX3QKDBtknZJVulQhBU1ThhejbchWceaMARpKbcALBCt1ukTJNoMGR a5Q2sO47QfJtvd7TIR2ulZziyYlGBW1M87audgyIFPGSLAM8IPmm121EvnfRyxn7 e8JXKIKh5pZ/16hiAKFl05fC6IKdHaBCB3k9OewqtVDEl6dEErrZgdc/IaHiugh7 Nsp0vSOsj8Q5SG+3R+jFRMOdPamblBbSaZgTSagqwkDxdo8NM2yNtRHSMjD7dLWe bkKNm70hDVEGnasehM+sndq2XfECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRpNJuR vAjEio0KMDM0XCIjdFb6MjAfBgNVHSMEGDAWgBTpv+AhW4T0SdC7VfN7LWFg1GTB kDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQzL0U5QkZFMDIxNUI4NEY0NDlEMEJCNTVGMzdC MkQ2MTYwRDQ2NEMxOTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyLzZiX2dJVnVFOUVuUXUxWHpleTFoWU5Sa3daQS5j ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDMvRTlCRkUwMjE1Qjg0RjQ0OUQwQkI1NUYzN0IyRDYx NjBENDY0QzE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOphikwA47outEpVgriJXvgmntk1m2wy4LN QK2yQdZ8m+kj29HQB/jlPzTCEqs4Bch8ApyrJJZlPwJwtIWiRHBH4ncCQtUoc7FF N57vQGKGu7map0tyYAJ8QHYHZJppYu8G+rqIjVWSXwcds2J2OwFHARlFHemwom8c eediIaDJep0NR12GGIyHgz8fH9fXgO7gBoE4lrNgdsK+tSGCFNIWowGcn5Eyq91D quqdmj+5btzBKFW17u34M/trLDmnRwZqjXCXi+4QQFlhtKvuBgKDE4MWOCYXmE1x IczzG7jRbuvaBB1UwoUDQAz7Cq8dUEUtfGl36iosWOkfm8fyAX0= -----END CERTIFICATE-----Generated at Sat Mar 28 08:40:37 2026 by rpki-client